$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa File: f25e2b6a-11b7-35e3-a462-57f557c7d879.roa (raw, json) Hash identifier: jGXlPbYpTEFjzAhNG1zHSdIMBdQ5pWXIcLrET5YGP7I= Subject key identifier: 47:E5:1F:98:D0:32:9F:05:A9:00:58:ED:39:27:02:0E:52:29:E5:0E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4974E065AF7213B250BACC80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 199.254.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e0:65:af:72:13:b2:50:ba:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7a533e5b-878f-4300-88ba-5d0afb34abd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:b4:00:65:bf:15:81:c0:00:32:c1:8e:42: 9a:19:7a:a2:6a:22:f7:66:1d:5c:c5:28:0f:6e:27: d9:e6:dc:e1:e7:fc:cb:f6:fa:c6:86:f9:83:ed:34: 38:de:61:46:ad:5c:ad:2b:c0:87:6f:85:f5:bf:3e: 05:06:7a:e8:6b:11:15:db:07:a4:08:1d:11:e7:cd: ef:1a:ce:4e:e0:47:dd:58:3b:45:a2:0e:26:36:cd: dc:be:95:7f:b7:94:df:0a:c0:3a:e2:58:da:07:fa: 35:45:81:0c:7f:48:79:85:f8:99:b7:46:31:b5:97: bf:cc:53:fc:e8:85:3a:f2:92:d1:de:d4:e3:98:ef: be:d3:f3:33:57:12:f8:30:f2:20:05:ea:44:2e:b7: 0a:2c:a7:dd:0e:7e:0a:7a:16:f2:c2:ba:ca:a5:fb: fc:2c:6b:47:cd:4f:e3:65:2c:80:62:78:03:17:73: 90:2b:65:22:8d:33:91:d8:f7:15:e1:3b:92:90:d6: 83:77:32:f8:f4:25:cb:a4:bf:03:7f:8f:3c:ce:8c: 27:33:b6:5d:01:04:00:f5:ea:64:cc:7b:b9:b9:a2: a8:c8:ae:e0:b0:69:21:8f:be:38:be:be:cc:c7:47: 47:3d:c6:7d:d6:95:a7:65:ef:ce:22:83:62:85:6b: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E5:1F:98:D0:32:9F:05:A9:00:58:ED:39:27:02:0E:52:29:E5:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:09:60:29:10:46:e2:bf:fe:8a:35:b2:4c:06:61:21:db:d3: 30:86:a5:5a:2e:c5:c5:b9:7c:0e:d5:c8:f6:d0:00:78:b7:8b: 07:d9:5d:ba:ff:4d:5c:f6:ec:f6:12:dd:80:ff:09:7a:92:04: ba:4b:1e:41:51:e1:c2:7a:d2:a9:81:73:cf:32:e9:55:66:27: 7a:03:a6:6f:26:f5:6f:98:23:4c:02:29:00:fc:0f:91:fc:08: cd:66:c5:cc:2f:66:ce:5f:85:8d:51:50:6c:92:63:b2:dd:20: b5:76:ad:39:cd:bf:45:7d:41:8c:5f:fd:8b:df:18:f9:07:f9: 60:6c:84:6f:02:65:9c:f4:1f:34:af:83:2d:98:24:a0:bf:fd: 64:75:ba:c2:a7:2b:e9:d3:eb:f6:c5:40:67:fc:30:c3:a3:d3: 96:b0:ea:f4:4e:93:a4:5d:97:38:9b:1f:32:17:69:e4:4e:3e: c6:e8:cc:c7:7e:42:99:3b:b6:71:1a:a9:47:a3:e3:9b:35:69: a0:b5:2b:18:4d:e4:8e:5c:44:ce:8c:1d:27:b8:ce:0a:ed:d9: fe:da:f9:30:10:80:f5:13:eb:2c:16:5e:34:22:a9:2a:59:82: 62:56:a9:7f:d8:21:12:dc:be:ff:7d:0a:39:b7:7f:66:83:1b: e6:44:67:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOBlr3ITslC6zIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2E1MzNlNWItODc4Zi00MzAwLTg4YmEtNWQwYWZiMzRhYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFq0AGW/FYHAADLBjkKaGXqiaiL3Zh1cxSgP bifZ5tzh5/zL9vrGhvmD7TQ43mFGrVytK8CHb4X1vz4FBnroaxEV2wekCB0R583v Gs5O4EfdWDtFog4mNs3cvpV/t5TfCsA64ljaB/o1RYEMf0h5hfiZt0YxtZe/zFP8 6IU68pLR3tTjmO++0/MzVxL4MPIgBepELrcKLKfdDn4KehbywrrKpfv8LGtHzU/j ZSyAYngDF3OQK2UijTOR2PcV4TuSkNaDdzL49CXLpL8Df488zownM7ZdAQQA9epk zHu5uaKoyK7gsGkhj744vr7Mx0dHPcZ91pWnZe/OIoNihWvDJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEflH5jQMp8FqQBY7TknAg5SKeUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjI1ZTJiNmEtMTFiNy0z NWUzLWE0NjItNTdmNTU3YzdkODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIJYCkQRuK//oo1skwGYSHb0zCGpVouxcW5fA7VyPbQAHi3iwfZXbr/ TVz27PYS3YD/CXqSBLpLHkFR4cJ60qmBc88y6VVmJ3oDpm8m9W+YI0wCKQD8D5H8 CM1mxcwvZs5fhY1RUGySY7LdILV2rTnNv0V9QYxf/YvfGPkH+WBshG8CZZz0HzSv gy2YJKC//WR1usKnK+nT6/bFQGf8MMOj05aw6vROk6RdlzibHzIXaeROPsbozMd+ Qpk7tnEaqUej45s1aaC1KxhN5I5cRM6MHSe4zgrt2f7a+TAQgPUT6ywWXjQiqSpZ gmJWqX/YIRLcvv99Cjm3f2aDG+ZEZ3g= -----END CERTIFICATE-----Generated at Fri Sep 25 05:16:53 2026 by rpki-client