$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa File: 038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa (raw, json) Hash identifier: qLD0/ixbt6LntJTG2l8ekv3bA0zTE/BtRqZkPN9UJXY= Subject key identifier: CF:58:CB:66:6C:63:DB:38:8F:CD:57:ED:EC:14:61:EE:D1:B0:CF:14 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4974CFF3BED1E73AC8B73780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207266 IP address blocks: 199.249.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:cf:f3:be:d1:e7:3a:c8:b7:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f41af670-3f9e-4a0a-9f1e-6b1cdc1d37ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c7:34:72:f6:d4:35:a3:45:1b:af:5c:64:dc: b1:01:7d:ba:6b:0f:26:b4:3d:e6:61:12:df:dd:82: 25:8d:c4:22:c9:6e:45:94:3c:1a:75:7d:2e:89:6c: 69:b9:d0:e3:16:f4:ce:ec:61:1c:fa:d8:70:74:25: 87:cc:bd:07:28:d3:9a:9a:ae:ea:d5:27:69:98:bc: 56:bf:5d:24:e1:1e:5a:4f:06:9a:4b:84:a8:32:ba: f3:12:8f:9d:5f:1f:75:f8:fd:a8:9d:67:00:b7:3c: 2c:f3:42:3b:97:98:f9:df:e5:2d:60:cb:27:08:29: 78:7a:07:27:4b:17:1a:11:2e:4a:13:b0:cc:cd:f4: fd:e7:45:86:10:0a:a3:59:08:d6:0d:08:bc:30:a2: 44:60:4e:8d:19:8c:d6:84:63:15:fe:8c:4d:5f:29: 3f:ed:4c:cd:91:cf:f8:a8:fa:74:17:ba:67:30:f3: 94:c2:b0:af:d0:41:b8:d1:44:31:c4:0c:f4:a2:da: 27:d1:d6:d9:9c:a6:99:97:60:5d:d6:ab:73:63:d4: dd:30:dc:d2:fa:20:32:06:55:6e:d4:cb:a1:f9:ef: 67:19:c0:fa:9d:7b:d3:6a:69:04:39:5e:73:ce:25: 18:4b:f2:de:df:2f:03:6a:cd:19:fc:2d:e7:bc:4b: 38:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:58:CB:66:6C:63:DB:38:8F:CD:57:ED:EC:14:61:EE:D1:B0:CF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c7:b9:7e:35:7c:98:ee:b3:83:f9:e3:bc:67:4e:41:44:cc: 8f:cb:b1:2d:86:73:e7:70:ab:e2:38:d1:bf:00:59:5a:70:1f: c1:0c:9c:c4:fd:29:67:05:c5:fe:9f:0d:f9:73:ad:7f:47:51: af:c1:80:97:5f:b3:e9:3b:63:4e:8e:e6:4a:37:3e:93:08:81: bb:86:17:2b:2d:cf:73:ca:38:6c:ee:06:23:0b:58:e9:78:5e: e8:8f:03:3b:88:51:c0:7c:1b:b4:72:24:3c:ac:90:6a:e8:1d: 9b:89:9e:90:9b:28:79:bf:9e:56:54:e1:13:fd:1c:9c:5d:53: 52:e9:d9:bb:df:89:c8:6c:c0:02:aa:a8:c5:2d:17:7e:a5:d3: 9b:2c:14:de:33:61:04:7b:82:f6:10:79:52:76:86:5f:95:a0: d3:70:ab:1e:88:fe:21:59:ff:bb:60:8d:60:6a:65:0f:59:47: b2:6b:fd:1c:e0:0c:79:7a:37:9c:07:46:7b:48:1c:20:5b:4c: b8:f7:e4:88:81:38:43:9a:f5:15:69:f6:e0:58:2d:4c:c5:44: 29:81:2d:d8:8c:31:da:e1:46:34:a5:17:d0:5b:50:25:53:03: 40:58:a1:02:af:a4:bc:5c:68:cf:b9:a2:d3:16:e3:46:95:dd: c9:d0:25:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdM/zvtHnOsi3N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQxYWY2NzAtM2Y5ZS00YTBhLTlmMWUtNmIxY2RjMWQzN2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksc0cvbUNaNFG69cZNyxAX26aw8mtD3mYRLf 3YIljcQiyW5FlDwadX0uiWxpudDjFvTO7GEc+thwdCWHzL0HKNOamq7q1SdpmLxW v10k4R5aTwaaS4SoMrrzEo+dXx91+P2onWcAtzws80I7l5j53+UtYMsnCCl4egcn SxcaES5KE7DMzfT950WGEAqjWQjWDQi8MKJEYE6NGYzWhGMV/oxNXyk/7UzNkc/4 qPp0F7pnMPOUwrCv0EG40UQxxAz0oton0dbZnKaZl2Bd1qtzY9TdMNzS+iAyBlVu 1Muh+e9nGcD6nXvTamkEOV5zziUYS/Le3y8Das0Z/C3nvEs4RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9Yy2ZsY9s4j81X7ewUYe7RsM8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDM4ZDA0YzUtYjNhZi0z NWE4LWJiZTgtNDlmNTJkYzZlM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3HuX41fJjus4P547xnTkFEzI/LsS2Gc+dwq+I40b8AWVpwH8EMnMT9 KWcFxf6fDflzrX9HUa/BgJdfs+k7Y06O5ko3PpMIgbuGFystz3PKOGzuBiMLWOl4 XuiPAzuIUcB8G7RyJDyskGroHZuJnpCbKHm/nlZU4RP9HJxdU1Lp2bvfichswAKq qMUtF36l05ssFN4zYQR7gvYQeVJ2hl+VoNNwqx6I/iFZ/7tgjWBqZQ9ZR7Jr/Rzg DHl6N5wHRntIHCBbTLj35IiBOEOa9RVp9uBYLUzFRCmBLdiMMdrhRjSlF9BbUCVT A0BYoQKvpLxcaM+5otMW40aV3cnQJU8= -----END CERTIFICATE-----Generated at Sun Sep 27 08:57:20 2026 by rpki-client