$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa File: f25e2b6a-11b7-35e3-a462-57f557c7d879.roa (raw, json) Hash identifier: GWyEM9cP22N5mcYNzrYNgSdHN9Z82CkGS6bzkuE9ygI= Subject key identifier: DC:00:81:EF:A8:9D:6E:8C:AB:8D:B5:A1:1B:20:28:C5:AE:B0:C4:0A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C366BB1670C114F6FA7C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 199.254.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:36:6b:b1:67:0c:11:4f:6f:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=14d1b800-029a-4b67-8d52-d7ae41213ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:97:99:70:bf:5c:85:6f:42:a4:96:c4:51:cb: 50:5a:d6:cb:d8:89:b9:b4:6f:73:22:f5:e4:38:82: 33:9d:38:0f:78:51:a2:71:cf:a8:1c:25:d6:1d:73: 6e:0c:0e:0c:3b:e4:67:fb:8e:a7:45:87:87:f8:12: ec:81:05:7b:34:4a:63:cf:d0:27:3f:0d:77:02:ba: ba:91:17:8f:08:54:01:ba:3c:2b:dd:50:7b:54:7c: 96:bf:58:2d:83:fd:97:7d:62:e5:44:f3:e0:81:8d: 27:e0:8d:bd:69:a8:5a:6b:b3:7b:bf:35:17:af:94: 16:de:41:80:be:4d:45:b2:ec:a5:98:7b:70:ca:78: cb:db:00:58:da:3f:f9:a8:19:71:5e:d0:a7:0f:14: 96:29:44:4b:1e:87:40:67:c3:fa:ac:3f:a2:39:94: b9:fe:cb:00:62:dc:e5:ac:0b:4c:60:4d:d0:95:ca: a4:2f:49:e4:73:5b:2e:d2:a5:ca:fe:b0:cf:4b:f7: 32:aa:0a:1b:0c:22:ae:e4:09:22:ad:b8:64:0c:dc: db:89:ff:d3:14:7d:39:9d:1f:c7:cb:02:dd:29:24: 74:06:03:50:25:ca:7a:29:02:55:3c:6d:46:d1:f2: 45:80:0c:7f:2e:c9:ef:e4:0a:9f:11:9c:f8:ac:66: a2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:00:81:EF:A8:9D:6E:8C:AB:8D:B5:A1:1B:20:28:C5:AE:B0:C4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:66:e7:a5:cb:4f:73:7e:78:60:72:1a:79:ff:54:c3:6f:84: 45:fd:da:e4:6a:17:74:76:ce:f1:c0:67:ac:97:8b:76:05:c8: 67:1b:2e:16:61:e1:46:d0:e8:81:ca:1e:f7:41:4e:62:38:36: c3:87:f8:6e:f2:e2:10:08:1c:ce:e9:26:83:40:a6:07:2c:ce: 5f:a6:e9:d9:66:e4:b6:97:90:8a:ce:08:1c:a9:2f:2e:ea:a7: a5:5c:14:90:dc:b7:32:0f:79:87:f2:6c:88:75:0f:69:10:2d: a1:3a:5e:88:e8:d6:72:f8:11:38:4c:99:97:cd:ea:f1:ad:db: fb:7a:2f:f0:03:12:57:3a:c8:d4:90:1b:01:75:97:39:5b:ad: be:57:41:d0:0f:af:3d:5b:3f:58:c9:86:37:e3:d2:e5:bb:fa: d6:bb:ff:f5:21:22:a2:fd:78:9c:35:9e:d1:95:31:20:c5:af: 54:b0:e9:a2:ad:b5:f1:35:d2:51:49:71:87:1e:67:a8:6e:a9: 0c:51:e2:c3:86:f4:62:5b:a6:b4:20:48:d3:6a:06:65:10:70: 34:55:75:f1:b6:4e:32:ff:e2:39:f3:58:1b:bb:68:e8:00:16: 71:96:f3:3c:41:ef:27:71:04:6e:81:3f:31:11:2f:31:6b:33: 2b:d5:b4:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnDZrsWcMEU9vp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTRkMWI4MDAtMDI5YS00YjY3LThkNTItZDdhZTQxMjEzYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJeZcL9chW9CpJbEUctQWtbL2Im5tG9zIvXk OIIznTgPeFGicc+oHCXWHXNuDA4MO+Rn+46nRYeH+BLsgQV7NEpjz9AnPw13Arq6 kRePCFQBujwr3VB7VHyWv1gtg/2XfWLlRPPggY0n4I29aahaa7N7vzUXr5QW3kGA vk1FsuylmHtwynjL2wBY2j/5qBlxXtCnDxSWKURLHodAZ8P6rD+iOZS5/ssAYtzl rAtMYE3QlcqkL0nkc1su0qXK/rDPS/cyqgobDCKu5AkirbhkDNzbif/TFH05nR/H ywLdKSR0BgNQJcp6KQJVPG1G0fJFgAx/Lsnv5AqfEZz4rGai3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwAge+onW6Mq421oRsgKMWusMQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjI1ZTJiNmEtMTFiNy0z NWUzLWE0NjItNTdmNTU3YzdkODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVm56XLT3N+eGByGnn/VMNvhEX92uRqF3R2zvHAZ6yXi3YFyGcbLhZh 4UbQ6IHKHvdBTmI4NsOH+G7y4hAIHM7pJoNApgcszl+m6dlm5LaXkIrOCBypLy7q p6VcFJDctzIPeYfybIh1D2kQLaE6Xojo1nL4EThMmZfN6vGt2/t6L/ADElc6yNSQ GwF1lzlbrb5XQdAPrz1bP1jJhjfj0uW7+ta7//UhIqL9eJw1ntGVMSDFr1Sw6aKt tfE10lFJcYceZ6huqQxR4sOG9GJbprQgSNNqBmUQcDRVdfG2TjL/4jnzWBu7aOgA FnGW8zxB7ydxBG6BPzERLzFrMyvVtJo= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:47 2026 by rpki-client