$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa File: a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa (raw, json) Hash identifier: wjMvG3VC4a49xeh1A0H+7r6RsUF6c2OyGl/b2gO+IyE= Subject key identifier: 76:89:B2:B9:33:C4:8E:E0:74:27:B8:08:C8:34:D4:C7:85:6D:E2:E1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435DD36DC82917AECFCF100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 199.254.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:dd:36:dc:82:91:7a:ec:fc:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=c6ef41b7-3aa1-49f8-a506-f684419947c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:7d:47:29:40:1b:da:39:de:43:e6:5f:89: 58:bc:44:a6:c3:4a:6d:c9:0a:58:f3:2d:ea:d3:bf: a2:1b:b5:75:03:8f:74:67:56:d5:10:be:af:47:6e: f3:a6:f2:de:80:ff:07:60:58:b7:48:f1:a7:b9:d9: f5:53:dd:eb:a6:a3:3f:b3:1e:cc:6e:19:de:e5:d7: ba:97:c8:5c:12:19:1b:dd:bb:1e:eb:07:3b:5e:a4: b6:22:78:25:20:7c:f2:ef:fe:ef:a2:ed:a6:21:95: 31:ff:b9:66:dc:d9:61:79:06:93:76:40:c1:3d:b7: 97:eb:d5:a9:bf:03:b1:fc:28:17:27:ce:39:59:69: f5:e3:04:08:49:55:46:e8:82:f6:d0:0d:83:7a:4f: d8:d3:fc:71:e4:30:0f:48:d3:3e:8e:1a:5e:b5:05: b2:52:3e:e1:fa:a7:48:cb:ac:4b:45:42:2b:8c:15: 52:00:03:20:1a:41:05:e9:e8:d7:30:d9:fd:f1:4a: d1:59:c1:63:04:18:b0:df:f9:5d:a5:da:03:ea:b3: c7:6c:53:f1:52:0c:9a:20:cd:25:2e:9f:d9:cc:b9: 35:d3:56:8e:66:c6:b2:a9:94:ce:3b:2d:7c:24:51: 90:8e:67:51:9f:d5:d9:ce:90:0a:73:20:b7:6d:d0: 79:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:89:B2:B9:33:C4:8E:E0:74:27:B8:08:C8:34:D4:C7:85:6D:E2:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:08:21:29:b8:70:15:2e:cf:61:d6:ed:b9:df:41:56:5f:bc: 59:63:81:a5:da:ec:d9:a3:76:eb:22:84:52:3e:4b:d0:d6:35: d1:ea:8b:19:fc:61:6d:fc:69:03:81:2e:48:76:3b:0d:79:18: f8:83:b5:5e:4e:40:23:15:72:24:4e:3d:12:7e:b0:47:1d:20: 6e:57:c0:fd:5d:76:57:e0:37:9b:b8:07:22:84:2a:a4:7f:b9: 2a:9b:29:75:81:1a:7f:0d:9d:80:d5:d2:1d:4d:35:9c:4a:55: bf:c5:9f:62:94:33:b5:71:1c:34:fa:97:68:a9:5f:5c:a4:bf: c3:ac:ac:47:d0:a4:99:dd:87:b1:05:8b:07:57:0c:9c:a5:f3: 41:3b:3c:31:6e:89:e4:8d:4e:e8:45:e0:3d:6c:68:34:a5:24: eb:0e:6d:d5:14:58:f6:de:b1:1a:1e:bc:7e:81:29:81:68:8d: c6:9b:7a:14:cf:ae:f9:3b:64:3f:83:fb:22:12:47:a8:cc:34: f4:d7:de:e6:1a:01:ee:c2:18:83:b2:04:c8:73:01:6e:5e:6b: 4f:ba:02:c3:80:87:a4:e5:64:bc:83:8b:e9:04:fc:95:2e:38: 09:23:6f:50:31:ee:ff:52:3f:17:0b:48:57:0a:03:d4:22:25: 70:a9:21:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENd023IKReuz88QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YzZlZjQxYjctM2FhMS00OWY4LWE1MDYtZjY4NDQxOTk0N2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwh9RylAG9o53kPmX4lYvESmw0ptyQpY8y3q 07+iG7V1A490Z1bVEL6vR27zpvLegP8HYFi3SPGnudn1U93rpqM/sx7Mbhne5de6 l8hcEhkb3bse6wc7XqS2InglIHzy7/7vou2mIZUx/7lm3NlheQaTdkDBPbeX69Wp vwOx/CgXJ845WWn14wQISVVG6IL20A2Dek/Y0/xx5DAPSNM+jhpetQWyUj7h+qdI y6xLRUIrjBVSAAMgGkEF6ejXMNn98UrRWcFjBBiw3/ldpdoD6rPHbFPxUgyaIM0l Lp/ZzLk101aOZsayqZTOOy18JFGQjmdRn9XZzpAKcyC3bdB5FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaJsrkzxI7gdCe4CMg01MeFbeLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYThiNzBkMjMtNzFiMy0z OTg5LWI2ZjEtN2NhMTMzZWMzOTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUIISm4cBUuz2HW7bnfQVZfvFljgaXa7NmjdusihFI+S9DWNdHqixn8 YW38aQOBLkh2Ow15GPiDtV5OQCMVciROPRJ+sEcdIG5XwP1ddlfgN5u4ByKEKqR/ uSqbKXWBGn8NnYDV0h1NNZxKVb/Fn2KUM7VxHDT6l2ipX1ykv8OsrEfQpJndh7EF iwdXDJyl80E7PDFuieSNTuhF4D1saDSlJOsObdUUWPbesRoevH6BKYFojcabehTP rvk7ZD+D+yISR6jMNPTX3uYaAe7CGIOyBMhzAW5ea0+6AsOAh6TlZLyDi+kE/JUu OAkjb1Ax7v9SPxcLSFcKA9QiJXCpISM= -----END CERTIFICATE-----Generated at Sat Jun 13 15:45:59 2026 by rpki-client