$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa File: efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa (raw, json) Hash identifier: MQip9o/I4cPYKGkhZ2CvM3Ewn7mBXGEDzNLHg07zdkU= Subject key identifier: DB:01:D1:58:C1:22:25:63:90:36:DA:09:97:25:9D:5D:CB:22:5E:51 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E04362D3540CE3C37AFC8F440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 199.254.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:2d:35:40:ce:3c:37:af:c8:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=113531a1-6a6b-495b-853f-8dbb98db7f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:46:e6:e4:41:27:a7:cb:00:a9:38:49:24: a0:f3:bd:c2:56:65:b6:5b:50:40:32:dc:c7:72:b1: fa:15:33:48:0c:42:13:d4:18:3c:f5:22:ea:d2:db: ca:0f:12:a2:14:23:1b:6a:c4:fc:ea:fb:c1:3f:a0: 83:f8:c7:c8:77:aa:99:14:ce:d2:80:b9:68:86:e1: 53:b5:68:b7:d0:9f:92:d8:a2:1f:99:87:ef:a0:3e: 03:8b:22:3e:cf:bf:58:1b:cf:d4:25:45:d0:b3:22: eb:9b:23:a6:ff:05:b1:d0:9e:09:cf:9a:b9:eb:02: ae:16:3b:c0:66:48:e9:4b:67:e1:c2:23:d3:e1:a4: e6:c8:87:30:e8:76:1c:ab:61:f2:18:f3:be:5e:38: 69:07:e9:c0:32:4b:04:8f:d6:d7:a1:0f:e0:44:51: 4c:96:7e:e7:23:8d:60:c3:53:94:37:75:76:16:43: 8b:c6:8f:e2:6d:89:59:22:b1:57:53:7a:bc:b4:50: cd:c5:74:65:09:8b:54:0b:1a:cd:dd:24:7c:e1:e1: 15:64:21:9f:f9:c0:54:d5:40:a1:53:58:13:5a:cb: f7:d0:00:6a:49:c8:5b:8e:f9:6c:21:86:af:ff:9c: 2b:d2:74:65:a5:6e:99:30:42:22:9b:75:3c:a0:18: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:01:D1:58:C1:22:25:63:90:36:DA:09:97:25:9D:5D:CB:22:5E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ce:3e:78:0a:57:74:3f:32:06:50:2a:28:00:ff:28:e8:15: e6:b8:1b:7c:a4:f0:79:3a:1e:3e:20:dc:b7:0e:7c:ff:b1:fe: e5:38:6c:df:9e:66:6e:75:f4:73:d9:8b:60:77:ee:c2:43:c5: 0c:0b:95:79:cc:75:56:18:fe:ce:e0:5e:72:39:c9:ef:ef:19: 09:8b:07:02:bf:6e:fa:b0:b9:1f:bd:f7:89:33:22:fd:7f:7b: b5:9e:d9:db:9d:ea:77:f9:67:3b:fe:77:43:e9:d3:b7:ca:f6: 8e:80:95:ba:87:81:7e:55:3e:aa:8a:39:f2:b9:d4:60:fc:fa: c4:d2:4c:63:83:dd:d7:7a:ad:3a:7b:ff:ab:71:90:66:eb:45: 11:95:5b:df:06:e6:fd:07:28:a1:b0:be:48:37:4f:78:b0:83: 91:67:b6:94:0d:13:25:b5:f0:8d:93:6f:f2:27:42:ba:ba:48: eb:a0:10:cc:30:9d:d4:c6:58:23:8f:b0:50:d0:2b:4b:a2:31: 86:c8:b7:6a:87:33:3d:65:3c:e8:48:41:38:47:ce:86:5c:0f: 2c:35:61:17:23:ed:35:ee:60:22:dd:80:23:30:08:17:27:23: d2:c3:c1:50:02:ed:39:00:fa:a7:63:2c:1e:33:d5:08:90:a4: 60:71:4c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENi01QM48N6/I9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MTEzNTMxYTEtNmE2Yi00OTViLTg1M2YtOGRiYjk4ZGI3ZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZpG5uRBJ6fLAKk4SSSg873CVmW2W1BAMtzH crH6FTNIDEIT1Bg89SLq0tvKDxKiFCMbasT86vvBP6CD+MfId6qZFM7SgLlohuFT tWi30J+S2KIfmYfvoD4DiyI+z79YG8/UJUXQsyLrmyOm/wWx0J4Jz5q56wKuFjvA ZkjpS2fhwiPT4aTmyIcw6HYcq2HyGPO+XjhpB+nAMksEj9bXoQ/gRFFMln7nI41g w1OUN3V2FkOLxo/ibYlZIrFXU3q8tFDNxXRlCYtUCxrN3SR84eEVZCGf+cBU1UCh U1gTWsv30ABqSchbjvlsIYav/5wr0nRlpW6ZMEIim3U8oBgQAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsB0VjBIiVjkDbaCZclnV3LIl5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWZkOGE5ZjYtN2Y2MC0z YzZlLTgwNzgtZDc0MmYyNWViZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/47MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLOPngKV3Q/MgZQKigA/yjoFea4G3yk8Hk6Hj4g3LcOfP+x/uU4bN+e Zm519HPZi2B37sJDxQwLlXnMdVYY/s7gXnI5ye/vGQmLBwK/bvqwuR+994kzIv1/ e7We2dud6nf5Zzv+d0Pp07fK9o6AlbqHgX5VPqqKOfK51GD8+sTSTGOD3dd6rTp7 /6txkGbrRRGVW98G5v0HKKGwvkg3T3iwg5FntpQNEyW18I2Tb/InQrq6SOugEMww ndTGWCOPsFDQK0uiMYbIt2qHMz1lPOhIQThHzoZcDyw1YRcj7TXuYCLdgCMwCBcn I9LDwVAC7TkA+qdjLB4z1QiQpGBxTNA= -----END CERTIFICATE-----Generated at Sat Jun 13 17:07:02 2026 by rpki-client