$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b6162258-e974-3d0b-9036-506271b3d99e.roa File: b6162258-e974-3d0b-9036-506271b3d99e.roa (raw, json) Hash identifier: NeSs1Vprc2hQxxn2S8KOvaABCx4zL8wGn1uxKJ8vtvw= Subject key identifier: 78:C6:E7:BF:57:81:16:FC:BB:DE:0A:1D:F4:F9:42:E5:34:A2:8F:03 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E043619067E900371D6B14C40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b6162258-e974-3d0b-9036-506271b3d99e.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 199.249.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:19:06:7e:90:03:71:d6:b1:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=d79bf0b7-9b80-40c2-81e6-47f5fe3ee5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6e:00:ab:12:6f:4e:64:0e:ae:13:d0:4b:a2: 53:e9:4f:90:1b:51:e9:61:4a:2e:90:01:ea:80:19: b3:50:f6:f9:71:40:fc:e3:cb:2f:34:77:03:8b:a6: c9:cd:fd:6a:b8:dc:bc:6e:5f:3e:f0:ed:b5:5e:64: 3e:54:59:11:fc:fe:e0:a2:cc:0d:c4:6f:2b:8a:42: 87:a7:b5:c3:df:71:80:6c:fc:a3:3e:57:03:2f:71: 3b:14:f8:f0:64:9d:5b:8e:f0:99:1d:84:12:c6:89: 9e:d3:c0:85:10:51:17:b8:82:98:21:c6:98:26:8c: 4e:78:87:0e:b8:18:cb:d1:ab:68:c8:c7:04:6f:37: 83:00:cb:94:28:c3:17:a2:08:0f:bc:dc:4c:8c:b6: 45:0f:ce:e4:52:66:cc:32:dc:50:48:b9:36:99:b3: 23:7a:22:29:de:da:28:7f:07:66:42:26:b3:f6:0f: 7f:94:71:9b:c0:3d:19:0b:9a:2a:f2:0b:12:e0:6d: 23:76:2f:45:d0:f5:3c:14:3e:e6:35:a2:00:78:c5: 57:a9:01:1e:f0:7b:b9:2a:bf:2c:b3:91:4a:9f:4d: 2c:12:06:42:c1:47:f8:c9:c7:58:56:16:47:a9:e5: 2a:d3:94:74:3f:99:28:39:c6:d6:28:ad:1e:41:ae: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C6:E7:BF:57:81:16:FC:BB:DE:0A:1D:F4:F9:42:E5:34:A2:8F:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b6162258-e974-3d0b-9036-506271b3d99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ec:70:cc:2a:f6:2d:e4:cc:8c:1f:c5:cc:86:8a:be:18:10: f9:28:ed:e3:2e:99:9c:3d:7a:a0:8d:7a:e6:ac:9c:e3:36:72: a4:12:c8:60:58:05:f7:d2:ea:6c:1e:fc:aa:b5:69:39:90:25: 97:26:46:2c:ee:24:07:3a:89:7d:fd:30:b6:cd:aa:e4:7e:89: 68:35:2a:83:43:8c:ae:28:d8:a2:25:14:1e:5d:55:f7:d5:dd: f3:32:70:c9:ea:53:0a:72:f3:27:c7:55:1c:a6:d6:71:07:3b: 75:6c:eb:ef:bc:fc:67:38:9d:69:ed:a7:29:02:04:69:29:be: fd:ea:b2:14:11:b9:0a:42:1a:2b:09:cb:02:59:68:40:52:02: b1:89:80:ff:99:88:ff:fc:95:08:fd:cf:00:6d:bc:2d:0e:a0: 27:43:70:52:ce:88:bd:4b:77:77:f0:53:76:1f:b0:6a:ef:10: 06:5b:94:4d:db:12:c3:45:5e:19:d5:f0:e1:32:40:d7:3d:00: 56:b3:66:3d:ce:13:31:49:76:e9:3d:9a:6c:68:54:42:2d:50: c4:4e:6e:28:49:f1:f6:cb:b3:28:27:7a:6e:fa:29:3a:d9:e2: f3:7f:38:9c:f9:96:7f:19:35:81:8a:f2:63:06:df:3c:5e:f4: 87:d8:23:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENhkGfpADcdaxTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ZDc5YmYwYjctOWI4MC00MGMyLTgxZTYtNDdmNWZlM2VlNWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm4AqxJvTmQOrhPQS6JT6U+QG1HpYUoukAHq gBmzUPb5cUD848svNHcDi6bJzf1quNy8bl8+8O21XmQ+VFkR/P7goswNxG8rikKH p7XD33GAbPyjPlcDL3E7FPjwZJ1bjvCZHYQSxome08CFEFEXuIKYIcaYJoxOeIcO uBjL0atoyMcEbzeDAMuUKMMXoggPvNxMjLZFD87kUmbMMtxQSLk2mbMjeiIp3too fwdmQiaz9g9/lHGbwD0ZC5oq8gsS4G0jdi9F0PU8FD7mNaIAeMVXqQEe8Hu5Kr8s s5FKn00sEgZCwUf4ycdYVhZHqeUq05R0P5koOcbWKK0eQa4SPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjG579XgRb8u94KHfT5QuU0oo8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjYxNjIyNTgtZTk3NC0z ZDBiLTkwMzYtNTA2MjcxYjNkOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnscMwq9i3kzIwfxcyGir4YEPko7eMumZw9eqCNeuasnOM2cqQSyGBY BffS6mwe/Kq1aTmQJZcmRizuJAc6iX39MLbNquR+iWg1KoNDjK4o2KIlFB5dVffV 3fMycMnqUwpy8yfHVRym1nEHO3Vs6++8/Gc4nWntpykCBGkpvv3qshQRuQpCGisJ ywJZaEBSArGJgP+ZiP/8lQj9zwBtvC0OoCdDcFLOiL1Ld3fwU3YfsGrvEAZblE3b EsNFXhnV8OEyQNc9AFazZj3OEzFJduk9mmxoVEItUMRObihJ8fbLsygnem76KTrZ 4vN/OJz5ln8ZNYGK8mMG3zxe9IfYI1E= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:57 2026 by rpki-client