$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa File: 2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa (raw, json) Hash identifier: rcB9vcAgmEJ9s/nXQn1x5pGr97QDSAFEuweuaTpJMLY= Subject key identifier: 5D:EC:65:1B:1E:DB:0B:52:D2:D4:47:50:8B:C8:E7:D3:55:1F:FF:01 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB41C60F32696AFEBFBA60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 199.249.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:41:c6:0f:32:69:6a:fe:bf:ba:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=9e25f136-5ba0-4ef6-9e49-e0167662bc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:8d:5f:79:58:11:eb:c6:39:dc:52:b5:54: a3:48:5f:e0:2b:ae:dc:d1:db:69:31:ef:bd:e7:74: 0b:ae:e3:05:b5:70:fb:45:f6:fb:68:bb:95:62:ec: 37:c0:e6:ad:b3:6f:b3:99:04:75:4a:0f:f8:53:94: 97:f1:45:a0:a8:d3:9d:19:cd:a5:5b:29:44:43:cf: 26:78:54:56:22:e4:ba:3e:12:88:c0:48:a0:c2:c0: 41:97:aa:2b:07:6e:f0:58:d3:b9:cb:d7:45:fe:d7: f8:fd:65:cc:69:2c:b9:fb:95:33:73:19:57:73:d6: a6:32:c8:05:74:6a:8d:bc:31:bc:f6:80:fa:74:b1: 37:1b:f1:65:c4:ef:88:b4:de:8b:30:02:20:f6:b4: 34:5e:77:09:8c:d1:76:e4:d6:ed:75:0e:d4:89:b6: 02:32:9b:bf:1e:9a:be:ef:03:d2:9f:43:5b:2e:e8: fd:ec:71:4a:b0:01:e4:dd:02:8a:be:6c:31:e5:23: c6:0f:72:7e:97:1d:de:0b:64:82:ca:c7:f5:e9:5d: fb:f9:e1:9c:45:88:48:4f:d7:b6:e7:2f:6f:39:a1: 8d:9a:8e:91:7e:7a:20:27:1d:54:d4:18:f7:e9:5b: 9f:36:b1:3f:c6:14:bf:0b:38:5b:43:ce:1e:00:4e: 5a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EC:65:1B:1E:DB:0B:52:D2:D4:47:50:8B:C8:E7:D3:55:1F:FF:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:75:05:45:21:0a:56:81:ea:bd:36:5f:b1:5a:f6:4b:c3:79: 78:9f:c2:58:0c:05:a2:f1:ea:af:2e:7b:c1:fb:bd:96:3b:fb: da:65:5b:92:59:76:bd:02:ef:99:28:ac:0c:6c:4b:25:ad:e6: 05:d3:da:b1:b9:21:e6:68:16:f2:fd:06:fa:ff:81:d8:1f:5f: e3:b6:c0:31:d7:8b:c0:17:29:dc:7e:41:9a:34:f4:02:a0:68: 50:e4:9d:3d:17:ae:a2:4d:b8:3e:6c:fb:29:87:a7:18:a5:d3: 39:29:e6:58:3e:18:8b:bf:50:21:88:24:6f:99:cd:3e:34:ea: b0:3c:ef:af:ee:01:70:c1:77:62:7c:83:3f:3b:0a:e2:53:da: 53:34:3e:2c:89:7b:f1:55:77:fc:7d:37:0b:f1:75:33:29:36: fe:8e:03:b8:f2:c7:f7:16:80:4a:ae:7b:24:a9:5c:eb:73:8f: 04:1b:3d:dc:1c:bf:67:4d:2f:e4:22:9c:3b:41:14:6f:44:b0: 58:b7:d4:26:83:44:cc:6b:a4:fd:c0:b6:20:da:3d:4d:38:05: ec:78:2a:60:d6:23:ae:7a:97:43:58:42:2c:f4:a3:fd:64:f0: 8e:68:09:ec:d1:73:03:8c:bc:b2:84:3c:99:c9:51:e2:93:38: 4c:50:91:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0HGDzJpav6/umAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk OWUyNWYxMzYtNWJhMC00ZWY2LTllNDktZTAxNjc2NjJiYzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3yNX3lYEevGOdxStVSjSF/gK67c0dtpMe+9 53QLruMFtXD7Rfb7aLuVYuw3wOats2+zmQR1Sg/4U5SX8UWgqNOdGc2lWylEQ88m eFRWIuS6PhKIwEigwsBBl6orB27wWNO5y9dF/tf4/WXMaSy5+5UzcxlXc9amMsgF dGqNvDG89oD6dLE3G/FlxO+ItN6LMAIg9rQ0XncJjNF25NbtdQ7UibYCMpu/Hpq+ 7wPSn0NbLuj97HFKsAHk3QKKvmwx5SPGD3J+lx3eC2SCysf16V37+eGcRYhIT9e2 5y9vOaGNmo6RfnogJx1U1Bj36VufNrE/xhS/CzhbQ84eAE5aOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3sZRse2wtS0tRHUIvI59NVH/8BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjIzMWI4ZWMtOWM0Yy0z ZmIwLTg4NmUtZjNlOGMxZjllNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB1BUUhClaB6r02X7Fa9kvDeXifwlgMBaLx6q8ue8H7vZY7+9plW5JZ dr0C75korAxsSyWt5gXT2rG5IeZoFvL9Bvr/gdgfX+O2wDHXi8AXKdx+QZo09AKg aFDknT0XrqJNuD5s+ymHpxil0zkp5lg+GIu/UCGIJG+ZzT406rA876/uAXDBd2J8 gz87CuJT2lM0PiyJe/FVd/x9NwvxdTMpNv6OA7jyx/cWgEqueySpXOtzjwQbPdwc v2dNL+QinDtBFG9EsFi31CaDRMxrpP3AtiDaPU04Bex4KmDWI656l0NYQiz0o/1k 8I5oCezRcwOMvLKEPJnJUeKTOExQkes= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:22 2025 by rpki-client