$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa File: 34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa (raw, json) Hash identifier: KZJ1ANERBBOKMWfQyvpnhv95Gl0U82qAsPgJbSEfMO4= Subject key identifier: 24:02:5F:A5:53:5C:D6:E6:45:5F:7D:21:76:0D:80:ED:D8:C5:6B:B4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F71EDBFBA56914ECC57216880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 393246 IP address blocks: 199.115.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:bf:ba:56:91:4e:cc:57:21:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=544ea8b6-3d64-4ac4-a22f-86365287045c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5c:51:b0:a5:9b:9f:a5:29:ae:90:72:fa:70: 7a:28:d4:21:95:fa:7b:48:45:91:75:09:50:3e:dd: c4:fd:0b:35:58:44:e2:6c:ea:22:8a:a8:cc:59:40: 8b:42:33:98:38:08:84:f4:6a:00:b1:41:29:a3:9c: 21:65:63:8f:02:70:fd:8d:b3:84:1d:20:f2:09:db: 5f:45:73:c1:70:16:66:8c:36:be:78:7e:ce:13:57: ff:eb:94:6c:b2:ce:ba:7b:d0:22:f1:60:90:f9:cd: 04:1b:b9:e7:0a:ab:66:73:bd:eb:d7:d2:8d:6a:d5: f8:2f:fd:ac:dd:e2:f3:0f:c4:fa:11:71:85:ed:a4: 22:e6:f3:85:42:63:38:01:fe:15:73:0f:2f:9c:d4: f1:ba:eb:90:f4:13:20:f8:79:d4:de:01:90:e3:bb: 88:5d:b0:47:ab:54:14:f4:cf:c2:fd:27:17:99:dc: 75:c9:d3:26:3d:30:5b:d1:34:5c:ef:9b:76:d9:09: 89:e7:66:a4:9b:ba:08:b4:43:ad:e3:3b:47:71:06: 97:a3:bc:71:19:05:50:b2:54:24:e9:74:de:10:1d: ae:cf:66:6d:25:91:d2:6f:14:18:66:84:21:91:1d: 05:d2:65:96:42:53:46:51:ee:ef:9b:83:49:75:95: 2e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:02:5F:A5:53:5C:D6:E6:45:5F:7D:21:76:0D:80:ED:D8:C5:6B:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e2:dc:0a:58:a2:46:fc:3f:ff:b3:7d:e4:f5:51:07:4b:ac: 2d:59:67:82:2b:6f:3f:ef:22:f9:4e:3f:9b:f1:88:e5:d5:2f: 30:02:f2:dd:c4:cc:10:31:69:86:78:99:ef:6e:9a:21:f8:99: f9:be:9e:0e:a4:56:fd:56:5b:32:c0:75:28:4e:74:c8:b8:38: 9f:31:9f:f2:ee:c9:06:cc:28:05:db:c4:0f:44:a7:69:75:dc: 91:cf:d1:8e:c7:aa:64:8f:78:ac:32:28:19:35:d5:fa:dd:e2: 4f:41:63:cc:2d:05:25:ac:e9:8e:f6:1b:e7:aa:d1:1b:55:23: 4f:d6:3d:84:e6:5d:06:87:a9:82:bc:c3:8f:25:e1:91:51:69: 7a:94:76:89:e5:6f:50:30:d7:88:62:c7:d7:f1:f0:28:22:7c: 98:d0:a0:74:2f:34:d5:4e:70:0a:a0:28:50:66:a4:f3:cd:f4: 8e:9a:44:3c:60:e9:55:c3:3f:8a:3f:da:8e:e5:e3:9d:e5:4c: ac:af:a9:11:a7:ad:87:a9:a6:bf:7b:e7:7b:8a:c5:c6:35:33: f7:ab:5c:3f:c4:fc:9c:88:c8:56:ad:e5:6a:ac:b2:cc:6e:ad: 56:3e:43:ba:f3:2c:27:8e:ea:28:26:17:4a:44:3a:58:5b:7a: a6:a5:f9:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7b+6VpFOzFchaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NTQ0ZWE4YjYtM2Q2NC00YWM0LWEyMmYtODYzNjUyODcwNDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVxRsKWbn6UprpBy+nB6KNQhlfp7SEWRdQlQ Pt3E/Qs1WETibOoiiqjMWUCLQjOYOAiE9GoAsUEpo5whZWOPAnD9jbOEHSDyCdtf RXPBcBZmjDa+eH7OE1f/65Rsss66e9Ai8WCQ+c0EG7nnCqtmc73r19KNatX4L/2s 3eLzD8T6EXGF7aQi5vOFQmM4Af4Vcw8vnNTxuuuQ9BMg+HnU3gGQ47uIXbBHq1QU 9M/C/ScXmdx1ydMmPTBb0TRc75t22QmJ52akm7oItEOt4ztHcQaXo7xxGQVQslQk 6XTeEB2uz2ZtJZHSbxQYZoQhkR0F0mWWQlNGUe7vm4NJdZUuHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQCX6VTXNbmRV99IXYNgO3YxWu0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzRjMmZiY2YtMzdiNS0z OTgzLThlODItNWI3YjMzNDNmMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADji3ApYokb8P/+zfeT1UQdLrC1ZZ4Irbz/vIvlOP5vxiOXVLzAC8t3E zBAxaYZ4me9umiH4mfm+ng6kVv1WWzLAdShOdMi4OJ8xn/LuyQbMKAXbxA9Ep2l1 3JHP0Y7HqmSPeKwyKBk11frd4k9BY8wtBSWs6Y72G+eq0RtVI0/WPYTmXQaHqYK8 w48l4ZFRaXqUdonlb1Aw14hix9fx8CgifJjQoHQvNNVOcAqgKFBmpPPN9I6aRDxg 6VXDP4o/2o7l453lTKyvqRGnrYeppr9753uKxcY1M/erXD/E/JyIyFat5Wqsssxu rVY+Q7rzLCeO6igmF0pEOlhbeqal+Xo= -----END CERTIFICATE-----Generated at Sun Oct 11 16:53:22 2026 by rpki-client