$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa File: 3b03f92f-103e-3d7e-abfa-c7431f00a281.roa (raw, json) Hash identifier: +9aM260+S6AjcXuITlKZ/QXXFJS5ZLbDO4cltWl+ebA= Subject key identifier: CB:EC:04:17:0C:C0:E3:97:22:43:DE:96:AF:3B:C3:57:9D:1E:94:5C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620238254FDCA63EEBA9F7E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.249.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:38:25:4f:dc:a6:3e:eb:a9:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=9dbfa057-4d61-4c38-bd4b-5ecc353e58d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:25:88:31:31:a1:52:8f:69:9c:45:83:a2:7e: dc:fd:24:2a:71:ab:06:92:64:54:26:ce:99:9a:ad: a4:7f:b6:70:87:0d:35:3d:b1:2b:48:68:42:2d:5c: f9:10:71:ef:ca:4d:0d:f7:9f:78:be:97:ae:60:83: 9b:04:fa:c2:aa:8c:30:74:f8:4c:53:cd:85:c9:d7: c9:ee:5d:cc:66:6a:e8:e5:ae:c1:53:1e:e3:7c:73: d7:e3:a3:2f:7d:c5:9e:de:0e:50:a6:58:0c:df:de: de:4f:9c:41:60:37:41:57:78:75:ff:51:8f:41:58: 64:14:3d:a0:bd:f7:6c:7d:f8:86:c8:1a:a4:c0:f7: 97:ab:bb:ea:e5:91:90:21:02:43:5b:3b:96:c7:b3: cb:d0:82:ef:fa:aa:bd:6c:b8:d9:f2:e7:97:8b:31: c8:a2:26:ce:18:50:39:57:a5:6c:c5:a2:41:eb:1e: 99:fc:83:a3:8f:6a:fa:e7:26:7f:79:f9:25:d2:c7: b3:e2:b7:f6:b9:a2:01:95:c8:95:73:cc:a1:bf:78: f1:4d:af:b1:6b:0b:f0:ff:65:b4:f1:2e:4c:65:61: 77:54:5b:fe:1e:48:c7:35:ae:cd:38:71:fa:bd:1e: 8b:d0:15:81:9f:28:e4:82:51:7a:bb:da:d3:2b:df: d0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EC:04:17:0C:C0:E3:97:22:43:DE:96:AF:3B:C3:57:9D:1E:94:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b6:55:25:12:7d:5c:da:93:3e:ed:00:ad:c3:53:8b:7b:f5: ea:be:ad:3e:7a:cc:fd:55:fa:fc:8e:b8:80:91:52:53:68:3a: 27:2c:a2:c9:f1:1b:c6:30:85:15:47:76:97:26:9d:3e:eb:36: 9f:15:61:63:ee:9f:e2:72:5f:7e:ad:06:e8:f0:48:fd:55:db: 68:27:b0:6a:f2:47:8b:24:af:8e:fa:84:07:f6:f0:81:08:17: 52:b0:5b:5f:60:16:30:57:cc:db:6f:0f:cc:a3:d4:46:63:d8: c6:4b:ff:85:6b:01:e5:ad:75:f6:20:b0:77:96:7c:fe:ae:e1: c8:70:67:2b:9c:c8:30:10:4c:42:be:9a:ae:fa:fc:ac:75:19: 18:1f:8f:3e:af:f2:af:5e:be:da:66:cc:f4:6a:cd:46:41:9c: 18:7a:24:9b:1d:3e:a1:63:35:7d:d9:85:a8:d0:b2:e7:19:b1: 6f:95:7b:fb:2f:58:af:45:33:80:47:0a:92:6c:bb:b8:5e:61: 40:67:1a:60:6b:e6:57:b5:9b:6e:13:31:50:45:d3:28:d1:fb: ee:b1:6b:d8:30:e9:fa:7c:f8:39:51:a4:33:34:5a:6e:ae:b1: 84:c7:4d:d7:ca:ad:00:8a:60:4f:ce:e0:19:05:db:36:1a:f9: 31:ba:8d:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjglT9ymPuup9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWRiZmEwNTctNGQ2MS00YzM4LWJkNGItNWVjYzM1M2U1OGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyWIMTGhUo9pnEWDon7c/SQqcasGkmRUJs6Z mq2kf7Zwhw01PbErSGhCLVz5EHHvyk0N9594vpeuYIObBPrCqowwdPhMU82FydfJ 7l3MZmro5a7BUx7jfHPX46MvfcWe3g5QplgM397eT5xBYDdBV3h1/1GPQVhkFD2g vfdsffiGyBqkwPeXq7vq5ZGQIQJDWzuWx7PL0ILv+qq9bLjZ8ueXizHIoibOGFA5 V6VsxaJB6x6Z/IOjj2r65yZ/efkl0sez4rf2uaIBlciVc8yhv3jxTa+xawvw/2W0 8S5MZWF3VFv+HkjHNa7NOHH6vR6L0BWBnyjkglF6u9rTK9/QewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvsBBcMwOOXIkPelq87w1edHpRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2IwM2Y5MmYtMTAzZS0z ZDdlLWFiZmEtYzc0MzFmMDBhMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm2VSUSfVzakz7tAK3DU4t79eq+rT56zP1V+vyOuICRUlNoOicsosnx G8YwhRVHdpcmnT7rNp8VYWPun+JyX36tBujwSP1V22gnsGryR4skr476hAf28IEI F1KwW19gFjBXzNtvD8yj1EZj2MZL/4VrAeWtdfYgsHeWfP6u4chwZyucyDAQTEK+ mq76/Kx1GRgfjz6v8q9evtpmzPRqzUZBnBh6JJsdPqFjNX3ZhajQsucZsW+Ve/sv WK9FM4BHCpJsu7heYUBnGmBr5le1m24TMVBF0yjR++6xa9gw6fp8+DlRpDM0Wm6u sYTHTdfKrQCKYE/O4BkF2zYa+TG6jd0= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:42 2025 by rpki-client