$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/764f32d1-1e37-3fd1-a042-01b5f91bbe4d.roa File: 764f32d1-1e37-3fd1-a042-01b5f91bbe4d.roa (raw, json) Hash identifier: i+amwNTtNR29xBwkXFYLIrVBX96YAftjxhpFzTD105M= Subject key identifier: 68:6A:40:08:C5:C8:02:77:8A:49:D7:6B:08:17:FB:FC:9A:23:27:07 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62022CC2F9D75E2577DAFFE0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/764f32d1-1e37-3fd1-a042-01b5f91bbe4d.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.249.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:2c:c2:f9:d7:5e:25:77:da:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4bb7b6cf-fc04-4dc9-9263-12eca4f7d46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:17:25:57:19:a2:1c:4f:e5:46:02:96:51:f5: 91:14:4c:24:4e:a5:6f:a7:e9:7f:1c:c0:73:59:55: ab:a0:64:72:84:24:21:19:d9:5a:b2:98:dc:11:af: c2:0e:4a:ec:3a:84:08:7f:95:58:d4:6e:53:91:dd: 37:d9:45:37:9e:0e:87:f3:01:2c:5d:34:18:d5:39: c8:a9:8a:b0:9d:db:87:cd:87:b0:80:d8:d0:85:51: b7:b7:03:02:56:a0:a2:b0:58:20:33:25:d9:17:0d: a3:c4:f4:52:d0:30:66:2f:a6:16:17:02:2c:a6:e9: 07:48:1b:4c:b3:0c:c2:9a:fd:cc:59:3f:41:3d:8e: d9:18:1a:bc:9c:89:f1:fb:0c:3e:aa:b3:7b:e4:b6: dd:88:67:23:e6:0b:fd:e9:ad:af:d1:ba:73:a4:a4: a0:a7:f1:3f:b0:4b:61:34:d6:e3:55:18:0d:0a:2a: 4f:8b:6b:7c:d1:30:48:7e:e6:50:33:e9:05:13:d2: 66:7d:92:84:ff:bc:33:af:fd:e5:d4:67:4c:6f:f5: 17:1f:7f:ce:7b:ce:a3:82:89:a8:3a:9b:b5:e3:9a: 47:86:bf:a1:fa:c4:69:a9:27:ad:4c:f5:5a:16:6e: 56:a7:45:a8:13:62:be:64:b0:4d:6a:61:25:8f:2c: 93:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6A:40:08:C5:C8:02:77:8A:49:D7:6B:08:17:FB:FC:9A:23:27:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/764f32d1-1e37-3fd1-a042-01b5f91bbe4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f0:f3:9d:6d:1a:7f:8b:95:f6:68:63:11:a7:9f:bf:cb:e4: 37:40:b5:6b:e5:a5:b5:2d:57:0a:23:f3:88:d5:56:32:07:24: 0d:6b:44:d3:35:cf:2a:e1:f4:16:ad:47:0f:36:f4:91:ea:8a: 86:f2:d4:a1:fd:24:ba:00:3f:cf:69:a6:dd:50:4d:ef:4d:7b: 7c:fc:97:aa:87:2e:78:24:42:a9:09:40:74:96:14:41:17:1d: d7:e4:a1:72:25:7e:05:a6:ec:ad:81:4f:9f:49:0a:71:c8:85: 41:25:d9:d6:2c:c4:5a:00:2e:71:c8:fb:e6:d4:ce:0c:55:4f: a5:b0:13:39:80:74:85:62:01:49:70:f5:3a:92:56:e1:0f:5d: 6f:64:55:c7:c8:49:d6:79:e4:45:a7:81:62:42:78:76:f4:e4: bb:0f:dd:e4:5b:4b:b3:16:23:c4:fb:80:ca:3b:7d:35:56:47: b6:3b:4c:c4:55:fe:0c:b1:6e:de:7b:f5:42:46:e4:a4:86:30: 71:4c:47:11:5c:2d:4e:ab:77:bb:fa:9d:96:b7:c9:73:3c:75: 8e:1d:c0:fe:9d:01:ad:52:10:e5:7e:ac:47:54:08:bd:73:3e: 13:de:d2:dd:fc:90:42:f4:00:e1:b0:10:ba:9e:be:e1:be:80: d9:70:f8:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAizC+ddeJXfa/+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGJiN2I2Y2YtZmMwNC00ZGM5LTkyNjMtMTJlY2E0ZjdkNDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxclVxmiHE/lRgKWUfWRFEwkTqVvp+l/HMBz WVWroGRyhCQhGdlaspjcEa/CDkrsOoQIf5VY1G5Tkd032UU3ng6H8wEsXTQY1TnI qYqwnduHzYewgNjQhVG3twMCVqCisFggMyXZFw2jxPRS0DBmL6YWFwIspukHSBtM swzCmv3MWT9BPY7ZGBq8nInx+ww+qrN75LbdiGcj5gv96a2v0bpzpKSgp/E/sEth NNbjVRgNCipPi2t80TBIfuZQM+kFE9JmfZKE/7wzr/3l1GdMb/UXH3/Oe86jgomo Opu145pHhr+h+sRpqSetTPVaFm5Wp0WoE2K+ZLBNamEljyyTRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhqQAjFyAJ3iknXawgX+/yaIycHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzY0ZjMyZDEtMWUzNy0z ZmQxLWEwNDItMDFiNWY5MWJiZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjw851tGn+LlfZoYxGnn7/L5DdAtWvlpbUtVwoj84jVVjIHJA1rRNM1 zyrh9BatRw829JHqioby1KH9JLoAP89ppt1QTe9Ne3z8l6qHLngkQqkJQHSWFEEX HdfkoXIlfgWm7K2BT59JCnHIhUEl2dYsxFoALnHI++bUzgxVT6WwEzmAdIViAUlw 9TqSVuEPXW9kVcfISdZ55EWngWJCeHb05LsP3eRbS7MWI8T7gMo7fTVWR7Y7TMRV /gyxbt579UJG5KSGMHFMRxFcLU6rd7v6nZa3yXM8dY4dwP6dAa1SEOV+rEdUCL1z PhPe0t38kEL0AOGwELqevuG+gNlw+Os= -----END CERTIFICATE-----Generated at Fri Oct 10 19:47:34 2025 by rpki-client