$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa File: cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa (raw, json) Hash identifier: Qci6VNtPwUMqiIKemV+FwAlgDavtIBxe8F5USq2+PGM= Subject key identifier: 4A:69:CC:6E:69:1B:2D:61:47:2D:99:D0:B4:FB:82:83:A3:05:14:FA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201CDEFB183AC2E1ED9B060 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.249.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:cd:ef:b1:83:ac:2e:1e:d9:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=acea9a80-2cde-44f9-b109-3e26ee7ae22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7e:8d:15:f8:39:0e:0b:a9:5e:2f:c3:4a:5c: 5a:49:0b:f2:fe:d0:5e:d0:e4:d2:e6:35:eb:25:03: 5d:e1:63:59:ab:fd:44:d3:23:35:3c:a1:00:6a:8f: 06:3a:a8:f1:b4:01:07:5c:d2:a2:3e:53:11:22:45: ec:5d:cd:ba:34:3e:b6:b8:68:d3:03:77:22:3b:06: d7:02:55:25:9c:64:65:8a:49:a4:a9:1c:2c:54:88: da:b4:9f:06:5e:a0:71:52:ce:95:78:2a:14:0e:c4: 8f:2c:6b:51:c1:2b:8f:32:8b:af:c1:c3:aa:f6:68: 63:a6:04:d0:59:f0:5f:cd:fd:47:ab:c7:f7:f8:04: 96:87:0c:ba:fc:c0:28:57:04:e3:b8:85:f3:08:9b: 7f:2a:99:ba:12:c9:9a:d2:eb:a6:1d:a8:d1:df:cb: 9b:5b:c7:82:af:05:eb:73:71:52:3e:13:93:8a:88: 3d:c7:aa:a2:05:c5:d7:86:e6:b9:38:e3:a9:2e:76: 8c:4f:9a:53:5e:c2:49:9f:62:60:02:7f:16:7f:11: 86:79:00:f7:92:0a:d0:83:0c:de:d0:13:ae:22:ad: 03:24:f7:59:5d:69:34:7e:02:0b:ed:31:ed:02:b3: 5d:6e:de:92:b8:fc:00:18:38:bb:b5:02:68:03:c2: de:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:69:CC:6E:69:1B:2D:61:47:2D:99:D0:B4:FB:82:83:A3:05:14:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:53:5e:95:ff:fd:91:e7:d1:f9:eb:8f:d9:0c:59:c3:9d:25: 47:9b:21:ab:00:3c:8f:58:09:02:a4:94:ec:c7:3f:5f:31:4c: 09:a1:92:b1:9e:38:58:c1:11:59:84:26:c4:0f:79:56:72:3a: da:01:2b:d4:9b:c3:5b:6e:5d:c3:1b:34:02:18:b8:d7:d9:52: 35:b2:82:a1:bc:20:cb:c5:8b:c0:90:f5:34:6f:6c:77:75:33: b1:a5:8a:8a:33:d1:11:8b:c5:57:45:54:d2:b2:69:6b:1d:f1: a1:9d:19:85:cc:22:70:eb:d4:8e:56:23:50:4c:6f:fb:bd:ae: 1e:b7:b6:4f:00:f3:4d:8f:3e:3f:b8:29:3d:c9:b0:bd:6f:fe: e3:2b:72:ae:cf:e8:2d:de:83:9a:de:93:df:a4:5c:18:aa:fb: 75:7c:5a:21:e0:6d:04:d1:f5:6c:3e:76:91:ec:77:d2:6e:60: 05:d6:ed:da:07:de:8e:ff:f1:51:22:a7:2e:24:9b:e3:cd:52: 48:8a:17:67:6c:aa:86:82:0f:44:c3:5b:ee:cc:23:ff:69:d5: b5:30:13:60:99:d2:09:00:ee:0e:a2:6b:80:57:78:1b:c0:aa: 96:b9:bf:18:26:29:50:90:63:d2:b9:5f:70:cf:9d:d3:8f:53: 17:c6:3c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAc3vsYOsLh7ZsGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YWNlYTlhODAtMmNkZS00NGY5LWIxMDktM2UyNmVlN2FlMjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH6NFfg5DgupXi/DSlxaSQvy/tBe0OTS5jXr JQNd4WNZq/1E0yM1PKEAao8GOqjxtAEHXNKiPlMRIkXsXc26ND62uGjTA3ciOwbX AlUlnGRlikmkqRwsVIjatJ8GXqBxUs6VeCoUDsSPLGtRwSuPMouvwcOq9mhjpgTQ WfBfzf1Hq8f3+ASWhwy6/MAoVwTjuIXzCJt/Kpm6Esma0uumHajR38ubW8eCrwXr c3FSPhOTiog9x6qiBcXXhua5OOOpLnaMT5pTXsJJn2JgAn8WfxGGeQD3kgrQgwze 0BOuIq0DJPdZXWk0fgIL7THtArNdbt6SuPwAGDi7tQJoA8LeiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEppzG5pGy1hRy2Z0LT7goOjBRT6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2RjM2RjOTQtNDNjMC0z ZTVlLTkwZjQtNDkxMWMyOTljNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtTXpX//ZHn0fnrj9kMWcOdJUebIasAPI9YCQKklOzHP18xTAmhkrGe OFjBEVmEJsQPeVZyOtoBK9Sbw1tuXcMbNAIYuNfZUjWygqG8IMvFi8CQ9TRvbHd1 M7Gliooz0RGLxVdFVNKyaWsd8aGdGYXMInDr1I5WI1BMb/u9rh63tk8A802PPj+4 KT3JsL1v/uMrcq7P6C3eg5rek9+kXBiq+3V8WiHgbQTR9Ww+dpHsd9JuYAXW7doH 3o7/8VEipy4km+PNUkiKF2dsqoaCD0TDW+7MI/9p1bUwE2CZ0gkA7g6ia4BXeBvA qpa5vxgmKVCQY9K5X3DPndOPUxfGPEE= -----END CERTIFICATE-----Generated at Wed Nov 5 15:11:34 2025 by rpki-client