$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5da2668-43f2-39e1-bc17-28278be8296e.roa File: e5da2668-43f2-39e1-bc17-28278be8296e.roa (raw, json) Hash identifier: CubPIIapmpCWDdfYYSv5/mZwXQ9vw3TVtedvj2U0pbk= Subject key identifier: 6F:BE:F0:EA:3F:1B:33:94:3C:3F:3C:88:FA:AA:BE:56:8A:C8:7C:E1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49884663FA3C4CA91F13E680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5da2668-43f2-39e1-bc17-28278be8296e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 199.253.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:46:63:fa:3c:4c:a9:1f:13:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fa115ff7-bfe2-42e1-8205-07f5e3fb275d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:07:af:0e:70:e5:d6:4c:74:d4:11:f7:03:c5: ff:5f:d1:59:2d:2f:54:5b:f0:b8:1a:48:4d:84:80: 75:f4:14:2e:27:a3:3b:74:f7:7a:5f:db:84:9a:a7: fb:2a:63:91:91:07:68:97:12:0d:77:08:52:40:dc: 35:6f:f1:69:89:20:66:63:2d:d5:b6:3a:fc:b4:87: 27:f7:80:f5:b4:c2:2b:25:5c:0a:ef:bd:9c:b3:f5: c9:3d:3c:aa:c3:53:0d:53:da:e7:5a:9b:32:4c:15: 38:9a:38:62:9a:21:91:6f:b7:66:3e:e0:d8:6b:a1: 59:7c:2f:25:45:62:37:77:64:d0:60:38:34:3a:26: 4c:0e:12:3e:ad:9d:58:0b:b0:d8:c6:24:25:23:75: fc:a2:64:5e:90:4a:19:f7:4b:03:b1:50:35:1c:aa: a3:0a:25:55:26:20:d3:4a:e5:71:0b:ba:27:61:dd: b6:62:6b:f7:77:b2:9e:52:7b:b2:41:35:fc:7e:5a: c2:38:59:1b:6c:6d:d4:9c:0a:6f:a4:c7:68:22:6c: 93:97:0c:7f:b8:29:61:6c:60:5a:11:16:e5:d3:86: 5e:70:ce:55:88:56:9d:d4:1c:ea:b8:99:1d:da:62: 2d:86:8d:7a:05:95:6a:00:e5:31:d0:d0:cc:ea:bf: b4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BE:F0:EA:3F:1B:33:94:3C:3F:3C:88:FA:AA:BE:56:8A:C8:7C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5da2668-43f2-39e1-bc17-28278be8296e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:46:01:25:a7:9f:e6:94:36:90:5a:d9:2f:14:b6:87:f7:eb: 1c:26:11:fb:34:82:cb:4a:ec:00:a9:04:b3:1f:df:fd:28:4c: 64:e7:0a:b6:60:5c:25:29:23:7f:d8:3d:cc:22:ed:9a:75:66: 98:36:31:5c:91:51:25:b2:20:7e:94:2b:ae:15:d1:59:82:86: cd:1e:59:90:c1:93:fe:1f:4a:53:77:d3:76:0f:d9:0e:54:ce: e8:ae:91:0d:c7:1a:34:e4:5f:42:f1:a7:58:bb:c7:6e:25:44: de:e3:9c:ad:80:85:4e:c5:f8:d9:ce:41:75:10:43:06:5f:94: eb:c8:8c:45:f1:40:5d:7c:27:ae:ce:93:84:ee:22:45:c4:53: a9:b9:58:87:b7:9a:8a:8b:9f:ae:d0:af:6f:c9:18:be:bb:19: 98:38:40:d1:92:85:e5:d1:f5:30:3d:b5:1b:7b:81:9d:03:1e: b6:be:39:07:27:fd:2e:03:bf:dc:63:5c:68:89:b6:2c:39:4d: 2c:c3:0a:37:7e:36:0d:f8:ba:44:8c:78:2b:08:9b:e3:12:42: c0:b0:72:b9:30:d0:9d:5d:b7:16:c8:cc:28:56:2c:8d:6e:4b: 29:55:86:51:55:8a:c3:ed:cc:e2:ae:12:4e:bf:54:70:a6:79: a8:6b:ff:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiEZj+jxMqR8T5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmExMTVmZjctYmZlMi00MmUxLTgyMDUtMDdmNWUzZmIyNzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wevDnDl1kx01BH3A8X/X9FZLS9UW/C4GkhN hIB19BQuJ6M7dPd6X9uEmqf7KmORkQdolxINdwhSQNw1b/FpiSBmYy3Vtjr8tIcn 94D1tMIrJVwK772cs/XJPTyqw1MNU9rnWpsyTBU4mjhimiGRb7dmPuDYa6FZfC8l RWI3d2TQYDg0OiZMDhI+rZ1YC7DYxiQlI3X8omRekEoZ90sDsVA1HKqjCiVVJiDT SuVxC7onYd22Ymv3d7KeUnuyQTX8flrCOFkbbG3UnApvpMdoImyTlwx/uClhbGBa ERbl04ZecM5ViFad1BzquJkd2mItho16BZVqAOUx0NDM6r+0WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG++8Oo/GzOUPD88iPqqvlaKyHzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTVkYTI2NjgtNDNmMi0z OWUxLWJjMTctMjgyNzhiZTgyOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpGASWnn+aUNpBa2S8Utof36xwmEfs0gstK7ACpBLMf3/0oTGTnCrZg XCUpI3/YPcwi7Zp1Zpg2MVyRUSWyIH6UK64V0VmChs0eWZDBk/4fSlN303YP2Q5U zuiukQ3HGjTkX0Lxp1i7x24lRN7jnK2AhU7F+NnOQXUQQwZflOvIjEXxQF18J67O k4TuIkXEU6m5WIe3moqLn67Qr2/JGL67GZg4QNGSheXR9TA9tRt7gZ0DHra+OQcn /S4Dv9xjXGiJtiw5TSzDCjd+Ng34ukSMeCsIm+MSQsCwcrkw0J1dtxbIzChWLI1u SylVhlFVisPtzOKuEk6/VHCmeahr/+Q= -----END CERTIFICATE-----Generated at Fri Sep 25 20:14:03 2026 by rpki-client