$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bcc90991-4edc-347b-b4ae-a5679ea9ce1b.roa File: bcc90991-4edc-347b-b4ae-a5679ea9ce1b.roa (raw, json) Hash identifier: XJ4UTs7qoPZVk8r5n0rXYcJERH3AU/JdlnT5DZKG92w= Subject key identifier: 9B:B8:90:61:7E:B0:E6:F7:CB:C8:51:33:37:37:AB:81:DD:13:3D:48 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F49743ADC0C9A05EA436F6500 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bcc90991-4edc-347b-b4ae-a5679ea9ce1b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 199.249.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:3a:dc:0c:9a:05:ea:43:6f:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=02a7ca84-bc99-4e9a-aa2e-28169529a00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:80:49:c4:21:12:38:ed:28:0c:46:e3:f3:d7: 5c:b1:6d:dc:1b:d4:88:d3:92:aa:c4:cf:b5:9e:28: 63:91:1f:f5:ac:b0:d3:63:a1:63:2f:e0:4c:83:af: 13:b2:18:4c:4e:af:80:07:88:fb:8a:22:6b:ff:e2: 45:61:06:34:c0:20:c1:94:0a:f1:9c:72:1f:eb:48: dd:ef:c0:b1:c8:f2:a5:2c:3a:e9:35:41:a6:97:ff: 6f:07:06:2e:b5:d2:c2:ee:5d:36:43:66:9a:64:4e: 85:59:bd:5d:6d:a9:6c:b2:8a:bb:dd:99:ff:e2:b9: 65:9a:af:21:e7:07:0c:5f:a9:9c:f6:af:f8:c9:6f: 96:fb:e3:a2:8d:75:aa:cf:41:1f:5d:9d:36:8e:2c: f4:72:1c:87:17:4b:da:ed:86:18:40:a8:85:5f:7c: a6:21:5d:f1:ad:3b:ed:cb:b2:1c:ac:38:c9:b4:26: d2:cf:f7:89:a9:a7:37:7c:65:f7:e0:d3:b1:3a:55: 23:ef:63:01:c2:cd:d7:b3:b8:de:49:f7:f0:f5:0d: 4a:8b:f8:83:89:1a:3e:6a:7e:da:62:96:3e:c3:a0: 8a:98:16:9d:cf:23:51:db:2f:9a:dc:bd:d6:82:31: 2a:54:50:2b:cd:cf:6c:07:4e:86:f7:3f:99:34:6b: 0e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B8:90:61:7E:B0:E6:F7:CB:C8:51:33:37:37:AB:81:DD:13:3D:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bcc90991-4edc-347b-b4ae-a5679ea9ce1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:83:06:29:7f:8b:94:f4:59:9c:a5:c7:12:be:dd:f5:a1:67: 23:4e:dd:13:b4:7a:28:22:2d:7d:09:d0:23:31:c1:9a:9b:9f: 49:99:62:16:b2:c6:e4:7c:44:5c:89:84:9f:f7:22:99:60:fa: 8c:5f:33:97:77:7f:42:83:97:91:a9:c4:fc:c8:8e:65:bd:61: 63:87:33:a3:c8:58:52:cc:2a:33:d3:8e:32:40:e7:83:9b:d9: 1d:ff:9e:75:26:4d:24:06:04:5d:eb:20:ab:60:7e:04:1f:b3: 6a:d5:be:1c:a4:ae:c2:2a:31:2d:48:10:ef:f1:fb:89:3c:7c: 62:89:8c:78:15:7e:6c:3b:39:2c:bd:03:22:7d:86:be:4d:c8: 95:d7:9c:b0:d6:0f:ad:01:5b:51:f7:d2:11:ef:d5:5c:f3:89: d1:11:84:c3:2b:49:93:0b:6d:cc:39:51:67:a6:48:a5:2e:57: 0f:16:47:c8:ab:e6:c3:bb:89:23:06:43:fd:2f:a8:a2:89:32: 9e:a6:bf:ff:5a:d9:c1:88:aa:05:02:d9:6a:bd:23:c9:5f:ad: 49:1b:0e:32:68:23:d5:16:42:af:bc:56:94:9f:8a:37:9b:9d: b6:05:7c:a4:48:36:5c:6a:76:df:de:89:93:04:f0:f0:a1:93: 78:80:0f:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDrcDJoF6kNvZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDJhN2NhODQtYmM5OS00ZTlhLWFhMmUtMjgxNjk1MjlhMDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloBJxCESOO0oDEbj89dcsW3cG9SI05KqxM+1 nihjkR/1rLDTY6FjL+BMg68TshhMTq+AB4j7iiJr/+JFYQY0wCDBlArxnHIf60jd 78CxyPKlLDrpNUGml/9vBwYutdLC7l02Q2aaZE6FWb1dbalssoq73Zn/4rllmq8h 5wcMX6mc9q/4yW+W++OijXWqz0EfXZ02jiz0chyHF0va7YYYQKiFX3ymIV3xrTvt y7IcrDjJtCbSz/eJqac3fGX34NOxOlUj72MBws3Xs7jeSffw9Q1Ki/iDiRo+an7a YpY+w6CKmBadzyNR2y+a3L3WgjEqVFArzc9sB06G9z+ZNGsOFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJu4kGF+sOb3y8hRMzc3q4HdEz1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmNjOTA5OTEtNGVkYy0z NDdiLWI0YWUtYTU2NzllYTljZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyDBil/i5T0WZylxxK+3fWhZyNO3RO0eigiLX0J0CMxwZqbn0mZYhay xuR8RFyJhJ/3Iplg+oxfM5d3f0KDl5GpxPzIjmW9YWOHM6PIWFLMKjPTjjJA54Ob 2R3/nnUmTSQGBF3rIKtgfgQfs2rVvhykrsIqMS1IEO/x+4k8fGKJjHgVfmw7OSy9 AyJ9hr5NyJXXnLDWD60BW1H30hHv1VzzidERhMMrSZMLbcw5UWemSKUuVw8WR8ir 5sO7iSMGQ/0vqKKJMp6mv/9a2cGIqgUC2Wq9I8lfrUkbDjJoI9UWQq+8VpSfijeb nbYFfKRINlxqdt/eiZME8PChk3iAD3k= -----END CERTIFICATE-----Generated at Fri Sep 25 05:13:39 2026 by rpki-client