$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d06901a7-df13-35ea-a39e-950723299f16.roa File: d06901a7-df13-35ea-a39e-950723299f16.roa (raw, json) Hash identifier: diqBBDaIVuucPDiRLlVi205YDMpujhn94NwnX+YUuhU= Subject key identifier: 0B:A2:F0:43:A0:2E:BB:40:2A:B3:2A:83:0C:31:C2:AF:08:57:B3:A6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F498B0467B5DF134101BB2380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d06901a7-df13-35ea-a39e-950723299f16.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207266 IP address blocks: 199.249.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:04:67:b5:df:13:41:01:bb:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4291e0cb-eea3-46f4-9558-775e5c3017d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5a:87:99:a7:60:33:aa:87:17:ee:7e:38:bc: e4:06:86:df:f3:52:1a:d7:f9:8a:b9:3f:bd:a3:49: 58:08:1a:cd:ae:7e:aa:08:0c:49:85:7f:bb:6f:f8: 79:1d:28:b3:53:16:f0:ab:de:de:e5:94:02:d2:21: 7b:33:83:b5:7a:1e:38:82:39:45:4d:e7:34:4c:e5: f7:51:49:8f:66:2f:79:7b:60:a5:09:6d:d5:82:aa: 12:e3:2c:10:2c:61:b6:d5:82:cf:da:6c:96:f0:7b: fe:23:18:0e:f9:51:4c:fc:9b:00:eb:a0:de:c6:59: f5:49:10:1d:47:3a:de:66:72:4c:b2:91:7b:4c:27: f2:1a:92:aa:81:67:df:42:82:36:36:19:f1:58:70: 7d:40:76:92:c5:ef:9e:17:ad:e7:e6:29:b5:3a:ba: ac:fa:86:dd:1b:52:8f:51:26:61:94:71:cf:cd:a6: 77:c9:63:57:3b:7e:55:84:fe:32:38:a6:75:ee:c7: 19:4c:a8:cf:01:c1:db:eb:d0:21:67:26:9a:04:25: 03:22:83:39:b0:90:ba:97:07:d4:1e:0c:5c:a7:11: 3f:ad:d7:5d:aa:4a:11:02:49:80:1f:a9:f4:2e:b2: b7:62:3c:d5:d2:a4:cc:7e:76:88:24:e0:9c:79:13: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A2:F0:43:A0:2E:BB:40:2A:B3:2A:83:0C:31:C2:AF:08:57:B3:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d06901a7-df13-35ea-a39e-950723299f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8b:b1:7b:b6:34:c7:8a:d7:ec:59:b5:d2:f9:05:4f:87:46: b8:aa:cd:3d:e3:07:76:df:91:40:68:b4:d0:a6:e4:49:b3:ed: d9:c3:0e:ca:dd:6f:a0:c8:af:4e:77:0e:26:1f:39:20:af:97: 88:81:f1:94:8f:27:ff:62:52:44:5a:0f:4e:4c:7f:3f:45:7b: ed:60:eb:04:c4:19:0e:ea:c4:8d:10:f7:e6:c0:c2:eb:60:c1: 05:d9:86:a2:33:16:73:1a:4c:d9:8d:dd:62:ac:0f:23:60:4f: e6:84:8a:68:6e:7d:bf:51:18:18:8e:42:3b:00:61:3c:10:a1: 3e:a4:27:0f:e6:34:2d:fd:65:a5:e3:36:02:8c:c1:03:61:bd: 0b:3a:5a:d2:8e:ce:42:20:7e:d5:66:c5:3c:e9:67:c0:b5:60: 5c:b6:26:95:ec:51:ab:7b:49:9c:48:f1:0a:91:3b:39:67:e0: 75:ce:60:59:44:68:3e:02:65:53:87:84:2c:cd:cb:67:7c:d1: 40:38:03:c1:0c:73:e7:4d:c6:7c:c2:5f:02:27:5c:64:83:30: d9:af:20:92:b1:05:c6:28:5b:dd:b4:30:e5:02:8a:dd:eb:0c: 5f:e0:1e:28:f6:5a:4f:32:b3:87:16:68:ec:5b:55:94:6f:0e: d7:4a:83:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiwRntd8TQQG7I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDI5MWUwY2ItZWVhMy00NmY0LTk1NTgtNzc1ZTVjMzAxN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFqHmadgM6qHF+5+OLzkBobf81Ia1/mKuT+9 o0lYCBrNrn6qCAxJhX+7b/h5HSizUxbwq97e5ZQC0iF7M4O1eh44gjlFTec0TOX3 UUmPZi95e2ClCW3VgqoS4ywQLGG21YLP2myW8Hv+IxgO+VFM/JsA66Dexln1SRAd RzreZnJMspF7TCfyGpKqgWffQoI2NhnxWHB9QHaSxe+eF63n5im1Orqs+obdG1KP USZhlHHPzaZ3yWNXO35VhP4yOKZ17scZTKjPAcHb69AhZyaaBCUDIoM5sJC6lwfU HgxcpxE/rdddqkoRAkmAH6n0LrK3YjzV0qTMfnaIJOCceRNkBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAui8EOgLrtAKrMqgwwxwq8IV7OmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDA2OTAxYTctZGYxMy0z NWVhLWEzOWUtOTUwNzIzMjk5ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuLsXu2NMeK1+xZtdL5BU+HRriqzT3jB3bfkUBotNCm5Emz7dnDDsrd b6DIr053DiYfOSCvl4iB8ZSPJ/9iUkRaD05Mfz9Fe+1g6wTEGQ7qxI0Q9+bAwutg wQXZhqIzFnMaTNmN3WKsDyNgT+aEimhufb9RGBiOQjsAYTwQoT6kJw/mNC39ZaXj NgKMwQNhvQs6WtKOzkIgftVmxTzpZ8C1YFy2JpXsUat7SZxI8QqROzln4HXOYFlE aD4CZVOHhCzNy2d80UA4A8EMc+dNxnzCXwInXGSDMNmvIJKxBcYoW920MOUCit3r DF/gHij2Wk8ys4cWaOxbVZRvDtdKgwg= -----END CERTIFICATE-----Generated at Sat Sep 26 03:57:16 2026 by rpki-client