$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c7262472-f5e9-30e5-bec9-58d3d0afe7eb.roa File: c7262472-f5e9-30e5-bec9-58d3d0afe7eb.roa (raw, json) Hash identifier: HrPdzuj00Dc/EwkQ77ea+A2tCOcoQte+TWkPfG91d4A= Subject key identifier: 6C:58:4D:95:0A:C9:6F:84:C8:75:B2:36:DD:6A:01:25:3B:AF:23:61 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B636749C818600815B44B8A80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c7262472-f5e9-30e5-bec9-58d3d0afe7eb.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 199.249.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:49:c8:18:60:08:15:b4:4b:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=e5f7ce81-5209-4062-ace1-7a581ae4735f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:a7:54:3e:57:6e:87:c9:fc:9c:e8:e8:2b: 2e:cc:ba:44:c7:bd:eb:a3:62:a2:51:bd:a0:34:c0: b8:a0:ca:01:01:b1:5d:f4:39:e9:dc:d6:f6:01:46: d2:1a:3a:79:a4:13:9d:ad:e4:b7:8d:70:96:4e:32: 36:de:2e:71:ab:76:6d:5d:33:c0:a0:fa:6a:56:3f: 19:64:3f:20:33:dc:58:53:df:d5:de:d3:48:6f:31: 10:76:e3:03:35:b6:8a:34:c2:dc:d5:f2:a0:28:bf: 7d:7b:6e:1b:47:16:a0:2e:bd:73:57:44:e4:eb:90: 16:32:7a:b3:ca:fc:ba:04:cc:a1:08:b1:ea:fb:c7: 0b:eb:6d:7a:72:16:49:3d:4c:98:d9:35:d7:20:59: 49:9a:7d:a4:62:64:c0:b4:16:48:8e:15:fa:66:94: 2c:49:a9:13:e3:05:60:99:a9:4d:d1:85:43:ac:91: 37:35:bd:01:93:59:ac:d7:7b:1f:f6:4d:30:28:5d: 28:3f:a9:56:58:a2:c4:00:cb:b7:43:ad:33:b1:5a: 98:19:3e:72:fb:01:ee:68:d1:32:11:ab:56:94:04: 75:6c:56:12:28:03:a3:b2:cd:dd:a5:7a:8e:94:ca: bb:ec:00:b2:11:d0:0e:f2:67:6d:8f:55:df:a4:d0: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:58:4D:95:0A:C9:6F:84:C8:75:B2:36:DD:6A:01:25:3B:AF:23:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c7262472-f5e9-30e5-bec9-58d3d0afe7eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:4d:14:06:fe:0f:3e:50:0e:98:b8:cd:35:a5:13:9c:44:f2: 0d:35:00:f6:22:fc:9d:89:43:c8:99:da:f1:cc:01:65:fd:7b: cd:ee:53:db:73:d1:94:3a:2d:9f:dc:56:f7:25:68:5c:94:23: 0f:00:38:4a:a3:e7:ff:53:6d:1a:02:a1:da:d3:de:ea:ec:34: 02:f2:71:1b:d7:1c:b4:52:db:ad:24:75:eb:e6:fa:af:a9:22: dc:e3:2f:bf:84:f8:52:cf:46:52:47:6b:a2:2d:5b:a2:46:12: e2:f7:b0:e9:12:e9:65:19:9e:37:1d:b6:da:55:4b:4a:3b:78: 65:b1:6b:ab:56:f9:22:2d:85:fb:59:51:d5:67:6a:3e:3c:6f: 6e:32:d2:5d:0c:e7:8e:49:f0:59:ed:b3:08:61:9e:ff:07:9c: 5d:2b:f5:af:ec:f4:d6:8c:1b:08:8f:62:29:da:e5:b9:10:31: b9:e4:70:4d:72:32:b1:1d:c3:6b:63:26:bd:20:6a:3b:f7:0e: e4:f0:d9:dc:c3:d9:7d:b6:7f:a4:23:31:29:e6:81:82:00:3f: f0:05:4e:ec:0e:45:b3:81:cb:f2:ff:13:8f:bd:c3:aa:2e:5a: dc:3e:b4:2c:d3:90:50:6f:8d:37:90:0e:94:06:8f:44:42:eb: 7b:73:8c:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0nIGGAIFbRLioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZTVmN2NlODEtNTIwOS00MDYyLWFjZTEtN2E1ODFhZTQ3MzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBmnVD5XbofJ/Jzo6CsuzLpEx73ro2KiUb2g NMC4oMoBAbFd9Dnp3Nb2AUbSGjp5pBOdreS3jXCWTjI23i5xq3ZtXTPAoPpqVj8Z ZD8gM9xYU9/V3tNIbzEQduMDNbaKNMLc1fKgKL99e24bRxagLr1zV0Tk65AWMnqz yvy6BMyhCLHq+8cL6216chZJPUyY2TXXIFlJmn2kYmTAtBZIjhX6ZpQsSakT4wVg malN0YVDrJE3Nb0Bk1ms13sf9k0wKF0oP6lWWKLEAMu3Q60zsVqYGT5y+wHuaNEy EatWlAR1bFYSKAOjss3dpXqOlMq77ACyEdAO8mdtj1XfpNAgMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxYTZUKyW+EyHWyNt1qASU7ryNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzcyNjI0NzItZjVlOS0z MGU1LWJlYzktNThkM2QwYWZlN2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRNFAb+Dz5QDpi4zTWlE5xE8g01APYi/J2JQ8iZ2vHMAWX9e83uU9tz 0ZQ6LZ/cVvclaFyUIw8AOEqj5/9TbRoCodrT3ursNALycRvXHLRS260kdevm+q+p ItzjL7+E+FLPRlJHa6ItW6JGEuL3sOkS6WUZnjcdttpVS0o7eGWxa6tW+SIthftZ UdVnaj48b24y0l0M545J8Fntswhhnv8HnF0r9a/s9NaMGwiPYina5bkQMbnkcE1y MrEdw2tjJr0gajv3DuTw2dzD2X22f6QjMSnmgYIAP/AFTuwORbOBy/L/E4+9w6ou Wtw+tCzTkFBvjTeQDpQGj0RC63tzjPU= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:34 2025 by rpki-client