$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/651fe16b-339d-3318-ba58-ee4cace1b054.roa File: 651fe16b-339d-3318-ba58-ee4cace1b054.roa (raw, json) Hash identifier: p5sbMT/ewhy0hG9ykWfeJZH9b1a3Sytt3MiZnm5KVO4= Subject key identifier: E2:AF:09:F0:E7:17:B0:3C:DB:45:F5:AC:EB:62:86:7C:94:E5:D7:BC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D84EF1C178E09232BE80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/651fe16b-339d-3318-ba58-ee4cace1b054.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.249.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d8:4e:f1:c1:78:e0:92:32:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=0ffbb5c4-0c45-4aaa-bffe-e17a38610184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:89:f8:d3:8d:17:68:22:ff:56:73:21:de: 26:59:11:f0:99:c3:bc:c5:ac:2e:86:f8:fe:38:36: 63:e6:10:16:bb:95:a9:8d:e2:a3:5f:1a:1b:4d:2b: ea:6f:32:81:09:02:59:ae:64:13:08:12:85:d5:14: 9d:8d:c7:11:d0:6e:04:31:b2:ac:5e:33:de:17:e1: a4:ae:ed:98:f2:de:13:57:77:c2:a7:0c:d4:05:e0: 65:44:ac:2f:6a:a3:82:bd:41:53:0e:15:a1:88:ce: ee:65:55:f7:09:99:0e:98:b8:04:a3:35:f8:a1:a5: 05:e2:a7:ae:c4:00:b5:6f:a3:5b:3a:3d:b8:2a:50: 58:61:61:3b:de:ab:e8:b6:d2:b1:b3:12:71:66:c0: cc:5e:97:d9:75:ba:a3:46:45:9d:9b:da:cd:5f:56: 17:78:70:6e:23:c5:ea:97:3c:4d:5b:96:18:5c:e7: ae:f4:d0:7f:ed:41:6b:28:4e:c8:a6:54:11:57:29: e5:c2:ac:81:55:55:1f:8f:ce:e8:f3:12:82:9d:16: a9:ee:f3:a5:e7:e6:33:8b:cc:b1:18:77:91:b4:83: fe:14:bd:af:3a:02:1d:36:d7:0b:05:d0:57:f5:e7: 23:30:84:07:4a:97:c3:ba:d2:47:b6:b3:c8:2b:8f: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AF:09:F0:E7:17:B0:3C:DB:45:F5:AC:EB:62:86:7C:94:E5:D7:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/651fe16b-339d-3318-ba58-ee4cace1b054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:6d:13:4a:c8:02:38:be:4d:8b:c9:cb:10:7e:98:e3:68:f4: b5:dc:49:12:eb:6d:0a:79:91:a5:c7:99:39:a3:e5:7c:4d:52: 74:c9:20:a1:ac:c5:d0:1a:34:b0:c4:73:c2:3d:c9:69:7e:f0: 03:56:6c:72:36:ca:85:43:15:63:e1:46:c1:a5:f1:7a:78:c0: 99:86:1f:1e:58:dd:a2:09:4d:9b:4c:1c:9f:dd:6f:cb:de:b9: 96:80:fb:b9:ab:48:f3:2b:4e:ee:a9:b9:d0:75:6d:53:6d:8b: f1:3d:fc:1d:06:36:28:9c:86:d3:2c:c8:6a:77:59:e1:a1:1e: 7c:74:f5:ea:ea:36:c6:a0:ec:34:03:92:5a:38:7f:44:ce:f5: b9:0d:4d:90:9c:e1:a9:dc:82:08:77:d3:6e:10:8c:7e:f4:f2: 60:50:db:59:a0:05:1d:81:c2:36:58:b0:74:8c:8c:66:0a:4b: d1:54:aa:af:f7:27:73:42:77:af:51:f2:ed:4a:ee:39:ff:4b: 93:54:12:54:b4:c0:f7:a1:d3:fe:14:56:79:61:80:65:fb:33: 9b:19:01:79:eb:54:5e:81:c8:9d:3b:00:e1:c2:0a:59:3d:5d: d1:69:92:09:1a:53:ec:93:6b:e5:cc:af:b6:d0:e4:c1:a5:f7: cd:a2:d9:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdhO8cF44JIyvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MGZmYmI1YzQtMGM0NS00YWFhLWJmZmUtZTE3YTM4NjEwMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleyJ+NONF2gi/1ZzId4mWRHwmcO8xawuhvj+ ODZj5hAWu5WpjeKjXxobTSvqbzKBCQJZrmQTCBKF1RSdjccR0G4EMbKsXjPeF+Gk ru2Y8t4TV3fCpwzUBeBlRKwvaqOCvUFTDhWhiM7uZVX3CZkOmLgEozX4oaUF4qeu xAC1b6NbOj24KlBYYWE73qvottKxsxJxZsDMXpfZdbqjRkWdm9rNX1YXeHBuI8Xq lzxNW5YYXOeu9NB/7UFrKE7IplQRVynlwqyBVVUfj87o8xKCnRap7vOl5+Yzi8yx GHeRtIP+FL2vOgIdNtcLBdBX9ecjMIQHSpfDutJHtrPIK48AKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKvCfDnF7A820X1rOtihnyU5de8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjUxZmUxNmItMzM5ZC0z MzE4LWJhNTgtZWU0Y2FjZTFiMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1tE0rIAji+TYvJyxB+mONo9LXcSRLrbQp5kaXHmTmj5XxNUnTJIKGs xdAaNLDEc8I9yWl+8ANWbHI2yoVDFWPhRsGl8Xp4wJmGHx5Y3aIJTZtMHJ/db8ve uZaA+7mrSPMrTu6pudB1bVNti/E9/B0GNiichtMsyGp3WeGhHnx09erqNsag7DQD klo4f0TO9bkNTZCc4ancggh3024QjH708mBQ21mgBR2BwjZYsHSMjGYKS9FUqq/3 J3NCd69R8u1K7jn/S5NUElS0wPeh0/4UVnlhgGX7M5sZAXnrVF6ByJ07AOHCClk9 XdFpkgkaU+yTa+XMr7bQ5MGl982i2fk= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:40 2025 by rpki-client