$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa File: cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa (raw, json) Hash identifier: uqHxomrwZB2gkCe1yNXC7BEBgx1Lfx+y2VghcXhgsp8= Subject key identifier: 7B:E8:F0:D5:5F:2D:7B:C3:74:FE:19:D4:7C:04:BF:57:A2:B4:E7:B0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB41ED18B8E11A76E2C700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 199.249.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:41:ed:18:b8:e1:1a:76:e2:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=69a15459-8c17-4a4f-bc62-43a1bad5995c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:9f:58:6d:c3:19:93:cc:8b:6d:00:de:b3: 89:85:37:25:4d:f1:df:88:50:40:5e:d5:8d:ed:09: 66:a3:34:fa:94:c1:37:84:ff:5a:d6:92:cf:68:e3: 9a:5b:e7:c4:16:a2:6f:0e:ff:80:08:22:5c:f5:08: 78:a7:4f:4f:ee:f8:cd:80:58:22:e7:c7:3b:71:24: 94:34:e0:4f:7e:07:8b:8e:55:8e:d3:b2:d6:7c:99: 07:78:a9:05:8b:3e:a5:cf:0e:2e:e3:bf:a4:e9:bd: cb:9b:3a:fc:f5:6f:fb:64:0c:56:56:56:05:95:8c: 5a:44:c4:08:4e:09:7f:99:6f:49:7b:88:0a:c6:14: 8d:9a:58:fa:75:1e:b9:ca:fa:56:bc:81:7f:1b:73: 19:34:cd:ba:a4:ed:20:48:7d:00:d6:24:37:82:8d: 63:5e:95:1d:e3:8a:ca:a9:04:83:c9:bf:8c:5a:da: b7:22:fc:81:b1:6e:0e:18:69:97:51:ac:f5:42:5e: a9:c2:8f:bd:fc:89:58:5c:f4:17:ab:66:78:e4:fb: 53:98:53:58:d2:93:00:c0:f5:7b:ab:0f:cd:d7:a7: 2e:84:cf:c6:4d:26:f5:ec:ea:88:5c:7d:38:d5:a2: 35:1f:63:64:a7:bf:ee:c6:bd:50:03:9b:f6:b2:f3: 71:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E8:F0:D5:5F:2D:7B:C3:74:FE:19:D4:7C:04:BF:57:A2:B4:E7:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a7:4b:c1:c4:36:71:d3:06:05:54:e8:91:c5:72:a3:d2:2c: 33:1d:65:ff:f4:82:c3:22:bb:6f:17:7a:08:dc:b0:76:57:c3: 96:d0:48:9d:e8:de:14:fa:22:47:ac:68:f1:6d:eb:e2:75:d0: 54:2a:92:34:33:66:50:71:f4:14:bb:43:a6:0f:3b:d3:6f:65: ff:76:87:13:00:81:5b:7c:4d:98:1d:c8:6f:5f:16:7c:73:93: 3c:5d:f5:22:87:b3:87:8c:fb:46:81:93:5c:db:6e:28:70:9c: 76:5f:d7:2f:52:0b:92:d4:37:26:59:ea:d1:37:e1:bb:e2:7e: 96:0a:89:53:3b:63:4d:54:48:15:93:89:0d:de:0d:d1:18:39: 78:26:d9:f7:b0:46:8c:c5:bf:00:03:a1:d7:67:ca:c4:15:c2: 8c:9c:72:ce:8b:76:66:5d:6a:f2:52:15:bf:25:7a:97:4e:3d: 29:15:32:99:c2:1e:d1:77:2d:3d:2e:c9:5e:4c:c0:fb:07:71: b3:ba:5d:6c:dd:ee:34:49:75:8c:a4:6c:c3:1e:2d:f5:3f:76: b7:33:3e:ae:e8:74:48:cc:59:ec:c8:7d:d1:89:1e:29:22:19: e8:39:54:fe:0d:9b:eb:95:49:f3:c7:ef:0b:7d:dc:f4:c2:17: a9:a9:19:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0HtGLjhGnbixwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk NjlhMTU0NTktOGMxNy00YTRmLWJjNjItNDNhMWJhZDU5OTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueOfWG3DGZPMi20A3rOJhTclTfHfiFBAXtWN 7QlmozT6lME3hP9a1pLPaOOaW+fEFqJvDv+ACCJc9Qh4p09P7vjNgFgi58c7cSSU NOBPfgeLjlWO07LWfJkHeKkFiz6lzw4u47+k6b3Lmzr89W/7ZAxWVlYFlYxaRMQI Tgl/mW9Je4gKxhSNmlj6dR65yvpWvIF/G3MZNM26pO0gSH0A1iQ3go1jXpUd44rK qQSDyb+MWtq3IvyBsW4OGGmXUaz1Ql6pwo+9/IlYXPQXq2Z45PtTmFNY0pMAwPV7 qw/N16cuhM/GTSb17OqIXH041aI1H2Nkp7/uxr1QA5v2svNxmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvo8NVfLXvDdP4Z1HwEv1eitOewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2I0OTM5NTMtN2Q4Mi0z YzY4LWIzZDEtZmNmYjI0YmM3NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmnS8HENnHTBgVU6JHFcqPSLDMdZf/0gsMiu28XegjcsHZXw5bQSJ3o 3hT6IkesaPFt6+J10FQqkjQzZlBx9BS7Q6YPO9NvZf92hxMAgVt8TZgdyG9fFnxz kzxd9SKHs4eM+0aBk1zbbihwnHZf1y9SC5LUNyZZ6tE34bvifpYKiVM7Y01USBWT iQ3eDdEYOXgm2fewRozFvwADoddnysQVwoyccs6LdmZdavJSFb8lepdOPSkVMpnC HtF3LT0uyV5MwPsHcbO6XWzd7jRJdYykbMMeLfU/drczPq7odEjMWezIfdGJHiki Geg5VP4Nm+uVSfPH7wt93PTCF6mpGTQ= -----END CERTIFICATE-----Generated at Thu Aug 7 12:58:05 2025 by rpki-client