$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa File: 2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa (raw, json) Hash identifier: rYxIwADo0QG5yBaRw3HX43o0GfwQHLf/UG3ancXqmrE= Subject key identifier: D6:5B:DF:50:AB:29:D1:63:79:1F:B0:BE:F8:02:47:EC:04:AA:CD:6F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6367376B8AC20C1FA9190680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 199.249.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:37:6b:8a:c2:0c:1f:a9:19:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=8f2339da-9fcf-4672-bc30-a2973f0d0c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:75:ec:64:10:71:bf:eb:d7:98:91:1d:2e:4b: b9:5e:12:f7:70:d4:a1:09:36:5b:f8:da:74:5d:c6: d4:c8:98:e7:b0:51:51:5d:53:b0:bc:84:98:fc:5d: a9:9e:33:60:76:c5:c8:41:81:bb:5c:d9:0a:7a:16: d3:c2:e6:fa:c9:a4:c2:36:eb:ec:f7:20:87:c9:ee: 6a:9d:05:ac:aa:19:01:9f:29:28:82:9f:ad:2b:18: 48:13:5c:13:d8:bb:36:bf:73:45:33:df:b2:70:25: cb:28:26:38:57:a0:98:dc:a0:a2:21:c2:96:b8:69: 18:ef:fe:36:ae:2e:06:70:79:0a:a1:dc:e8:33:09: 09:31:7c:0b:21:49:77:3c:f6:da:8b:67:60:de:55: ea:d4:8b:9b:d8:b5:5a:7c:9f:39:7d:d4:c8:94:4a: c3:9e:ab:f4:14:57:84:61:29:84:eb:c5:09:32:6c: 31:4c:f1:12:c8:c9:8c:72:3d:a9:45:c6:a3:f6:53: bf:f2:b2:86:16:68:5e:26:1d:e9:86:ea:d3:79:f3: 3b:16:59:45:b2:9b:b5:1d:b0:47:aa:ad:96:79:be: 51:cb:a7:c7:00:26:86:89:ed:c2:dd:21:a3:b8:41: 3f:d6:d0:a0:0f:1b:27:7e:f7:7f:ce:3e:a0:9e:75: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5B:DF:50:AB:29:D1:63:79:1F:B0:BE:F8:02:47:EC:04:AA:CD:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:56:c8:12:e0:ea:74:0b:23:2d:6f:de:19:5c:88:6e:4b:93: 33:55:51:51:27:07:60:19:15:8b:b7:20:d5:97:15:5e:11:21: 45:99:00:04:fb:5e:08:f8:33:4c:9c:c6:18:ef:65:92:33:72: 48:e0:2b:29:ae:69:e1:cd:25:95:f8:8c:31:b6:5e:08:d2:bd: fa:58:7b:eb:8d:d1:85:d9:18:c0:32:75:b5:a8:cd:04:85:7c: c0:0a:34:46:d4:e0:2f:85:92:49:e3:cd:3a:12:57:e2:b6:6b: 74:fa:93:7f:d6:39:68:7a:04:6c:dd:80:e2:e6:f8:00:24:04: 25:aa:f6:a5:2f:3d:f6:29:77:e4:c4:ee:e6:60:da:28:dd:d2: 6f:58:3b:1b:6c:d6:6f:35:c8:1f:98:80:99:40:70:f4:6d:7a: 87:ad:fc:8a:b1:02:97:2b:51:38:58:e4:38:43:8a:2e:48:fb: 80:8f:c3:08:35:29:f6:04:a5:3f:38:2f:25:56:f5:8e:72:27: 2a:7e:bb:ac:10:b3:d7:57:81:f3:3c:52:e2:fd:cf:48:98:8a: 84:ec:b8:5f:ec:a4:d1:ad:77:72:9c:f0:02:5b:e5:16:e0:f2: db:2a:0f:d2:aa:b3:08:c4:44:88:25:7f:47:94:32:45:38:2b: 8e:a1:e8:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZzdrisIMH6kZBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk OGYyMzM5ZGEtOWZjZi00NjcyLWJjMzAtYTI5NzNmMGQwYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXXsZBBxv+vXmJEdLku5XhL3cNShCTZb+Np0 XcbUyJjnsFFRXVOwvISY/F2pnjNgdsXIQYG7XNkKehbTwub6yaTCNuvs9yCHye5q nQWsqhkBnykogp+tKxhIE1wT2Ls2v3NFM9+ycCXLKCY4V6CY3KCiIcKWuGkY7/42 ri4GcHkKodzoMwkJMXwLIUl3PPbai2dg3lXq1Iub2LVafJ85fdTIlErDnqv0FFeE YSmE68UJMmwxTPESyMmMcj2pRcaj9lO/8rKGFmheJh3phurTefM7FllFspu1HbBH qq2Web5Ry6fHACaGie3C3SGjuEE/1tCgDxsnfvd/zj6gnnU8pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZb31CrKdFjeR+wvvgCR+wEqs1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjIzMWI4ZWMtOWM0Yy0z ZmIwLTg4NmUtZjNlOGMxZjllNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBWyBLg6nQLIy1v3hlciG5LkzNVUVEnB2AZFYu3INWXFV4RIUWZAAT7 Xgj4M0ycxhjvZZIzckjgKymuaeHNJZX4jDG2XgjSvfpYe+uN0YXZGMAydbWozQSF fMAKNEbU4C+FkknjzToSV+K2a3T6k3/WOWh6BGzdgOLm+AAkBCWq9qUvPfYpd+TE 7uZg2ijd0m9YOxts1m81yB+YgJlAcPRteoet/IqxApcrUThY5DhDii5I+4CPwwg1 KfYEpT84LyVW9Y5yJyp+u6wQs9dXgfM8UuL9z0iYioTsuF/spNGtd3Kc8AJb5Rbg 8tsqD9KqswjERIglf0eUMkU4K46h6Lg= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:20 2025 by rpki-client