$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/24805ac9-0688-3b29-92cf-4829d09b3093.roa File: 24805ac9-0688-3b29-92cf-4829d09b3093.roa (raw, json) Hash identifier: MQ+2bMRTAJc6SblTq6/a2mkhyu90OUBxKLp35nZixiA= Subject key identifier: 91:A4:3E:BA:6E:CD:1E:CF:73:B4:58:7C:9D:4E:4F:34:C2:76:D2:C9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C70DD2AD6E4CFBCDC6480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/24805ac9-0688-3b29-92cf-4829d09b3093.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 207266 IP address blocks: 199.249.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:70:dd:2a:d6:e4:cf:bc:dc:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dda8aec6-60b0-4427-aa6c-4bca3ffed6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:81:04:cd:93:48:fc:77:6f:94:43:62:3b: d4:d9:b5:2d:54:a6:55:e0:cc:a1:7d:82:36:ab:a3: 35:28:c5:c6:46:ee:c6:35:ca:be:ef:c5:23:11:6b: 8e:70:e8:b4:3a:8d:3f:5e:42:cb:78:17:26:5f:6d: 0a:a7:d2:4f:ab:a1:73:43:2b:0e:50:ee:bb:5e:ce: 9d:c6:3e:52:6a:4c:84:c3:84:2e:f8:dd:2a:29:43: 76:0b:7a:9a:00:70:0b:57:c2:59:89:f5:64:1c:7c: 91:71:05:9e:5d:7f:94:11:95:22:f6:d6:87:3c:93: 27:ac:53:b9:53:3d:5a:60:a2:87:35:c7:63:16:2a: f7:26:a2:b4:68:94:e0:44:e3:fc:b0:05:4b:ca:cd: d4:65:f7:67:9b:cf:bc:5d:6c:32:ed:08:8a:f2:97: 3e:89:f1:38:6e:a1:6f:a2:7b:2c:70:02:06:9e:6a: 08:ed:54:15:3c:92:03:6a:49:6d:1f:aa:ed:0d:cc: f7:4f:d2:97:ed:60:b6:3c:a4:9e:10:14:0e:f9:d0: ab:b2:1b:7f:6c:26:c0:71:13:5c:1c:4a:07:ab:11: f8:09:76:c6:ab:81:36:e5:ab:ba:15:8c:b8:96:40: b6:96:9f:89:43:22:06:16:31:8c:ea:b7:3d:6b:17: cf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:3E:BA:6E:CD:1E:CF:73:B4:58:7C:9D:4E:4F:34:C2:76:D2:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/24805ac9-0688-3b29-92cf-4829d09b3093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:21:56:1a:97:d4:84:49:7d:70:8b:59:e1:5e:1d:71:b4:af: 48:f1:89:a2:4d:96:59:f1:90:bf:fb:df:21:32:45:06:3e:97: cd:60:f2:a9:c3:34:83:4e:0f:5a:01:96:9f:9e:b7:ae:9c:97: 66:5c:f8:3f:15:3e:f7:30:59:25:4a:97:cb:7e:67:66:19:54: 07:72:1a:e7:b9:fc:cf:f2:db:37:c3:be:bd:4d:3e:4e:0c:63: e8:21:a3:61:98:22:a2:3e:f9:b5:b2:9b:8c:e7:5a:95:13:c4: 9d:29:29:6f:ca:39:1a:3a:9a:0e:8c:97:6d:d2:fc:e2:fc:bc: b1:83:58:62:a1:ed:88:de:17:2a:24:34:05:51:dd:c5:a2:21: 4e:8a:f4:7d:47:bb:20:e2:39:19:a8:75:4a:03:98:1a:e1:db: 8c:c0:30:d6:31:2b:e1:38:60:1e:af:ca:10:2c:a4:f8:c4:11: 17:8f:51:02:37:c3:66:33:e7:ee:6d:82:92:6e:15:95:24:11: b6:33:46:46:0e:c7:17:16:04:1f:63:81:b2:3d:57:17:c7:10: 65:4f:0b:7a:a7:8b:70:d7:b1:3b:75:20:41:f1:af:23:74:28: 16:52:18:f4:39:d9:f1:8b:7e:66:b3:01:0f:01:5e:7d:36:72: 44:28:f1:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnHDdKtbkz7zcZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGRhOGFlYzYtNjBiMC00NDI3LWFhNmMtNGJjYTNmZmVkNmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ2BBM2TSPx3b5RDYjvU2bUtVKZV4MyhfYI2 q6M1KMXGRu7GNcq+78UjEWuOcOi0Oo0/XkLLeBcmX20Kp9JPq6FzQysOUO67Xs6d xj5SakyEw4Qu+N0qKUN2C3qaAHALV8JZifVkHHyRcQWeXX+UEZUi9taHPJMnrFO5 Uz1aYKKHNcdjFir3JqK0aJTgROP8sAVLys3UZfdnm8+8XWwy7QiK8pc+ifE4bqFv onsscAIGnmoI7VQVPJIDakltH6rtDcz3T9KX7WC2PKSeEBQO+dCrsht/bCbAcRNc HEoHqxH4CXbGq4E25au6FYy4lkC2lp+JQyIGFjGM6rc9axfPUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGkPrpuzR7Pc7RYfJ1OTzTCdtLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjQ4MDVhYzktMDY4OC0z YjI5LTkyY2YtNDgyOWQwOWIzMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0hVhqX1IRJfXCLWeFeHXG0r0jxiaJNllnxkL/73yEyRQY+l81g8qnD NINOD1oBlp+et66cl2Zc+D8VPvcwWSVKl8t+Z2YZVAdyGue5/M/y2zfDvr1NPk4M Y+gho2GYIqI++bWym4znWpUTxJ0pKW/KORo6mg6Ml23S/OL8vLGDWGKh7YjeFyok NAVR3cWiIU6K9H1HuyDiORmodUoDmBrh24zAMNYxK+E4YB6vyhAspPjEERePUQI3 w2Yz5+5tgpJuFZUkEbYzRkYOxxcWBB9jgbI9VxfHEGVPC3qni3DXsTt1IEHxryN0 KBZSGPQ52fGLfmazAQ8BXn02ckQo8WA= -----END CERTIFICATE-----Generated at Wed Jul 29 08:15:25 2026 by rpki-client