$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e17505ed-a126-32cf-9db9-3508bbbe2d54.roa File: e17505ed-a126-32cf-9db9-3508bbbe2d54.roa (raw, json) Hash identifier: +7CRp9WIqZM8ql8An8q7kvvnUvr5YFzLxboYqTJ9sHo= Subject key identifier: 96:07:D1:F7:75:C9:BC:A6:82:94:61:55:62:2A:FB:B5:91:63:A4:85 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D3606379406C6FFB3680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e17505ed-a126-32cf-9db9-3508bbbe2d54.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.249.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d3:60:63:79:40:6c:6f:fb:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b41d58a4-359c-4731-87b6-292b68b40cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:5a:25:29:3d:5d:c8:30:fd:53:1f:ba:28: cd:3c:b4:4c:13:97:09:f1:77:18:63:b9:49:f9:a4: 9e:ea:b1:8b:43:e4:4f:0f:a9:55:8f:55:92:59:eb: 17:0e:6e:73:2f:23:cd:fc:1c:01:35:2a:62:98:52: 45:84:6a:26:de:76:6c:a3:4c:88:b4:81:d1:6a:98: 97:95:b8:3e:ba:5d:ed:7a:eb:78:41:21:db:a3:68: 1b:3a:52:94:93:6d:8c:97:e3:9d:51:43:ab:88:92: a6:1c:ac:61:f5:e1:d2:84:dd:6e:a4:47:35:10:55: 7f:9d:e2:25:b6:54:6d:51:69:d4:36:d5:fb:96:62: 98:cd:fe:71:0d:d4:f5:70:76:54:2f:86:bf:89:3d: b8:54:1e:26:1f:f0:cd:b8:ed:ba:3b:50:17:88:f6: 54:79:cd:dc:74:bc:cc:88:30:2d:03:8d:b0:3c:58: f6:fb:a3:53:87:a7:6d:1e:58:7d:31:0c:03:33:50: 52:82:f9:25:17:21:dd:05:43:d8:b9:e0:0e:74:26: 67:93:67:56:b0:c7:51:7a:42:b3:25:97:f6:b5:88: 18:17:27:b7:b9:29:74:fe:f1:0c:58:67:44:aa:b5: 85:98:c1:1b:18:d0:5d:68:11:ea:c3:72:1f:5e:7e: 83:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:07:D1:F7:75:C9:BC:A6:82:94:61:55:62:2A:FB:B5:91:63:A4:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e17505ed-a126-32cf-9db9-3508bbbe2d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:d9:6f:16:ca:db:54:83:eb:00:d7:e2:43:8d:53:be:3d:0a: f6:db:b7:b2:cc:11:01:d6:18:3c:e3:41:0f:30:a0:95:88:7f: b5:c0:c4:c0:7c:bf:c2:43:ca:0a:96:06:ad:d8:29:91:30:c7: a6:df:ef:ff:be:3f:a9:09:14:22:ce:6f:57:61:67:a0:ea:cd: c7:c9:1e:74:a8:06:3d:99:6c:11:27:a9:b9:98:0c:02:e0:0d: e1:a7:c9:91:e1:dd:d9:c4:6d:a1:7b:06:a4:95:24:05:55:ad: e3:f4:6c:df:b2:3d:fc:20:36:c7:dc:46:6b:05:a1:a0:7c:30: 7f:b5:92:51:42:3c:53:a9:c8:a2:11:c9:d6:b5:97:9d:da:1f: 7a:30:4e:0b:c7:bc:0f:0c:ec:f4:ce:a1:d6:b7:14:57:62:4f: 13:89:8e:83:47:75:d4:93:c8:ca:51:5e:f3:90:57:32:00:04: 2e:05:dc:7a:96:14:77:51:ce:e8:c8:8a:2b:bf:1e:75:8c:6f: b0:5c:b5:28:71:cb:bd:b1:98:de:cf:35:e4:23:52:89:f7:53: a7:41:eb:6c:3c:bf:80:75:01:4a:5a:9d:ee:8a:b8:a5:2f:6b: 57:87:a9:0e:45:31:dd:ef:5f:90:27:07:a1:b8:20:6b:58:09: 3c:33:17:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdNgY3lAbG/7NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjQxZDU4YTQtMzU5Yy00NzMxLTg3YjYtMjkyYjY4YjQwY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02FaJSk9Xcgw/VMfuijNPLRME5cJ8XcYY7lJ +aSe6rGLQ+RPD6lVj1WSWesXDm5zLyPN/BwBNSpimFJFhGom3nZso0yItIHRapiX lbg+ul3teut4QSHbo2gbOlKUk22Ml+OdUUOriJKmHKxh9eHShN1upEc1EFV/neIl tlRtUWnUNtX7lmKYzf5xDdT1cHZUL4a/iT24VB4mH/DNuO26O1AXiPZUec3cdLzM iDAtA42wPFj2+6NTh6dtHlh9MQwDM1BSgvklFyHdBUPYueAOdCZnk2dWsMdRekKz JZf2tYgYFye3uSl0/vEMWGdEqrWFmMEbGNBdaBHqw3IfXn6DUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYH0fd1ybymgpRhVWIq+7WRY6SFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTE3NTA1ZWQtYTEyNi0z MmNmLTlkYjktMzUwOGJiYmUyZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrZbxbK21SD6wDX4kONU749Cvbbt7LMEQHWGDzjQQ8woJWIf7XAxMB8 v8JDygqWBq3YKZEwx6bf7/++P6kJFCLOb1dhZ6DqzcfJHnSoBj2ZbBEnqbmYDALg DeGnyZHh3dnEbaF7BqSVJAVVreP0bN+yPfwgNsfcRmsFoaB8MH+1klFCPFOpyKIR yda1l53aH3owTgvHvA8M7PTOoda3FFdiTxOJjoNHddSTyMpRXvOQVzIABC4F3HqW FHdRzujIiiu/HnWMb7BctShxy72xmN7PNeQjUon3U6dB62w8v4B1AUpane6KuKUv a1eHqQ5FMd3vX5AnB6G4IGtYCTwzF+M= -----END CERTIFICATE-----Generated at Wed Nov 5 09:04:43 2025 by rpki-client