$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/06ffc670-1044-3d65-8ef0-d53be9f53444.roa File: 06ffc670-1044-3d65-8ef0-d53be9f53444.roa (raw, json) Hash identifier: 3nKtlsfRRdnk891CihcWKl2TE6HRypClb6D7ME61niA= Subject key identifier: 54:C8:C6:29:5D:43:C5:DD:FE:0F:98:19:7B:48:AD:55:E7:FC:A4:4F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63673D59F58FE9702C2BAB80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/06ffc670-1044-3d65-8ef0-d53be9f53444.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 199.249.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3d:59:f5:8f:e9:70:2c:2b:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=86aea5c1-a846-4e06-aa67-1945f955f939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4a:84:ce:12:30:03:85:aa:7f:31:7c:a4:70: a8:a5:5d:9d:7c:46:01:ea:f0:69:59:94:2f:bb:1d: c4:7e:ab:be:e2:d4:55:b8:9f:3e:2d:08:98:26:f2: 58:49:62:a2:c5:d5:72:1d:82:8e:f6:eb:74:cc:7a: b9:9d:2c:24:c2:af:86:83:ff:20:3f:7b:2c:70:43: 9c:fa:bd:76:ab:40:39:24:8b:6a:65:99:0d:11:fd: 2b:cd:79:6c:77:a6:3c:1b:73:ab:bf:8b:17:f9:cc: b5:99:52:24:95:c2:2b:d4:f4:0e:81:0a:a8:20:0d: 5e:26:d6:a3:ab:53:18:62:f7:45:ff:b6:df:86:b5: ab:11:06:ac:7c:21:6e:1f:74:ee:eb:fe:68:7e:46: 8d:49:b7:81:15:1f:97:bd:0a:4a:3f:1b:30:ad:f4: 83:84:4f:d1:6a:f1:bd:39:b4:d3:29:3d:57:01:bb: 42:47:b5:ad:43:ac:36:2b:3a:63:91:c2:5e:6a:75: 2e:d0:9b:fa:f4:ba:32:c3:c5:62:be:d9:70:7c:0a: 0d:38:e9:3b:45:6a:5b:e5:ca:8c:9a:87:09:72:4c: 08:87:dc:ee:53:5e:be:ed:b5:0f:59:ea:a7:fe:e4: 66:e5:e2:c1:21:f5:55:05:85:bc:88:35:11:29:f1: 0a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C8:C6:29:5D:43:C5:DD:FE:0F:98:19:7B:48:AD:55:E7:FC:A4:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/06ffc670-1044-3d65-8ef0-d53be9f53444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2e:17:85:5f:c8:18:0c:3e:fb:69:7d:6e:27:ba:90:c8:a6: d4:c8:bd:86:7b:d4:18:65:09:92:79:60:08:5c:26:b3:7e:04: 75:bf:0f:66:30:e8:fd:75:0a:52:4a:14:53:d7:76:f8:db:7c: c3:34:da:1b:3a:3a:ae:c2:0b:44:c0:50:56:c2:04:6f:59:44: 9c:13:db:08:f8:c2:a6:f0:70:1d:75:bc:31:68:b4:f3:c1:ea: 65:89:3d:44:07:9f:6c:b5:b3:98:c6:bb:5e:5e:bc:47:47:f6: b6:0c:56:27:47:64:6c:84:2b:48:8f:91:4b:07:e8:ed:60:9b: 91:a8:a2:a1:24:bf:48:7f:ca:28:ad:0d:32:06:88:4e:1a:c0: 38:d4:b8:9c:84:65:68:4c:d6:09:7f:45:d6:0a:29:07:b3:65: 49:a7:c2:83:95:71:50:96:47:ad:29:d3:e2:77:63:20:73:89: 7f:f7:a3:87:05:94:ab:51:d6:4b:04:89:88:6a:9a:50:9a:3e: 6a:dc:29:1e:29:25:29:14:3e:16:06:8e:68:ce:a4:57:c2:3a: 13:08:36:50:00:75:64:89:ea:8b:d2:fe:38:f6:a9:38:f6:be: fd:17:da:f9:3b:59:8b:e6:2f:9b:34:01:1f:74:de:3a:8e:28: 58:54:7e:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZz1Z9Y/pcCwrq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ODZhZWE1YzEtYTg0Ni00ZTA2LWFhNjctMTk0NWY5NTVmOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUqEzhIwA4WqfzF8pHCopV2dfEYB6vBpWZQv ux3Efqu+4tRVuJ8+LQiYJvJYSWKixdVyHYKO9ut0zHq5nSwkwq+Gg/8gP3sscEOc +r12q0A5JItqZZkNEf0rzXlsd6Y8G3Orv4sX+cy1mVIklcIr1PQOgQqoIA1eJtaj q1MYYvdF/7bfhrWrEQasfCFuH3Tu6/5ofkaNSbeBFR+XvQpKPxswrfSDhE/RavG9 ObTTKT1XAbtCR7WtQ6w2KzpjkcJeanUu0Jv69Loyw8VivtlwfAoNOOk7RWpb5cqM mocJckwIh9zuU16+7bUPWeqn/uRm5eLBIfVVBYW8iDURKfEKCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTIxildQ8Xd/g+YGXtIrVXn/KRPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDZmZmM2NzAtMTA0NC0z ZDY1LThlZjAtZDUzYmU5ZjUzNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQuF4VfyBgMPvtpfW4nupDIptTIvYZ71BhlCZJ5YAhcJrN+BHW/D2Yw 6P11ClJKFFPXdvjbfMM02hs6Oq7CC0TAUFbCBG9ZRJwT2wj4wqbwcB11vDFotPPB 6mWJPUQHn2y1s5jGu15evEdH9rYMVidHZGyEK0iPkUsH6O1gm5GooqEkv0h/yiit DTIGiE4awDjUuJyEZWhM1gl/RdYKKQezZUmnwoOVcVCWR60p0+J3YyBziX/3o4cF lKtR1ksEiYhqmlCaPmrcKR4pJSkUPhYGjmjOpFfCOhMINlAAdWSJ6ovS/jj2qTj2 vv0X2vk7WYvmL5s0AR903jqOKFhUfhA= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:30 2025 by rpki-client