$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8e86245-eba8-3d5c-b8ec-d5a49d4ab9b0.roa File: b8e86245-eba8-3d5c-b8ec-d5a49d4ab9b0.roa (raw, json) Hash identifier: SN04F3YA2xO3C0WbMDbfJG2cymkELZTqUMpp9gadEKM= Subject key identifier: 10:08:82:B5:88:C9:E3:39:5A:8C:89:3C:C4:FC:61:6D:B8:5F:36:6B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F71EDC0DF9AC8F0A4B89D70C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8e86245-eba8-3d5c-b8ec-d5a49d4ab9b0.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 13901 IP address blocks: 199.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:c0:df:9a:c8:f0:a4:b8:9d:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=c8d08b96-e416-400a-b212-b16c8ba146df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:df:8b:d2:6e:7e:69:c2:16:50:73:54:12: 6a:70:c0:4f:52:79:49:87:c1:a8:83:c8:70:cb:42: 75:1b:b6:80:f1:0f:bc:db:d5:c2:36:6d:65:9b:36: 76:0b:82:39:a3:d1:d7:03:79:63:b6:ca:1e:ef:0c: 6f:fd:c6:36:a0:73:32:8f:6e:00:ac:ce:f8:b7:ee: f6:c2:9f:50:c0:7e:b3:c1:d0:ff:6b:16:90:47:bf: 78:b5:ad:1d:56:a3:87:fd:91:58:fa:a6:03:a3:46: a1:3b:e9:b6:0d:f2:17:fa:5e:0f:10:8d:a9:45:b0: bc:71:13:ea:ec:46:a8:52:c4:f5:fc:cc:0a:73:de: 1b:9b:b3:4d:08:b1:a5:22:3d:63:01:d1:4a:21:a5: 64:b6:80:d5:3c:ce:c9:7a:27:a6:e8:d9:65:e7:b9: 29:3e:95:cd:af:b8:1e:94:4b:86:f4:38:13:55:e7: 05:dc:95:2a:19:e1:2e:30:b6:da:c7:c1:07:68:0b: 9a:82:a9:cc:85:53:0a:7b:21:fc:89:bc:40:75:e6: cb:50:30:d2:34:5f:d5:2e:fa:05:d3:ff:d0:52:a2: cb:ef:5a:9c:df:12:4f:84:a7:76:4b:ba:43:ea:44: a9:1a:c2:10:40:7e:e3:06:86:93:6d:96:ff:18:04: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:08:82:B5:88:C9:E3:39:5A:8C:89:3C:C4:FC:61:6D:B8:5F:36:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8e86245-eba8-3d5c-b8ec-d5a49d4ab9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:4f:78:8f:18:b0:20:eb:74:16:a6:6d:f7:3a:fd:ed:fa:79: df:87:88:8f:95:e8:9e:05:4a:86:5c:23:f3:21:5c:8a:d6:d2: 61:ed:89:f1:b2:2a:fb:37:29:97:5f:5e:99:b8:fa:37:87:64: 3b:65:dd:2a:dd:e8:35:fe:81:99:30:ee:2a:36:ff:92:ae:da: 0e:b0:ba:cf:f7:80:ed:09:34:80:9b:34:52:9a:e8:5e:67:d9: 5c:8e:2f:67:4f:9b:d1:39:d9:22:b6:ec:1a:d2:3d:8f:60:9c: 70:7b:f6:73:73:b2:ca:b1:85:c3:4e:b1:f8:6e:13:61:b6:f4: 82:43:01:6f:1b:bd:5c:25:7d:94:f6:ce:2c:45:f7:36:3b:a6: 23:c4:ed:87:b0:89:a3:3c:01:32:e0:35:7e:b9:ea:da:ca:f7: 15:3f:87:bd:82:5c:71:eb:3c:43:66:fe:1f:01:b8:ac:63:bd: 76:d9:bf:7c:67:02:f1:c8:53:d9:dd:1f:4a:95:18:ba:89:00: fd:8e:87:f6:20:b4:32:34:08:81:3e:60:ca:4f:18:44:1a:38: 36:11:1a:ab:c3:2d:eb:86:1c:d8:4c:53:f5:36:04:f5:bf:d4: 4f:76:8f:6c:ef:d5:46:10:7f:5c:bc:e4:cf:8d:38:63:72:2f: 69:a1:2c:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7cDfmsjwpLidcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk YzhkMDhiOTYtZTQxNi00MDBhLWIyMTItYjE2YzhiYTE0NmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGnfi9JufmnCFlBzVBJqcMBPUnlJh8Gog8hw y0J1G7aA8Q+829XCNm1lmzZ2C4I5o9HXA3ljtsoe7wxv/cY2oHMyj24ArM74t+72 wp9QwH6zwdD/axaQR794ta0dVqOH/ZFY+qYDo0ahO+m2DfIX+l4PEI2pRbC8cRPq 7EaoUsT1/MwKc94bm7NNCLGlIj1jAdFKIaVktoDVPM7Jeiem6Nll57kpPpXNr7ge lEuG9DgTVecF3JUqGeEuMLbax8EHaAuagqnMhVMKeyH8ibxAdebLUDDSNF/VLvoF 0//QUqLL71qc3xJPhKd2S7pD6kSpGsIQQH7jBoaTbZb/GAS7ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAIgrWIyeM5WoyJPMT8YW24XzZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjhlODYyNDUtZWJhOC0z ZDVjLWI4ZWMtZDVhNDlkNGFiOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBPeI8YsCDrdBambfc6/e36ed+HiI+V6J4FSoZcI/MhXIrW0mHtifGy Kvs3KZdfXpm4+jeHZDtl3Srd6DX+gZkw7io2/5Ku2g6wus/3gO0JNICbNFKa6F5n 2VyOL2dPm9E52SK27BrSPY9gnHB79nNzssqxhcNOsfhuE2G29IJDAW8bvVwlfZT2 zixF9zY7piPE7YewiaM8ATLgNX656trK9xU/h72CXHHrPENm/h8BuKxjvXbZv3xn AvHIU9ndH0qVGLqJAP2Oh/YgtDI0CIE+YMpPGEQaODYRGqvDLeuGHNhMU/U2BPW/ 1E92j2zv1UYQf1y85M+NOGNyL2mhLOQ= -----END CERTIFICATE-----Generated at Sun Oct 11 06:13:21 2026 by rpki-client