$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e39fc82-127b-32cc-b0d9-2fb55839611a.roa File: 8e39fc82-127b-32cc-b0d9-2fb55839611a.roa (raw, json) Hash identifier: 2MKGsCXQuNx3mnXwbcUYHsnwP21f0x46fJDlJ9vLGSY= Subject key identifier: B9:A5:54:CA:47:27:6A:C9:CB:F1:80:A5:8F:98:EA:49:D1:24:46:7A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6367494D95596ACC6B743F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e39fc82-127b-32cc-b0d9-2fb55839611a.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 199.249.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:49:4d:95:59:6a:cc:6b:74:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=c3fce0cc-4e96-4799-94c9-84be6be25fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:eb:36:b8:6e:3e:8f:c6:2f:5d:90:a4:ec: 5b:45:2e:96:aa:ab:a9:a5:a3:11:ef:60:c3:ee:24: b8:3f:0e:14:a4:5d:6f:36:f4:e9:aa:38:fb:ca:87: 5a:0c:ef:89:fe:c5:31:11:64:88:ae:45:ba:51:86: 1e:c5:5e:aa:ec:81:38:6c:58:e7:fc:40:6a:b1:c2: 23:9b:80:c1:64:40:a9:ab:79:35:30:7c:6e:1a:5d: 15:8d:60:94:a8:30:5f:e6:84:97:84:76:7c:28:38: 48:da:92:09:8d:59:8b:a0:81:77:42:1b:f7:70:8d: b8:c6:7a:be:35:88:d9:5e:ef:4e:88:f7:c4:5b:ab: 0d:9b:b2:7f:dd:1d:72:5d:42:9e:6e:56:5b:04:67: 9b:8b:54:25:54:06:d4:d2:d9:76:ff:ab:9e:6d:06: 92:cf:41:7f:e8:9b:5d:5f:01:b3:1a:fe:bb:ce:e1: aa:35:d7:ea:71:36:47:db:4f:12:2b:1b:d9:41:9a: ff:32:21:ad:8e:9c:45:d7:86:9d:aa:b0:1a:d1:ec: 8d:53:5f:eb:ee:e3:e4:2d:e8:c0:2e:8b:03:85:95: 05:b8:8a:e2:b5:60:e2:99:ad:15:e3:8f:1b:e4:ba: 35:36:1a:13:16:88:88:99:6f:4c:94:d7:fe:46:ec: 23:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A5:54:CA:47:27:6A:C9:CB:F1:80:A5:8F:98:EA:49:D1:24:46:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e39fc82-127b-32cc-b0d9-2fb55839611a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:88:17:67:d6:da:d2:3f:61:9a:d1:a7:15:bf:7c:a9:fe:1b: 0b:34:fe:f2:da:b0:26:e3:c7:89:b5:1e:87:f7:b4:ea:ac:af: 06:c6:31:55:25:fe:4d:bb:e6:74:00:12:5a:f7:98:1d:40:c5: 26:34:91:8f:75:b8:ee:ee:93:41:79:39:f7:e4:fc:bb:f7:b2: 63:c9:f0:6d:8b:f4:00:72:54:e8:c8:ac:e1:78:bb:16:d0:e4: df:f9:0b:bc:a4:d7:bd:83:d0:4d:39:78:32:77:d9:7a:82:8d: 19:bc:11:b9:8d:27:cc:0d:1a:ae:c2:f7:86:05:a2:17:aa:c7: 7f:37:39:f6:3f:9e:26:78:db:1d:01:86:35:9e:95:b3:36:ca: cd:87:1c:c3:27:6b:84:df:df:d4:bc:7e:37:73:e0:88:7e:f7: 7d:95:dc:d7:58:48:a1:70:15:77:93:32:72:9d:30:2f:e0:5f: 3e:b7:2d:db:6c:2a:4b:d6:35:53:12:41:ce:60:b9:0f:a2:3e: 6c:93:ce:2b:b6:9f:63:3d:5c:d4:57:83:c2:32:c6:ff:12:41: 26:58:27:6e:31:db:94:46:47:07:d6:80:ae:de:3a:41:a6:4a: d2:a1:7f:8a:91:72:b9:6b:59:3d:1b:78:5f:5b:23:d0:24:08: ea:37:6d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0lNlVlqzGt0PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YzNmY2UwY2MtNGU5Ni00Nzk5LTk0YzktODRiZTZiZTI1ZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/jrNrhuPo/GL12QpOxbRS6WqquppaMR72DD 7iS4Pw4UpF1vNvTpqjj7yodaDO+J/sUxEWSIrkW6UYYexV6q7IE4bFjn/EBqscIj m4DBZECpq3k1MHxuGl0VjWCUqDBf5oSXhHZ8KDhI2pIJjVmLoIF3Qhv3cI24xnq+ NYjZXu9OiPfEW6sNm7J/3R1yXUKeblZbBGebi1QlVAbU0tl2/6uebQaSz0F/6Jtd XwGzGv67zuGqNdfqcTZH208SKxvZQZr/MiGtjpxF14adqrAa0eyNU1/r7uPkLejA LosDhZUFuIritWDima0V448b5Lo1NhoTFoiImW9MlNf+Ruwj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmlVMpHJ2rJy/GApY+Y6knRJEZ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGUzOWZjODItMTI3Yi0z MmNjLWIwZDktMmZiNTU4Mzk2MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGIF2fW2tI/YZrRpxW/fKn+Gws0/vLasCbjx4m1Hof3tOqsrwbGMVUl /k275nQAElr3mB1AxSY0kY91uO7uk0F5Offk/Lv3smPJ8G2L9AByVOjIrOF4uxbQ 5N/5C7yk172D0E05eDJ32XqCjRm8EbmNJ8wNGq7C94YFoheqx383OfY/niZ42x0B hjWelbM2ys2HHMMna4Tf39S8fjdz4Ih+932V3NdYSKFwFXeTMnKdMC/gXz63Ldts KkvWNVMSQc5guQ+iPmyTziu2n2M9XNRXg8Iyxv8SQSZYJ24x25RGRwfWgK7eOkGm StKhf4qRcrlrWT0beF9bI9AkCOo3bds= -----END CERTIFICATE-----Generated at Fri Oct 10 22:21:10 2025 by rpki-client