$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bcc90991-4edc-347b-b4ae-a5679ea9ce1b.roa File: bcc90991-4edc-347b-b4ae-a5679ea9ce1b.roa (raw, json) Hash identifier: 1KxiIKT3wvQUsb25HBpPJbZ+HJkuOAhQJsWT08wAnVY= Subject key identifier: 60:BC:A8:F9:AF:F4:6E:EB:2A:78:4F:90:E0:FF:E0:EC:7B:53:E9:91 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201F5C3031A75D96B678E80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bcc90991-4edc-347b-b4ae-a5679ea9ce1b.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.249.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f5:c3:03:1a:75:d9:6b:67:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=de196aeb-b324-4025-a127-8af9598ffe86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:2f:f6:af:a9:78:19:9b:54:35:7d:93:01: b8:49:af:f6:05:61:65:cb:58:8e:a4:56:90:ab:22: 8a:f1:a6:3a:1c:38:07:bf:40:ad:d1:42:13:45:07: 1d:96:05:6d:89:ba:88:a1:ee:95:c6:d1:b1:58:f9: be:12:e5:c2:47:33:9b:7a:df:2c:e1:2d:04:40:fc: 51:d1:4c:54:a5:fc:a8:06:79:94:6e:b9:95:4b:b1: c4:83:02:b7:b2:ff:ee:0f:c0:a7:10:27:08:c0:46: 8f:b6:e8:12:83:1e:8a:aa:94:18:3e:ff:39:6d:bb: 10:1e:67:2c:b8:e6:0b:d6:34:e4:3b:2e:30:b8:76: f7:fa:ee:1e:86:e3:e2:5e:f9:ac:c3:18:14:50:bb: 08:3d:66:18:27:f6:d0:7a:f2:85:8d:d3:62:35:dd: 98:0e:d6:2b:ce:ca:98:ad:8a:aa:ad:b4:0d:3c:a5: 47:41:31:d8:f2:de:16:6a:6d:9e:02:c4:54:2a:f1: c3:da:a1:3c:23:06:db:75:5c:f8:53:ce:27:5d:91: 03:cf:4d:bf:6f:1e:f0:6f:db:26:f7:a6:76:1b:44: f5:6f:33:06:9b:70:4e:fd:2b:52:90:be:cd:71:60: 00:bd:03:66:a9:f7:65:4b:46:72:6b:83:a3:45:f8: 42:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BC:A8:F9:AF:F4:6E:EB:2A:78:4F:90:E0:FF:E0:EC:7B:53:E9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bcc90991-4edc-347b-b4ae-a5679ea9ce1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:e0:30:7a:7e:bf:de:a0:93:98:12:38:47:8f:d3:14:cc:1d: c1:b4:57:40:3b:07:0f:36:80:fd:46:25:19:4c:20:f5:56:e1: 2e:37:74:89:09:bc:4c:18:8b:12:a7:b9:36:f9:ef:b1:8a:f6: 38:7f:d4:e6:2a:47:34:60:31:a0:98:c7:e0:ab:f0:78:a0:b2: 95:fa:25:18:3d:f4:bc:10:b6:2d:a0:71:3c:f1:2d:0a:ee:6d: ed:6e:4e:b8:26:94:d2:35:33:2b:3d:6b:6d:63:c4:27:a8:f3: a3:ac:0f:69:ad:04:d5:bc:d8:d9:c1:b1:44:76:12:1e:05:b8: 23:33:d5:3b:93:57:c4:20:50:c8:c6:f2:c1:44:ff:e4:14:8e: 8e:ff:fe:ab:55:eb:0a:8b:0f:71:51:73:55:d4:37:7d:da:72: 7c:7f:29:f8:ac:88:a5:b2:7c:4a:b0:a7:6d:dd:be:be:9c:77: 46:ec:9f:b5:19:f2:6f:b4:d3:65:7c:2c:95:f0:62:af:99:99: a1:1c:87:ca:b3:8f:96:82:66:28:97:94:cc:73:cf:e6:c2:b2: b9:2c:ec:e3:f2:df:1a:bf:04:9a:b2:7c:cd:da:7b:3b:c0:31: ba:5d:0f:b6:85:87:05:34:9f:ef:8e:08:d7:c8:f7:b6:0a:29: f3:1a:ea:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfXDAxp12WtnjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZGUxOTZhZWItYjMyNC00MDI1LWExMjctOGFmOTU5OGZmZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsskv9q+peBmbVDV9kwG4Sa/2BWFly1iOpFaQ qyKK8aY6HDgHv0Ct0UITRQcdlgVtibqIoe6VxtGxWPm+EuXCRzObet8s4S0EQPxR 0UxUpfyoBnmUbrmVS7HEgwK3sv/uD8CnECcIwEaPtugSgx6KqpQYPv85bbsQHmcs uOYL1jTkOy4wuHb3+u4ehuPiXvmswxgUULsIPWYYJ/bQevKFjdNiNd2YDtYrzsqY rYqqrbQNPKVHQTHY8t4Wam2eAsRUKvHD2qE8IwbbdVz4U84nXZEDz02/bx7wb9sm 96Z2G0T1bzMGm3BO/StSkL7NcWAAvQNmqfdlS0Zya4OjRfhC0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC8qPmv9G7rKnhPkOD/4Ox7U+mRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmNjOTA5OTEtNGVkYy0z NDdiLWI0YWUtYTU2NzllYTljZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTgMHp+v96gk5gSOEeP0xTMHcG0V0A7Bw82gP1GJRlMIPVW4S43dIkJ vEwYixKnuTb577GK9jh/1OYqRzRgMaCYx+Cr8HigspX6JRg99LwQti2gcTzxLQru be1uTrgmlNI1Mys9a21jxCeo86OsD2mtBNW82NnBsUR2Eh4FuCMz1TuTV8QgUMjG 8sFE/+QUjo7//qtV6wqLD3FRc1XUN33acnx/KfisiKWyfEqwp23dvr6cd0bsn7UZ 8m+002V8LJXwYq+ZmaEch8qzj5aCZiiXlMxzz+bCsrks7OPy3xq/BJqyfM3aezvA MbpdD7aFhwU0n++OCNfI97YKKfMa6qs= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:19 2025 by rpki-client