$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/29f672b8-6e59-3c0a-a545-e843d8b8c265.roa File: 29f672b8-6e59-3c0a-a545-e843d8b8c265.roa (raw, json) Hash identifier: ywuJ89oCv09t6LDNw77P6R2QgedbplQLpa3mIY4dByg= Subject key identifier: AC:14:99:2C:EA:E2:55:9B:71:0B:2A:C5:DF:77:57:A1:D6:79:FD:11 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79C6931A6C0F89EA5AE6380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/29f672b8-6e59-3c0a-a545-e843d8b8c265.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 207266 IP address blocks: 199.249.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:69:31:a6:c0:f8:9e:a5:ae:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=99e718c8-5ccb-4a00-9a60-893f94121059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:18:de:2b:f0:f9:66:41:38:9e:93:77:a4: 65:7d:ef:db:b0:b8:9f:dc:39:6a:5f:c1:60:1f:68: 84:00:29:85:b7:7e:47:a3:e0:72:26:e2:35:ed:45: 44:50:a6:78:0e:7c:01:4c:35:02:26:f9:a7:1b:5a: 03:b2:63:07:77:ac:55:ac:73:0e:15:c5:ff:68:50: e4:5b:43:43:11:f2:6c:27:2f:db:50:09:14:50:5c: cb:d5:da:5a:64:da:0a:65:79:3d:78:32:c9:74:e7: 07:9c:4c:cc:e7:41:f9:4a:c6:27:b9:9e:1b:2b:1c: 49:f4:a8:a6:dc:c0:e8:d5:36:d2:1a:e2:3b:b3:6b: 8c:8c:17:27:2e:78:3c:a0:97:1e:06:c0:74:00:f1: e1:e6:de:25:7a:62:d0:0b:b0:27:a1:0d:46:b7:6c: 47:99:b6:e6:a9:cf:bb:c7:a8:95:8b:c0:3c:a2:22: 82:68:af:ed:52:fe:5c:c6:71:29:79:88:5c:c4:35: 62:0f:6f:44:23:a1:4d:08:96:6d:66:aa:c3:ee:81: d1:f2:b4:eb:b8:bc:bc:a3:07:7f:af:ce:54:eb:89: cf:e1:27:9e:a3:9e:dd:55:28:6f:d6:59:0c:46:5a: af:c6:1a:79:f0:aa:87:cb:8a:ea:9e:d0:f3:68:67: ec:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:14:99:2C:EA:E2:55:9B:71:0B:2A:C5:DF:77:57:A1:D6:79:FD:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/29f672b8-6e59-3c0a-a545-e843d8b8c265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a0:da:ac:23:33:bf:2c:fc:17:37:de:9d:d4:39:48:47:62: 16:39:27:07:7c:9a:45:0d:30:03:1a:2c:7f:55:6e:76:1e:11: ff:2e:f6:86:8d:3d:17:dd:20:59:d3:24:fc:63:3a:c9:63:c7: 48:ef:20:26:29:8e:56:36:5e:90:19:bf:cd:2b:9d:9b:2b:48: 2e:6f:80:a9:73:8c:13:ff:7e:18:a5:ec:3b:75:aa:1b:08:1f: 01:4f:d8:fa:72:3b:bc:f6:e4:bf:78:ac:4d:12:e9:de:f7:03: 07:27:da:99:ba:8a:cd:23:ee:70:53:b5:9b:26:18:65:c3:f6: f9:22:ab:f5:25:fb:5c:21:5e:40:18:9f:42:a8:4c:b6:a7:34: 44:56:d9:d3:6b:0d:5b:21:23:a0:b4:12:9b:30:cf:74:5e:14: 1e:f0:e8:2a:a2:00:e4:97:13:39:b1:1a:05:a6:33:60:be:72: 85:92:a8:f7:89:b5:04:41:c5:09:a2:ab:c9:2a:69:9f:99:0c: 2e:fa:38:65:43:2f:a4:29:d0:a3:8c:1a:cc:6c:e5:8c:09:c1: f7:eb:af:21:9d:b4:6d:32:98:bb:71:50:55:ce:72:30:31:30: 0a:08:0a:be:e8:4a:a8:83:d1:70:0a:bd:25:ce:6c:6d:20:d3: 1e:1b:4a:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnGkxpsD4nqWuY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTllNzE4YzgtNWNjYi00YTAwLTlhNjAtODkzZjk0MTIxMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzwY3ivw+WZBOJ6Td6Rlfe/bsLif3DlqX8Fg H2iEACmFt35Ho+ByJuI17UVEUKZ4DnwBTDUCJvmnG1oDsmMHd6xVrHMOFcX/aFDk W0NDEfJsJy/bUAkUUFzL1dpaZNoKZXk9eDLJdOcHnEzM50H5SsYnuZ4bKxxJ9Kim 3MDo1TbSGuI7s2uMjBcnLng8oJceBsB0APHh5t4lemLQC7AnoQ1Gt2xHmbbmqc+7 x6iVi8A8oiKCaK/tUv5cxnEpeYhcxDViD29EI6FNCJZtZqrD7oHR8rTruLy8owd/ r85U64nP4Seeo57dVShv1lkMRlqvxhp58KqHy4rqntDzaGfssQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwUmSzq4lWbcQsqxd93V6HWef0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjlmNjcyYjgtNmU1OS0z YzBhLWE1NDUtZTg0M2Q4YjhjMjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeg2qwjM78s/Bc33p3UOUhHYhY5Jwd8mkUNMAMaLH9VbnYeEf8u9oaN PRfdIFnTJPxjOsljx0jvICYpjlY2XpAZv80rnZsrSC5vgKlzjBP/fhil7Dt1qhsI HwFP2PpyO7z25L94rE0S6d73Awcn2pm6is0j7nBTtZsmGGXD9vkiq/Ul+1whXkAY n0KoTLanNERW2dNrDVshI6C0Epswz3ReFB7w6CqiAOSXEzmxGgWmM2C+coWSqPeJ tQRBxQmiq8kqaZ+ZDC76OGVDL6Qp0KOMGsxs5YwJwffrryGdtG0ymLtxUFXOcjAx MAoICr7oSqiD0XAKvSXObG0g0x4bSh8= -----END CERTIFICATE-----Generated at Wed Jul 29 06:54:55 2026 by rpki-client