$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e17505ed-a126-32cf-9db9-3508bbbe2d54.roa File: e17505ed-a126-32cf-9db9-3508bbbe2d54.roa (raw, json) Hash identifier: AVzegyjCz9TQVPCLCLCyHpBDezatJ2rw4SIgOuScUU8= Subject key identifier: 5D:DE:9F:61:E1:8D:59:57:14:F0:E0:DE:21:22:05:73:B0:41:6B:0D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584E0435D810FE15D227F70C3BC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e17505ed-a126-32cf-9db9-3508bbbe2d54.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 12041 IP address blocks: 199.249.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:d8:10:fe:15:d2:27:f7:0c:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=381c56f5-5595-41c3-a17b-b987a5937764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:b9:89:2b:aa:3d:68:91:ec:5e:7b:e3:66: 93:dc:a2:59:6d:5b:13:bc:61:d0:14:00:c5:41:f2: f9:2b:3e:3a:90:fa:43:79:74:f1:fa:e2:09:3a:0b: 0a:d5:02:95:81:28:8f:94:67:58:3e:c1:53:0f:4a: 14:28:21:3d:8e:63:e4:72:02:0a:b7:8b:83:14:8b: dd:56:fc:ec:be:ca:82:07:5b:82:49:48:e8:cd:80: eb:7e:26:9a:5f:50:e0:7c:a9:52:5a:3a:97:3f:36: ad:f2:d1:ea:fa:70:17:95:68:24:94:05:f4:18:8c: 21:80:25:8d:75:f4:a8:03:0b:71:2f:61:bd:60:f4: 29:84:26:61:90:88:16:22:cd:04:7a:68:7f:49:a2: cd:0e:06:0c:01:2e:f8:32:f9:ed:5d:91:b9:e5:74: a3:1a:95:7c:2a:36:9c:22:19:d6:01:65:4f:ab:a7: 4b:04:7b:69:2d:e2:43:ba:ac:e5:2d:e0:8f:eb:1e: 84:33:ff:20:b6:d2:f0:4f:07:5b:04:3e:20:61:12: 39:c8:1a:24:11:d6:a7:ec:81:9c:26:cf:3c:e4:4c: 4f:1b:f3:5b:42:1e:1f:71:c1:6e:2f:5a:f1:dd:a1: 3c:aa:d1:dd:bc:38:17:94:c5:0b:84:67:79:2d:d9: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DE:9F:61:E1:8D:59:57:14:F0:E0:DE:21:22:05:73:B0:41:6B:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e17505ed-a126-32cf-9db9-3508bbbe2d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:61:90:46:48:98:4f:30:ea:00:67:54:39:50:39:30:28:58: 4c:82:46:f2:16:de:67:4f:6e:cb:65:50:c9:94:7f:b8:69:db: 3e:7d:e5:52:8b:c7:c8:a5:44:81:64:8e:60:99:72:a4:a5:d6: 59:60:2d:38:bb:5d:23:46:a5:25:c4:1a:01:8b:97:c6:00:88: a7:a8:7a:9a:cc:9d:95:83:80:df:b2:e9:9d:58:d7:24:fb:2b: 29:af:97:96:76:d4:a2:9b:82:a7:79:d9:fb:41:2c:ab:9c:70: 70:07:3f:4e:75:be:6f:5f:13:58:52:3a:09:cb:6e:3f:de:26: 77:92:52:0d:ce:ea:ec:5a:16:81:ce:a6:46:0f:18:05:20:33: e0:f9:18:37:ee:a0:29:7c:37:a0:f3:5f:75:99:f3:d2:93:50: 0d:a9:63:97:21:8e:77:0d:ed:12:3d:67:32:81:6d:34:ab:8c: f7:d8:b3:f7:7a:d0:23:0e:43:14:07:53:36:ec:ba:fe:b9:00: 13:84:cb:fd:4c:73:c0:fe:4e:93:9b:dd:34:b1:dc:ad:c3:f3: 9a:e1:bd:c4:24:c8:2a:bd:88:5b:fc:78:00:c6:46:5e:5e:22: 41:25:22:db:b6:46:cb:fd:78:21:ea:59:ea:57:b6:32:8f:c3: 15:60:7b:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENdgQ/hXSJ/cMO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MzgxYzU2ZjUtNTU5NS00MWMzLWExN2ItYjk4N2E1OTM3NzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb25iSuqPWiR7F5742aT3KJZbVsTvGHQFADF QfL5Kz46kPpDeXTx+uIJOgsK1QKVgSiPlGdYPsFTD0oUKCE9jmPkcgIKt4uDFIvd VvzsvsqCB1uCSUjozYDrfiaaX1DgfKlSWjqXPzat8tHq+nAXlWgklAX0GIwhgCWN dfSoAwtxL2G9YPQphCZhkIgWIs0Eemh/SaLNDgYMAS74MvntXZG55XSjGpV8Kjac IhnWAWVPq6dLBHtpLeJDuqzlLeCP6x6EM/8gttLwTwdbBD4gYRI5yBokEdan7IGc Js885ExPG/NbQh4fccFuL1rx3aE8qtHdvDgXlMULhGd5LdmH+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3en2HhjVlXFPDg3iEiBXOwQWsNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTE3NTA1ZWQtYTEyNi0z MmNmLTlkYjktMzUwOGJiYmUyZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIthkEZImE8w6gBnVDlQOTAoWEyCRvIW3mdPbstlUMmUf7hp2z595VKL x8ilRIFkjmCZcqSl1llgLTi7XSNGpSXEGgGLl8YAiKeoeprMnZWDgN+y6Z1Y1yT7 Kymvl5Z21KKbgqd52ftBLKuccHAHP051vm9fE1hSOgnLbj/eJneSUg3O6uxaFoHO pkYPGAUgM+D5GDfuoCl8N6DzX3WZ89KTUA2pY5chjncN7RI9ZzKBbTSrjPfYs/d6 0CMOQxQHUzbsuv65ABOEy/1Mc8D+TpOb3TSx3K3D85rhvcQkyCq9iFv8eADGRl5e IkElItu2Rsv9eCHqWepXtjKPwxVgeys= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:55 2026 by rpki-client