$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8850ef7-4877-342e-a07c-5523438747d6.roa File: b8850ef7-4877-342e-a07c-5523438747d6.roa (raw, json) Hash identifier: M4BWcQltx9EM8GuGyP/+ISCVKu/GAf8E2wTH+z6Zhks= Subject key identifier: C5:E8:4F:AA:A1:48:B4:A9:E2:FD:CE:B7:25:7E:BB:F7:0A:21:70:CC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0436203E8156F2029579ED80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8850ef7-4877-342e-a07c-5523438747d6.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 207266 IP address blocks: 199.249.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:20:3e:81:56:f2:02:95:79:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=68b9a283-cdd3-4e2f-ba52-c7a4160d4f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d0:6d:16:a2:4e:95:97:a1:28:2c:74:bd:91: 2e:0b:ac:6b:7d:ed:e9:28:06:f6:d4:da:c4:40:24: a8:50:c0:1c:96:ac:1e:6c:ec:02:21:42:6f:6a:98: b9:23:8f:95:63:6e:f2:63:c2:43:c1:55:5f:94:81: d3:7b:5b:2d:5f:95:56:bd:67:47:53:15:38:c2:49: d0:6b:4f:18:59:19:6b:d0:3f:70:25:36:09:89:7f: 65:a5:a1:ca:74:ad:31:46:7b:16:e4:0a:d7:83:d2: e3:de:59:11:ba:f6:42:a2:77:c1:9a:cd:6c:97:d1: ca:68:1a:e8:97:d0:22:68:d3:7e:48:96:49:08:39: a4:05:74:0e:a3:1e:e2:cf:82:ef:04:b5:f0:e8:30: ad:89:d3:e5:42:02:bb:9a:09:5a:47:da:46:4f:1c: 94:f3:3b:24:96:88:77:04:57:aa:70:0e:85:51:46: 5a:7c:92:0e:75:46:ae:32:9a:62:8d:2f:1f:d1:46: b6:5c:f4:12:18:cd:0c:88:a2:6d:41:3e:82:e7:50: fa:7c:43:5e:92:24:f3:3f:c5:41:ff:7e:0b:7f:62: c4:f8:16:02:1a:93:3f:9d:72:0e:01:79:44:14:fc: ac:f6:82:cc:5f:92:8b:22:ed:cd:7d:7c:14:83:c2: 16:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E8:4F:AA:A1:48:B4:A9:E2:FD:CE:B7:25:7E:BB:F7:0A:21:70:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8850ef7-4877-342e-a07c-5523438747d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:46:65:fe:32:5c:c2:fb:1e:e8:b1:c4:78:63:76:1f:24:42: fc:76:fb:e5:18:1b:73:0f:ee:69:9f:27:97:7a:9d:cb:d4:83: 53:3c:a7:29:61:ac:3c:17:07:59:b7:cf:9e:2c:9f:f4:c4:95: ca:fd:f1:d3:86:ab:e6:28:fd:f4:e4:f7:ee:94:9b:b8:66:29: 3f:92:97:e3:3a:9c:fc:f0:14:bf:37:c4:cf:a1:ce:e9:9c:5b: b0:2d:3f:39:ea:8f:f2:ce:de:95:c6:c1:ca:d0:ea:1f:f8:76: c3:d6:fe:eb:73:3a:4b:13:b4:7a:ff:f8:98:e1:07:91:06:60: 96:33:a3:71:fc:90:59:2d:c6:c4:98:e8:fc:56:ca:be:4f:10: 68:5c:cb:7f:10:89:fb:8c:ba:67:47:1a:ad:21:db:6b:39:f5: 78:65:3d:3b:7c:d2:05:21:cd:6e:3c:23:b7:d9:d9:43:b2:03: 61:d1:8e:e6:2e:af:0d:e6:35:9b:01:31:7e:d7:c4:4e:32:76: 89:c6:2f:d3:30:92:c3:64:fd:ca:a8:48:f4:35:1e:af:9d:7f: 79:61:62:e0:72:29:1d:36:52:ec:dd:0d:10:a0:60:e1:70:86: 5c:12:ce:f3:71:02:18:1c:24:fd:bd:cd:db:38:50:b0:e9:ca: 04:49:4c:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENiA+gVbyApV57YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NjhiOWEyODMtY2RkMy00ZTJmLWJhNTItYzdhNDE2MGQ0ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntBtFqJOlZehKCx0vZEuC6xrfe3pKAb21NrE QCSoUMAclqwebOwCIUJvapi5I4+VY27yY8JDwVVflIHTe1stX5VWvWdHUxU4wknQ a08YWRlr0D9wJTYJiX9lpaHKdK0xRnsW5ArXg9Lj3lkRuvZConfBms1sl9HKaBro l9AiaNN+SJZJCDmkBXQOox7iz4LvBLXw6DCtidPlQgK7mglaR9pGTxyU8zskloh3 BFeqcA6FUUZafJIOdUauMppijS8f0Ua2XPQSGM0MiKJtQT6C51D6fENekiTzP8VB /34Lf2LE+BYCGpM/nXIOAXlEFPys9oLMX5KLIu3NfXwUg8IWEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXoT6qhSLSp4v3OtyV+u/cKIXDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjg4NTBlZjctNDg3Ny0z NDJlLWEwN2MtNTUyMzQzODc0N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1GZf4yXML7HuixxHhjdh8kQvx2++UYG3MP7mmfJ5d6ncvUg1M8pylh rDwXB1m3z54sn/TElcr98dOGq+Yo/fTk9+6Um7hmKT+Sl+M6nPzwFL83xM+hzumc W7AtPznqj/LO3pXGwcrQ6h/4dsPW/utzOksTtHr/+JjhB5EGYJYzo3H8kFktxsSY 6PxWyr5PEGhcy38QifuMumdHGq0h22s59XhlPTt80gUhzW48I7fZ2UOyA2HRjuYu rw3mNZsBMX7XxE4ydonGL9MwksNk/cqoSPQ1Hq+df3lhYuByKR02UuzdDRCgYOFw hlwSzvNxAhgcJP29zds4ULDpygRJTMk= -----END CERTIFICATE-----Generated at Sat Jun 13 16:07:07 2026 by rpki-client