$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/643af3b0-6aa0-31cc-934e-1c1ec4ea17bb.roa File: 643af3b0-6aa0-31cc-934e-1c1ec4ea17bb.roa (raw, json) Hash identifier: c4ehoDQUO8CX6xKoAcgiGUNmNFosQLbbOw2RvHxyOno= Subject key identifier: 78:66:15:CE:6E:04:0E:5F:10:B3:9D:37:D0:28:E0:C3:F6:27:88:13 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435FAB7EB683B3083FDC260 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/643af3b0-6aa0-31cc-934e-1c1ec4ea17bb.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 207266 IP address blocks: 199.249.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:fa:b7:eb:68:3b:30:83:fd:c2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=c4b9feb5-9dd0-484e-acc6-894095460b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:08:df:95:21:ec:18:24:6e:a7:e3:25:fa:c1: 68:06:09:3d:9a:82:30:fa:51:36:3e:e3:66:7c:ba: cd:f3:7a:6e:91:32:5f:8b:cf:33:27:27:a8:e4:3b: 7b:6d:8c:b2:55:33:a1:27:5a:58:82:d8:01:80:ee: e1:83:9d:f5:08:57:ef:ea:11:1e:ed:85:eb:b0:ec: 48:cf:16:c5:a3:0f:68:c0:06:aa:f6:03:e1:b2:64: 09:06:a9:c9:cc:6e:32:ad:50:5c:38:73:f2:d0:e1: c3:de:db:bb:fa:0f:7a:0a:7a:2f:e9:b6:c3:c6:36: f9:72:41:5d:ea:a4:7c:b2:9c:94:d5:cf:49:7a:d8: 02:60:7f:07:6d:08:bf:5c:2c:43:02:aa:a6:ae:96: 82:02:36:4e:2b:f0:ac:a2:ec:7c:9e:17:f4:a9:b8: 7d:46:34:9c:d0:7c:87:cd:8a:c6:ec:06:b4:70:13: 7b:d3:c4:cb:27:f0:86:ee:2b:3b:26:2c:e2:2a:f9: 34:33:63:7d:84:71:0a:8f:c0:d6:73:31:78:53:03: 62:da:45:7f:cb:78:25:f0:7f:8e:5e:4d:b2:c8:72: 1a:99:99:7f:ee:14:c6:f6:9e:d8:62:03:76:e3:44: 1c:58:4f:59:37:55:81:1d:65:cc:0f:04:ca:01:92: e1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:66:15:CE:6E:04:0E:5F:10:B3:9D:37:D0:28:E0:C3:F6:27:88:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/643af3b0-6aa0-31cc-934e-1c1ec4ea17bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:56:e2:7d:59:bb:fe:43:bd:02:8e:c9:d8:11:1a:cc:7f:45: e2:bb:ef:22:8a:77:c7:d4:51:4c:6d:a6:15:e9:1f:81:eb:15: 87:9d:35:3a:90:58:82:c7:cd:6d:d9:d0:f4:24:c1:a6:10:2e: 18:0a:c6:a0:0b:78:d7:ab:be:f9:f0:a2:58:34:eb:75:c3:7e: a7:a4:b8:8e:7b:20:ce:cf:d1:07:85:0a:1c:1e:f2:56:69:69: 60:7e:a1:4e:a5:b8:6c:b5:39:dd:5e:48:21:e6:61:80:12:f7: 5d:9c:ba:80:8a:58:b0:b0:d5:4f:3d:88:bd:be:35:35:2b:2d: 6a:7c:8c:f4:f2:05:d7:a4:bb:52:c9:47:a5:ad:7c:57:86:83: df:21:03:53:b0:e2:bc:1b:ea:e6:a8:ab:da:1a:fc:7c:65:2d: c2:79:a9:e7:a9:41:8e:a8:ca:ef:cc:fe:06:54:11:a1:75:a7: a6:8c:20:88:75:81:5f:ea:92:5f:46:a0:28:d9:1e:f5:1e:91: f6:fa:68:f8:0f:89:09:35:08:60:3d:fa:40:c8:55:21:b0:6c: e5:69:04:58:b0:26:02:d6:59:da:03:e4:0a:41:67:03:39:dc: fd:71:e6:e6:1c:df:f5:0a:d5:4e:58:73:e3:77:a5:f0:64:f9: 2a:94:5a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENfq362g7MIP9wmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YzRiOWZlYjUtOWRkMC00ODRlLWFjYzYtODk0MDk1NDYwYjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgjflSHsGCRup+Ml+sFoBgk9moIw+lE2PuNm fLrN83pukTJfi88zJyeo5Dt7bYyyVTOhJ1pYgtgBgO7hg531CFfv6hEe7YXrsOxI zxbFow9owAaq9gPhsmQJBqnJzG4yrVBcOHPy0OHD3tu7+g96Cnov6bbDxjb5ckFd 6qR8spyU1c9JetgCYH8HbQi/XCxDAqqmrpaCAjZOK/Csoux8nhf0qbh9RjSc0HyH zYrG7Aa0cBN708TLJ/CG7is7JiziKvk0M2N9hHEKj8DWczF4UwNi2kV/y3gl8H+O Xk2yyHIamZl/7hTG9p7YYgN240QcWE9ZN1WBHWXMDwTKAZLhqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhmFc5uBA5fELOdN9Ao4MP2J4gTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjQzYWYzYjAtNmFhMC0z MWNjLTkzNGUtMWMxZWM0ZWExN2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxW4n1Zu/5DvQKOydgRGsx/ReK77yKKd8fUUUxtphXpH4HrFYedNTqQ WILHzW3Z0PQkwaYQLhgKxqALeNervvnwolg063XDfqekuI57IM7P0QeFChwe8lZp aWB+oU6luGy1Od1eSCHmYYAS912cuoCKWLCw1U89iL2+NTUrLWp8jPTyBdeku1LJ R6WtfFeGg98hA1Ow4rwb6uaoq9oa/HxlLcJ5qeepQY6oyu/M/gZUEaF1p6aMIIh1 gV/qkl9GoCjZHvUekfb6aPgPiQk1CGA9+kDIVSGwbOVpBFiwJgLWWdoD5ApBZwM5 3P1x5uYc3/UK1U5Yc+N3pfBk+SqUWlQ= -----END CERTIFICATE-----Generated at Sat Jun 13 18:34:10 2026 by rpki-client