$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa File: ea5646e1-1195-382d-8eec-de8a18c25b3c.roa (raw, json) Hash identifier: 5NqZnGbEUM6c9KNELBGLnMmaTjSRBEkxyy6HK0vbHas= Subject key identifier: B7:E1:65:D6:78:7D:F4:3D:03:7C:4E:31:E1:F2:51:F9:31:C9:6F:F2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C06526322CA597AB6F84C Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 199.182.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:06:52:63:22:ca:59:7a:b6:f8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8f6ba0a4-c6a9-4e2a-9bee-c02da23a2658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:60:b0:88:c3:eb:85:5f:66:03:4e:75:c2: ab:04:02:ff:48:dc:f0:bf:8d:03:7c:7a:ec:42:35: ee:ea:4d:10:54:ed:4d:06:91:db:6a:e7:6b:56:4c: 56:3d:1b:b0:88:b3:1a:18:76:9b:f8:85:10:63:39: a1:99:50:ee:17:bd:16:6d:37:c8:7a:4e:ad:5a:1f: 9f:36:52:fb:68:b7:37:f6:85:be:cc:68:02:3c:fb: b0:5e:b6:cb:ae:ef:f1:86:43:69:88:f8:f6:f9:87: 1e:eb:28:62:64:2e:84:b2:ef:74:30:dc:29:8a:f1: 5b:90:0f:f6:2c:60:6f:5b:80:b4:9f:d2:59:0e:3c: bc:c3:66:0e:f5:09:a9:4d:e8:61:1a:b3:b4:6d:42: 19:4c:a6:ce:96:e2:d2:d5:f0:2c:9b:ae:1c:47:0f: a9:ba:28:63:70:a2:a2:6f:50:15:6b:87:76:f7:30: b0:be:71:41:53:cd:10:04:6a:21:f1:f9:f5:d6:35: 94:a3:c4:61:ff:02:e0:65:17:34:3e:5a:0f:92:94: f8:19:6b:78:b2:29:0b:55:a5:26:f1:bc:3a:ff:fb: 15:dc:b2:39:4f:2f:e2:b5:0d:9e:ab:52:42:fb:85: f6:a8:e9:51:ee:6f:61:3a:b6:d9:50:75:06:b3:99: 46:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E1:65:D6:78:7D:F4:3D:03:7C:4E:31:E1:F2:51:F9:31:C9:6F:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c2:f6:3f:b9:a6:21:80:34:ed:4a:c5:1d:a8:6f:c4:70:75: 4a:22:c6:8e:62:bb:c0:81:4f:7a:ba:3c:08:5d:52:c8:93:cb: 58:20:43:61:bc:50:5b:d4:b6:f5:3f:4a:04:e8:96:c8:f3:bd: 46:7b:dd:db:0a:d7:d1:6e:90:b3:f3:05:37:f8:d6:b5:3e:be: 43:4a:f1:d6:51:a1:5c:ad:74:7d:70:f0:e2:9c:8a:9e:06:22: 6e:c3:43:89:15:f3:d1:61:d4:6c:e7:4d:0f:fa:45:e2:3c:f6: c4:ce:26:98:62:93:ce:a0:5b:86:b9:1e:9d:74:9b:62:6f:f4: 59:b9:84:f9:b8:2b:e5:cf:c8:6f:df:db:52:2a:08:0c:b7:a7: ac:d7:9e:bc:45:0e:06:91:4a:09:05:3d:9e:6d:90:48:bb:92: 88:0f:8e:f7:3d:9d:7d:c3:42:4b:e9:c1:da:4d:56:d5:8f:c9: a4:ae:eb:8b:6f:29:4c:d3:bb:b1:10:90:67:b0:2c:99:a3:95: 5f:1a:01:c6:0b:5c:d2:c7:eb:d9:87:32:15:14:78:ed:1c:a5: 97:ca:98:fa:b7:bd:74:e6:dd:f7:5a:b0:93:0f:1f:cd:d4:1c: d8:52:ed:2e:ba:aa:91:0b:90:8b:5e:fa:9b:ef:15:ae:9b:64: a1:5f:d4:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnAZSYyLKWXq2+EwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGY2YmEwYTQtYzZhOS00ZTJhLTliZWUtYzAyZGEyM2EyNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0ZgsIjD64VfZgNOdcKrBAL/SNzwv40DfHrs QjXu6k0QVO1NBpHbaudrVkxWPRuwiLMaGHab+IUQYzmhmVDuF70WbTfIek6tWh+f NlL7aLc39oW+zGgCPPuwXrbLru/xhkNpiPj2+Yce6yhiZC6Esu90MNwpivFbkA/2 LGBvW4C0n9JZDjy8w2YO9QmpTehhGrO0bUIZTKbOluLS1fAsm64cRw+puihjcKKi b1AVa4d29zCwvnFBU80QBGoh8fn11jWUo8Rh/wLgZRc0PloPkpT4GWt4sikLVaUm 8bw6//sV3LI5Ty/itQ2eq1JC+4X2qOlR7m9hOrbZUHUGs5lGswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfhZdZ4ffQ9A3xOMeHyUfkxyW/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWE1NjQ2ZTEtMTE5NS0z ODJkLThlZWMtZGU4YTE4YzI1YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3C9j+5piGANO1KxR2ob8RwdUoixo5iu8CBT3q6PAhdUsiTy1ggQ2G8 UFvUtvU/SgTolsjzvUZ73dsK19FukLPzBTf41rU+vkNK8dZRoVytdH1w8OKcip4G Im7DQ4kV89Fh1GznTQ/6ReI89sTOJphik86gW4a5Hp10m2Jv9Fm5hPm4K+XPyG/f 21IqCAy3p6zXnrxFDgaRSgkFPZ5tkEi7kogPjvc9nX3DQkvpwdpNVtWPyaSu64tv KUzTu7EQkGewLJmjlV8aAcYLXNLH69mHMhUUeO0cpZfKmPq3vXTm3fdasJMPH83U HNhS7S66qpELkIte+pvvFa6bZKFf1GI= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:51 2026 by rpki-client