$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e17505ed-a126-32cf-9db9-3508bbbe2d54.roa File: e17505ed-a126-32cf-9db9-3508bbbe2d54.roa (raw, json) Hash identifier: 8nk3aBcedCRMiGEfZYvCGg7DyVIFx2+xaHE73Wq08bY= Subject key identifier: 12:65:AE:D6:B0:5D:40:6C:08:43:AC:00:A5:3A:0B:04:6D:14:75:DC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584F4972D9E4732A55D0F76C9AC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e17505ed-a126-32cf-9db9-3508bbbe2d54.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12041 IP address blocks: 199.249.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d9:e4:73:2a:55:d0:f7:6c:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=61e5a99d-aa4d-46e8-8020-dabbb041e301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:07:ff:73:ce:0c:9f:d5:c5:40:c3:12:f4: 1b:67:ac:44:be:2b:11:23:e9:8f:da:5d:fb:4e:92: 67:35:87:f8:5f:67:1a:1c:54:a8:75:35:0e:a7:7a: 02:49:e0:9e:a6:55:f2:9f:e5:ae:c5:80:e6:b5:85: 1e:69:52:e7:10:eb:fa:50:c4:b9:e9:93:c2:99:c1: 6a:2a:df:fa:5b:cd:c8:26:61:8e:41:55:b5:aa:b2: c3:71:1b:ab:73:0e:6e:a3:67:9d:a4:ae:29:fb:cb: 9d:f7:f5:26:98:b4:c7:e0:fe:df:57:79:6a:38:fe: 6e:85:b3:d2:77:82:29:6a:35:16:e2:69:45:6c:2c: cf:b0:59:e3:46:10:44:e2:f2:ba:7e:c2:ca:91:a3: 4b:84:77:7f:1e:c8:33:60:5a:0e:76:1b:b7:e5:44: 44:ff:bb:19:fb:22:10:d5:b0:8a:cc:0a:8f:ec:7f: 32:c1:d6:a2:c6:aa:cd:48:bd:7f:fc:80:01:0a:9d: d6:08:0e:0e:b3:1e:aa:9f:93:8c:ba:e0:ed:d4:b9: ee:44:d4:54:a6:61:94:19:e3:5f:c2:11:83:c8:c7: 86:09:03:cb:46:fe:6a:0a:96:b0:1b:f9:10:af:b0: df:64:db:dc:d4:77:bd:32:e6:c9:b6:86:96:ec:65: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:65:AE:D6:B0:5D:40:6C:08:43:AC:00:A5:3A:0B:04:6D:14:75:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e17505ed-a126-32cf-9db9-3508bbbe2d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:61:12:85:6e:25:b9:bb:c5:1c:79:e4:3c:a3:4e:0c:c4:50: 27:7a:60:36:9b:c9:b9:a7:d6:29:26:b0:e3:76:53:30:ac:5b: be:63:f9:67:35:a7:c6:02:d4:c9:32:61:7b:fe:0a:f2:57:94: bc:d0:1e:b6:8a:c1:21:7f:26:17:18:b8:16:f9:ae:d0:1f:47: c5:77:c4:85:b0:a6:09:5c:88:73:05:9c:0c:f9:22:a2:b3:7e: 99:f3:a4:23:37:2f:3c:d9:ec:86:ee:38:a9:b0:66:a7:d4:f5: 95:75:1b:70:82:5b:38:05:38:ac:0b:26:71:8f:73:58:37:d8: 94:66:71:80:c9:6d:30:b4:57:c4:43:c8:19:97:f5:34:52:73: c1:89:af:f6:01:53:aa:3e:38:fd:a6:62:a1:ec:b5:63:5c:f5: 22:8f:75:82:eb:d2:b7:e5:01:20:a9:0b:9c:8a:fc:be:00:45: 31:62:61:6f:ea:d0:79:e9:ec:15:fe:0f:e9:e2:d7:0b:5f:74: f2:39:81:43:5d:1c:57:76:7d:ad:e3:64:60:05:2c:57:9a:75: ba:9e:6a:67:54:aa:63:5b:7b:75:73:c6:1f:68:d2:92:25:37: e3:65:74:c0:9f:1e:ca:6f:7b:73:82:34:51:19:48:cd:50:e4: e9:19:17:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JctnkcypV0PdsmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjFlNWE5OWQtYWE0ZC00NmU4LTgwMjAtZGFiYmIwNDFlMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAsH/3PODJ/VxUDDEvQbZ6xEvisRI+mP2l37 TpJnNYf4X2caHFSodTUOp3oCSeCeplXyn+WuxYDmtYUeaVLnEOv6UMS56ZPCmcFq Kt/6W83IJmGOQVW1qrLDcRurcw5uo2edpK4p+8ud9/UmmLTH4P7fV3lqOP5uhbPS d4IpajUW4mlFbCzPsFnjRhBE4vK6fsLKkaNLhHd/HsgzYFoOdhu35URE/7sZ+yIQ 1bCKzAqP7H8ywdaixqrNSL1//IABCp3WCA4Osx6qn5OMuuDt1LnuRNRUpmGUGeNf whGDyMeGCQPLRv5qCpawG/kQr7DfZNvc1He9MubJtoaW7GUf5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJlrtawXUBsCEOsAKU6CwRtFHXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTE3NTA1ZWQtYTEyNi0z MmNmLTlkYjktMzUwOGJiYmUyZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJhEoVuJbm7xRx55DyjTgzEUCd6YDabybmn1ikmsON2UzCsW75j+Wc1 p8YC1MkyYXv+CvJXlLzQHraKwSF/JhcYuBb5rtAfR8V3xIWwpglciHMFnAz5IqKz fpnzpCM3LzzZ7IbuOKmwZqfU9ZV1G3CCWzgFOKwLJnGPc1g32JRmcYDJbTC0V8RD yBmX9TRSc8GJr/YBU6o+OP2mYqHstWNc9SKPdYLr0rflASCpC5yK/L4ARTFiYW/q 0Hnp7BX+D+ni1wtfdPI5gUNdHFd2fa3jZGAFLFeadbqeamdUqmNbe3Vzxh9o0pIl N+NldMCfHspve3OCNFEZSM1Q5OkZF94= -----END CERTIFICATE-----Generated at Fri Sep 25 07:37:45 2026 by rpki-client