$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fdfccced-bf3e-30e1-9072-f28a05196371.roa File: fdfccced-bf3e-30e1-9072-f28a05196371.roa (raw, json) Hash identifier: b2slNcgCuTVqp75N4CgNFtDe2Su3GZPeKfBe5yRyjpQ= Subject key identifier: AE:8F:42:A7:76:80:C4:80:FE:07:0D:15:9C:DA:74:4B:77:CF:BC:B7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435DFF7059730E621B9DE60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fdfccced-bf3e-30e1-9072-f28a05196371.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 199.249.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:df:f7:05:97:30:e6:21:b9:de:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=a330fb74-4a8d-4d11-b73a-2a6f39fc83b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:b5:bb:f3:94:d8:fe:8b:f9:3f:8e:ad:3b: 25:b5:e2:ff:93:35:0b:39:c4:04:ce:b3:b6:52:ca: 84:e9:71:c9:2b:12:dd:fd:44:f0:f8:e6:60:06:e1: 65:37:6a:8a:7c:d7:ab:e7:6b:f2:9c:f1:47:2b:2b: 0e:b5:03:ca:4c:82:4c:72:4b:da:fa:29:09:2a:cc: 42:1d:09:b3:ac:51:b2:98:2a:ba:ab:bf:5b:67:6d: fa:ee:89:f1:8d:19:7e:e9:d1:04:3c:d0:bc:b7:d6: 35:7a:2c:b5:fc:4e:e0:cc:aa:17:8f:c9:8a:b4:26: 14:3b:a4:39:a4:c3:08:2a:91:c2:b6:6a:ce:5c:22: 95:41:6e:04:3c:4d:0d:6a:29:5c:7d:bf:33:77:3c: 96:83:3d:b9:25:97:a7:fd:23:3c:00:6d:7e:70:04: 88:5e:b0:2b:34:02:94:a2:50:82:76:fc:11:45:44: e9:b8:4d:73:ae:16:6d:cc:d2:71:61:30:56:6b:ad: 55:d2:34:cb:51:40:6e:97:ce:58:3f:bf:ee:87:84: 99:77:6a:0e:f0:c7:d9:db:85:78:10:24:a0:93:30: 24:1a:13:98:3b:36:01:fa:38:e0:32:95:39:e8:19: 56:c9:a3:ea:f7:6e:33:50:65:03:eb:b6:79:f3:7e: 7b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8F:42:A7:76:80:C4:80:FE:07:0D:15:9C:DA:74:4B:77:CF:BC:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fdfccced-bf3e-30e1-9072-f28a05196371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:28:7a:ad:a1:6e:01:eb:f1:d2:b0:67:a8:dc:77:e0:29:8f: 6f:a2:48:58:46:22:ea:23:09:43:e2:fb:28:2e:ac:1a:ff:22: 98:aa:1f:6b:b8:98:ce:a3:f8:72:63:c5:49:16:98:1a:28:c3: 2d:43:e0:35:32:6b:ba:64:21:66:6b:fa:8e:a9:58:c5:a0:a4: e5:a5:30:72:2d:c2:f7:2b:59:55:3c:8e:f7:bd:eb:da:b7:a8: 0b:b2:ac:c2:cb:39:79:33:5d:33:12:66:55:95:24:f5:e4:ff: 25:9b:d7:7e:27:d1:75:df:3d:97:e8:15:91:55:97:44:01:5f: c4:47:73:78:50:a0:88:4c:39:c9:a4:5c:0f:9a:88:48:12:ac: 4e:64:a1:6d:9a:b8:fb:fa:42:4f:22:88:af:3a:a5:23:23:99: 35:a9:54:7e:f1:37:30:96:8b:07:61:4b:61:a6:81:e5:df:80: 02:62:ef:89:ea:90:3e:64:c9:03:c7:d1:c3:94:60:11:61:72: 2f:5c:75:4f:64:a5:44:d6:70:1f:74:46:ff:f8:08:dd:da:9d: ea:f4:db:39:1d:b8:72:2b:8b:dc:c4:c2:0a:22:1d:48:79:1e: c7:e3:ea:05:39:de:74:2d:0d:0d:a4:36:fc:77:dd:2b:34:bc: 17:d1:2f:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENd/3BZcw5iG53mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YTMzMGZiNzQtNGE4ZC00ZDExLWI3M2EtMmE2ZjM5ZmM4M2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqK1u/OU2P6L+T+OrTslteL/kzULOcQEzrO2 UsqE6XHJKxLd/UTw+OZgBuFlN2qKfNer52vynPFHKysOtQPKTIJMckva+ikJKsxC HQmzrFGymCq6q79bZ2367onxjRl+6dEEPNC8t9Y1eiy1/E7gzKoXj8mKtCYUO6Q5 pMMIKpHCtmrOXCKVQW4EPE0Nailcfb8zdzyWgz25JZen/SM8AG1+cASIXrArNAKU olCCdvwRRUTpuE1zrhZtzNJxYTBWa61V0jTLUUBul85YP7/uh4SZd2oO8MfZ24V4 ECSgkzAkGhOYOzYB+jjgMpU56BlWyaPq924zUGUD67Z583577wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6PQqd2gMSA/gcNFZzadEt3z7y3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmRmY2NjZWQtYmYzZS0z MGUxLTkwNzItZjI4YTA1MTk2MzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQoeq2hbgHr8dKwZ6jcd+Apj2+iSFhGIuojCUPi+ygurBr/IpiqH2u4 mM6j+HJjxUkWmBoowy1D4DUya7pkIWZr+o6pWMWgpOWlMHItwvcrWVU8jve969q3 qAuyrMLLOXkzXTMSZlWVJPXk/yWb134n0XXfPZfoFZFVl0QBX8RHc3hQoIhMOcmk XA+aiEgSrE5koW2auPv6Qk8iiK86pSMjmTWpVH7xNzCWiwdhS2GmgeXfgAJi74nq kD5kyQPH0cOUYBFhci9cdU9kpUTWcB90Rv/4CN3aner02zkduHIri9zEwgoiHUh5 Hsfj6gU53nQtDQ2kNvx33Ss0vBfRL6I= -----END CERTIFICATE-----Generated at Sat Jun 13 14:24:11 2026 by rpki-client