$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d06901a7-df13-35ea-a39e-950723299f16.roa File: d06901a7-df13-35ea-a39e-950723299f16.roa (raw, json) Hash identifier: o5OoB6KBc8eozgQmsrBlJWZshiNt3eSx6jE3CtxP4j0= Subject key identifier: 4B:28:E3:FC:EC:07:44:F4:2C:AE:C3:29:46:41:EE:1D:DB:06:5C:DD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB40FE902F1827929137C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d06901a7-df13-35ea-a39e-950723299f16.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 199.249.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:40:fe:90:2f:18:27:92:91:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=7ed2678d-5d4a-42ca-a3a5-881b21421148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:04:e1:58:d6:52:68:2e:69:ce:66:c5:c1: fd:c6:88:fa:2c:0c:09:1b:a2:a5:98:20:02:e8:f4: 6f:57:7b:22:2d:2b:f5:5f:1c:2a:72:87:bf:d7:8d: 1a:d1:d0:ca:99:d0:47:75:a9:0e:1b:1e:9c:f9:fe: 2c:af:1f:5f:7d:99:6d:b3:31:9f:2c:3c:e5:6d:04: f7:42:aa:95:7b:b8:8b:be:ed:e0:e2:e5:60:58:64: dd:5d:55:ab:98:ad:9b:e1:dd:7e:04:9a:56:53:f9: f5:07:18:2b:70:fc:71:95:d0:b4:b1:50:67:78:29: 73:aa:21:ec:78:b4:34:28:e1:e1:c8:53:e5:bb:02: 88:d9:67:78:bc:7f:b9:4f:b5:9a:ed:73:0b:e9:70: 39:d0:b5:aa:46:b7:d5:4d:65:03:dc:6a:c0:98:d2: e2:77:0f:42:ba:2a:fa:d1:b6:70:ba:35:66:18:b5: 32:f1:9d:3f:d5:28:ca:11:34:4f:81:49:df:e8:bf: 0b:10:c2:68:f1:8e:bd:7c:72:3a:0f:08:94:b6:cb: 4c:15:3d:6b:d7:77:4d:1f:92:cc:9a:ba:d6:7d:e7: b8:e0:a7:39:ee:c4:88:92:5c:97:33:b7:09:e9:d1: 56:2e:fe:02:20:2a:fd:e0:e9:11:1c:56:6d:51:ad: 95:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:28:E3:FC:EC:07:44:F4:2C:AE:C3:29:46:41:EE:1D:DB:06:5C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d06901a7-df13-35ea-a39e-950723299f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b2:8e:47:4d:31:77:97:46:30:1b:29:aa:78:5b:35:16:d0: 19:e9:dd:cd:8c:aa:5f:6a:37:de:b3:e4:10:10:68:0e:dd:01: 6a:f5:66:b0:48:e5:86:69:e9:16:8f:7c:db:95:1d:01:ec:30: f2:0e:df:69:57:ff:a7:39:10:db:15:c4:84:c6:c1:ba:86:81: 72:99:2a:6b:cd:10:3c:23:59:02:32:b1:e1:d8:4f:dd:95:47: 85:b2:d6:b3:05:4e:7f:ed:31:d2:d9:c2:0b:a0:63:21:32:82: d4:5f:12:64:83:a1:f5:33:95:ab:34:1d:46:3a:23:86:00:e6: 5b:28:6a:f0:ce:17:cd:ca:67:d6:b0:f8:30:17:dd:d9:6c:e0: 7d:d1:7c:70:90:8b:50:76:4f:6e:1c:d5:93:64:47:dc:47:4c: b5:75:f5:c6:02:a8:4a:cf:8d:ed:66:c7:1b:52:19:66:e0:bb: 04:81:44:88:81:80:f1:42:8e:06:7c:e6:14:bf:59:14:2a:19: e6:f3:52:67:f7:d9:22:69:0c:0e:2a:e9:04:55:0b:f4:ba:90: f1:5e:40:43:5a:cf:3b:c3:06:84:cc:5c:2a:f6:06:4e:89:96: 6b:89:ac:cf:23:5f:ec:71:5f:5c:76:67:47:90:34:6d:87:b5: 5f:c7:26:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0D+kC8YJ5KRN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk N2VkMjY3OGQtNWQ0YS00MmNhLWEzYTUtODgxYjIxNDIxMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2cE4VjWUmguac5mxcH9xoj6LAwJG6KlmCAC 6PRvV3siLSv1Xxwqcoe/140a0dDKmdBHdakOGx6c+f4srx9ffZltszGfLDzlbQT3 QqqVe7iLvu3g4uVgWGTdXVWrmK2b4d1+BJpWU/n1BxgrcPxxldC0sVBneClzqiHs eLQ0KOHhyFPluwKI2Wd4vH+5T7Wa7XML6XA50LWqRrfVTWUD3GrAmNLidw9Cuir6 0bZwujVmGLUy8Z0/1SjKETRPgUnf6L8LEMJo8Y69fHI6DwiUtstMFT1r13dNH5LM mrrWfee44Kc57sSIklyXM7cJ6dFWLv4CICr94OkRHFZtUa2VoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEso4/zsB0T0LK7DKUZB7h3bBlzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDA2OTAxYTctZGYxMy0z NWVhLWEzOWUtOTUwNzIzMjk5ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqyjkdNMXeXRjAbKap4WzUW0Bnp3c2Mql9qN96z5BAQaA7dAWr1ZrBI 5YZp6RaPfNuVHQHsMPIO32lX/6c5ENsVxITGwbqGgXKZKmvNEDwjWQIyseHYT92V R4Wy1rMFTn/tMdLZwgugYyEygtRfEmSDofUzlas0HUY6I4YA5lsoavDOF83KZ9aw +DAX3dls4H3RfHCQi1B2T24c1ZNkR9xHTLV19cYCqErPje1mxxtSGWbguwSBRIiB gPFCjgZ85hS/WRQqGebzUmf32SJpDA4q6QRVC/S6kPFeQENazzvDBoTMXCr2Bk6J lmuJrM8jX+xxX1x2Z0eQNG2HtV/HJrM= -----END CERTIFICATE-----Generated at Thu Aug 7 03:18:30 2025 by rpki-client