$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa File: b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa (raw, json) Hash identifier: mZinXyTe/rdacIBEPtwwBsUr/MGolDw3KYtbKblDc3s= Subject key identifier: D4:52:2C:96:65:1A:97:E0:49:FF:D2:DC:6F:0D:A8:28:CD:87:69:59 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E043620B7F73BFC0D2674CA80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 199.254.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:20:b7:f7:3b:fc:0d:26:74:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=a9fc0b4f-426b-4e4c-8d9c-2610f5e41921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:18:3e:56:8e:55:ac:69:94:a6:d0:65:84:70: 0e:1d:0d:d8:f7:3d:30:3f:cb:0a:69:cc:cf:11:ff: e1:33:7b:cd:f0:ea:e2:a4:02:a7:50:39:a3:17:aa: 0e:c5:0f:f9:2d:81:ec:a1:58:eb:6f:49:41:ad:3f: e0:e4:84:94:2c:21:ba:8e:83:12:31:c9:7a:ce:59: 78:17:6b:52:5c:f8:fb:3f:c1:3f:f0:0e:2e:c0:86: 8f:fb:2e:d9:fb:73:d4:c1:9c:66:17:3b:cf:06:22: d5:ab:f9:6d:d0:ba:e5:2b:87:a8:17:d7:fe:50:5f: 00:a3:f3:19:7d:d5:d7:fb:0f:74:22:37:a7:a3:48: f6:ae:29:c7:a6:d0:2d:08:9c:4e:e5:29:7a:6f:6c: 6f:b2:20:ce:5f:9b:a4:27:c8:49:8b:49:3f:e3:b6: ae:26:ad:70:a4:59:f2:b4:b4:b4:77:28:a6:1d:c3: da:f7:ce:7f:33:8f:5e:4b:14:46:c6:54:47:c9:ad: 23:07:5e:66:d6:c1:14:4a:e8:2d:f7:30:fa:b9:0c: 44:44:6f:ea:81:19:8a:bd:00:e8:a9:67:21:1b:9d: 4b:a5:26:90:1b:ca:39:dd:34:71:bc:b1:99:a2:a5: b5:70:c9:5d:f8:98:f0:6f:d1:7a:07:5a:0e:85:b1: 60:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:52:2C:96:65:1A:97:E0:49:FF:D2:DC:6F:0D:A8:28:CD:87:69:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5b:f6:56:27:56:c9:16:ae:62:6d:15:b3:d4:09:0c:93:fe: 96:86:18:a5:5c:e7:55:0a:da:31:9b:35:de:59:18:bb:2c:87: 51:6b:b8:3b:84:b0:82:f2:04:78:cd:5d:e4:38:85:36:30:bd: 95:85:89:ff:88:d3:bc:a1:c2:90:f3:1d:ff:b0:67:f9:58:6e: eb:57:b4:1e:d8:a0:a9:b5:9f:1f:74:ba:bb:01:23:fc:02:79: b7:37:72:81:cd:99:82:16:10:cb:f0:08:a4:29:55:82:43:dd: d0:de:20:7f:02:55:d1:46:b2:b0:cd:40:df:01:67:4c:93:fb: 47:69:5d:00:eb:f6:d2:f1:cd:01:96:07:0d:4b:60:66:65:3c: 1f:26:c8:76:55:1c:6c:c5:5c:6a:5b:5d:8a:d6:4a:c3:73:2d: c2:a9:4a:78:5c:98:f8:7b:52:fe:c9:40:d9:d0:2a:4e:22:6b: d5:01:f8:bf:e5:c3:06:5c:2a:20:b5:df:a9:9d:40:66:3b:02: 34:22:af:bf:bc:ce:07:2d:2e:9e:eb:94:6b:ee:e6:cd:bd:91: 51:f9:6c:a2:9b:e5:00:8c:59:f9:86:a1:5e:2c:69:3a:e5:02: db:ed:21:c0:5e:d2:e1:63:d7:4e:5e:f6:f3:d5:1d:60:27:59: aa:d5:67:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENiC39zv8DSZ0yoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YTlmYzBiNGYtNDI2Yi00ZTRjLThkOWMtMjYxMGY1ZTQxOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hg+Vo5VrGmUptBlhHAOHQ3Y9z0wP8sKaczP Ef/hM3vN8OripAKnUDmjF6oOxQ/5LYHsoVjrb0lBrT/g5ISULCG6joMSMcl6zll4 F2tSXPj7P8E/8A4uwIaP+y7Z+3PUwZxmFzvPBiLVq/lt0LrlK4eoF9f+UF8Ao/MZ fdXX+w90Ijeno0j2rinHptAtCJxO5Sl6b2xvsiDOX5ukJ8hJi0k/47auJq1wpFny tLS0dyimHcPa985/M49eSxRGxlRHya0jB15m1sEUSugt9zD6uQxERG/qgRmKvQDo qWchG51LpSaQG8o53TRxvLGZoqW1cMld+Jjwb9F6B1oOhbFglwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRSLJZlGpfgSf/S3G8NqCjNh2lZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjRkYTIwN2EtNTA4OS0z ZTVhLWIwZWEtZTliZjU0YmY2YzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/48MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxb9lYnVskWrmJtFbPUCQyT/paGGKVc51UK2jGbNd5ZGLssh1FruDuE sILyBHjNXeQ4hTYwvZWFif+I07yhwpDzHf+wZ/lYbutXtB7YoKm1nx90ursBI/wC ebc3coHNmYIWEMvwCKQpVYJD3dDeIH8CVdFGsrDNQN8BZ0yT+0dpXQDr9tLxzQGW Bw1LYGZlPB8myHZVHGzFXGpbXYrWSsNzLcKpSnhcmPh7Uv7JQNnQKk4ia9UB+L/l wwZcKiC136mdQGY7AjQir7+8zgctLp7rlGvu5s29kVH5bKKb5QCMWfmGoV4saTrl AtvtIcBe0uFj105e9vPVHWAnWarVZ9s= -----END CERTIFICATE-----Generated at Sat Jun 13 14:21:11 2026 by rpki-client