$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa File: e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa (raw, json) Hash identifier: hGvQYSBRdZnSsgOkO84diQ1IqL7v5g3oXIrI1ItsVwY= Subject key identifier: 82:F9:04:72:F4:F2:60:7C:C1:41:D7:62:14:97:67:B2:56:B8:C2:E7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB4175DC5D0A8A46AEE800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 199.249.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:41:75:dc:5d:0a:8a:46:ae:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=46ebb9cb-c75b-4d74-8a8a-d5ad8e389955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:fa:75:ac:a7:c7:85:51:d0:5e:b0:f9:6c: b7:e7:ef:fb:0c:a7:23:32:3a:b4:d0:1e:52:c3:89: 24:2f:d1:82:fe:55:cd:72:ce:9b:cf:a2:64:54:2c: cb:96:6a:6d:fb:60:c3:ee:99:dd:69:dc:9a:4d:ee: 90:90:13:47:bb:55:7e:db:73:7a:07:ad:1d:2a:ac: 8e:c8:97:4e:42:d4:4b:de:47:81:b7:f4:8b:61:b6: 35:1b:41:de:47:8d:b0:88:0d:a7:20:6e:ed:29:19: 98:b2:27:ae:64:a7:5c:6c:ea:a8:fe:ec:0c:8e:3c: b9:44:98:87:98:2d:df:d7:f8:09:32:44:de:ae:c3: 4b:a7:f4:ac:0e:75:96:85:bc:2b:3a:8c:91:b7:28: 50:17:24:b1:fb:e3:16:1f:e3:d7:82:9a:08:d0:d3: fe:24:e3:84:de:8e:ba:28:10:99:c7:2e:3f:c4:3c: c6:70:03:78:df:9f:84:ad:3e:c8:49:e0:38:5f:a1: 5c:2e:b0:dd:65:4f:c6:5d:1c:88:b6:13:32:7e:24: 57:77:02:51:3c:1e:a8:7d:bc:c2:95:0e:fe:97:d3: 7e:ac:ce:d9:9c:3f:7f:6b:2f:b4:ce:fa:c7:07:bb: 86:23:0a:3b:c4:09:d4:c8:f5:84:13:07:1b:25:fc: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F9:04:72:F4:F2:60:7C:C1:41:D7:62:14:97:67:B2:56:B8:C2:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:be:9c:90:c0:46:97:af:54:6d:57:b1:cb:34:5d:b8:34:79: f1:ba:df:0b:96:08:d9:4e:74:a5:c3:55:15:af:23:75:64:a2: 7c:b0:47:09:f2:11:f8:e1:d9:16:93:4b:32:87:4b:e9:0e:be: 58:f5:12:aa:1f:0b:9d:0f:d6:9d:b2:74:a6:86:6a:ff:44:bc: 54:6f:08:51:44:5c:6c:39:c7:c0:e2:9c:b3:bf:8c:a7:d8:af: a4:34:a2:e8:8e:a5:35:b0:11:88:fd:2c:83:31:07:97:2d:6b: 71:c2:56:3b:30:88:a1:75:91:75:65:c7:6b:87:29:77:d5:61: 11:a5:63:9d:29:e1:2b:c2:fd:5f:33:4c:36:53:5c:13:c6:3b: 06:ff:40:3c:9c:14:33:32:c8:a3:2d:51:44:e8:50:7e:90:cb: b6:00:83:9c:0b:81:91:3d:94:1d:dc:a5:9b:a1:e2:3e:4f:c7: fa:cd:5a:e4:53:54:8c:ee:f4:5d:8f:f8:03:59:5e:7d:b9:ec: 7a:0a:fc:4c:e5:4e:3c:8d:d2:f7:c8:5b:10:39:06:aa:fe:44: b2:ee:ab:33:23:7f:eb:70:03:1d:7c:2d:63:0b:67:47:9e:2d: c7:d9:a8:e2:e3:db:51:2e:5f:00:4b:17:e3:0c:1b:40:58:c2: a1:ce:b1:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0F13F0Kikau6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk NDZlYmI5Y2ItYzc1Yi00ZDc0LThhOGEtZDVhZDhlMzg5OTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2D6daynx4VR0F6w+Wy35+/7DKcjMjq00B5S w4kkL9GC/lXNcs6bz6JkVCzLlmpt+2DD7pndadyaTe6QkBNHu1V+23N6B60dKqyO yJdOQtRL3keBt/SLYbY1G0HeR42wiA2nIG7tKRmYsieuZKdcbOqo/uwMjjy5RJiH mC3f1/gJMkTersNLp/SsDnWWhbwrOoyRtyhQFySx++MWH+PXgpoI0NP+JOOE3o66 KBCZxy4/xDzGcAN435+ErT7ISeA4X6FcLrDdZU/GXRyIthMyfiRXdwJRPB6ofbzC lQ7+l9N+rM7ZnD9/ay+0zvrHB7uGIwo7xAnUyPWEEwcbJfyMSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL5BHL08mB8wUHXYhSXZ7JWuMLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTRiYmEzYjQtNzZkOC0z YTQ4LTgyZWYtZjI0NmUyMjVkYzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy+nJDARpevVG1Xscs0Xbg0efG63wuWCNlOdKXDVRWvI3VkonywRwny Efjh2RaTSzKHS+kOvlj1EqofC50P1p2ydKaGav9EvFRvCFFEXGw5x8DinLO/jKfY r6Q0ouiOpTWwEYj9LIMxB5cta3HCVjswiKF1kXVlx2uHKXfVYRGlY50p4SvC/V8z TDZTXBPGOwb/QDycFDMyyKMtUUToUH6Qy7YAg5wLgZE9lB3cpZuh4j5Px/rNWuRT VIzu9F2P+ANZXn257HoK/EzlTjyN0vfIWxA5Bqr+RLLuqzMjf+twAx18LWMLZ0ee LcfZqOLj21EuXwBLF+MMG0BYwqHOsXc= -----END CERTIFICATE-----Generated at Thu Aug 7 01:06:44 2025 by rpki-client