$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61b21e5d-7c0a-38ba-baeb-2eb0d710a02c.roa File: 61b21e5d-7c0a-38ba-baeb-2eb0d710a02c.roa (raw, json) Hash identifier: SETA3cTQay3FWhwUoEN+sqdHBauVejyidmBFHJq+FKk= Subject key identifier: 5C:5F:28:22:3E:AC:25:EF:66:F2:73:09:65:90:E2:AB:D8:82:8B:C7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B636749DCAA2544E947D00680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61b21e5d-7c0a-38ba-baeb-2eb0d710a02c.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 199.249.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:49:dc:aa:25:44:e9:47:d0:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=7066fe5a-8d4e-4cd8-b213-c2de6f60aa5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:9a:03:90:a0:27:d5:1c:04:a1:33:f8:69: d0:44:ce:80:92:a7:0f:f1:e1:73:93:b7:20:4c:f2: dd:90:99:8f:e1:8a:7b:d4:68:ff:51:0b:f1:7b:a3: f5:49:10:00:66:a2:62:14:6b:15:ee:27:4d:ad:6f: ec:21:fd:df:5c:17:81:f3:ce:61:0a:c4:e4:d4:a2: d4:80:93:b8:0c:d7:5d:0e:f0:31:05:6c:5f:8d:9e: 00:93:ec:7f:64:76:30:ce:55:e7:39:3c:4a:f3:74: 7b:a7:cf:88:93:41:24:9c:d3:12:5d:15:02:e4:b1: 5e:3c:7d:fd:2e:7b:e0:c6:65:17:78:d6:cb:e7:cf: b8:63:e9:94:fa:6a:7b:73:7c:a5:a4:cf:cf:40:e2: 8a:ad:ec:1e:f4:d4:54:63:ce:e1:a4:6e:96:da:61: 86:a4:f3:99:0b:9f:88:2c:7a:e4:65:58:ea:7e:b9: d6:89:71:40:d7:cf:2f:69:31:35:f8:cb:f4:80:e2: 61:82:95:3e:0e:78:bb:46:c9:2d:a5:a9:88:db:4f: e0:32:37:85:f5:26:c8:ee:64:01:73:f9:e1:43:b2: de:90:60:4a:33:0b:2e:b8:c0:91:88:99:92:08:aa: 68:32:5f:6b:fa:c1:b5:b3:63:ca:96:9a:34:ec:a7: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5F:28:22:3E:AC:25:EF:66:F2:73:09:65:90:E2:AB:D8:82:8B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61b21e5d-7c0a-38ba-baeb-2eb0d710a02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:c9:73:43:79:5a:fa:ec:c9:65:b3:e4:b6:af:ce:7f:dd:c7: d8:12:c1:f0:3b:3e:3d:94:65:42:45:4f:dc:c8:c4:fd:10:9e: 4f:aa:69:e5:64:6d:d8:5e:c1:43:f8:69:8f:00:51:47:b8:b1: 18:d2:ca:e2:95:95:72:c9:ba:dd:e9:8c:97:b1:b4:46:1d:f0: 21:53:77:21:8e:a4:f7:e8:99:91:df:3b:b1:1e:34:5c:08:bc: 4b:31:58:f7:7c:e1:90:e5:6c:a5:2e:49:c0:58:02:f8:dc:47: 46:f3:c5:9e:3e:fa:1f:56:bf:3e:2a:06:ba:f4:97:ab:a6:82: ba:81:85:f4:7c:75:3f:8b:db:f5:17:99:17:78:ad:2c:db:e6: 93:45:fc:97:36:4e:21:a3:1f:8b:04:aa:fb:07:b2:6c:0d:70: 6c:e6:95:1e:27:29:82:93:e4:52:3d:fe:12:d1:45:4f:19:8b: 67:8c:1d:e7:d8:6e:46:cb:8f:38:15:53:ed:da:7a:4f:19:5a: 97:74:6a:9b:a9:d3:52:56:6d:13:ca:e5:ca:43:55:98:85:67: dc:15:a1:4f:b7:6c:7f:61:53:ea:9a:c9:bb:52:52:06:ea:fc: ac:de:26:c0:34:a4:38:dd:04:a7:c1:6f:44:49:3b:29:86:03: a3:a3:67:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0ncqiVE6UfQBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk NzA2NmZlNWEtOGQ0ZS00Y2Q4LWIyMTMtYzJkZTZmNjBhYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH6aA5CgJ9UcBKEz+GnQRM6AkqcP8eFzk7cg TPLdkJmP4Yp71Gj/UQvxe6P1SRAAZqJiFGsV7idNrW/sIf3fXBeB885hCsTk1KLU gJO4DNddDvAxBWxfjZ4Ak+x/ZHYwzlXnOTxK83R7p8+Ik0EknNMSXRUC5LFePH39 LnvgxmUXeNbL58+4Y+mU+mp7c3ylpM/PQOKKrewe9NRUY87hpG6W2mGGpPOZC5+I LHrkZVjqfrnWiXFA188vaTE1+Mv0gOJhgpU+Dni7RsktpamI20/gMjeF9SbI7mQB c/nhQ7LekGBKMwsuuMCRiJmSCKpoMl9r+sG1s2PKlpo07Kd3CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxfKCI+rCXvZvJzCWWQ4qvYgovHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjFiMjFlNWQtN2MwYS0z OGJhLWJhZWItMmViMGQ3MTBhMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjJc0N5WvrsyWWz5Lavzn/dx9gSwfA7Pj2UZUJFT9zIxP0Qnk+qaeVk bdhewUP4aY8AUUe4sRjSyuKVlXLJut3pjJextEYd8CFTdyGOpPfomZHfO7EeNFwI vEsxWPd84ZDlbKUuScBYAvjcR0bzxZ4++h9Wvz4qBrr0l6umgrqBhfR8dT+L2/UX mRd4rSzb5pNF/Jc2TiGjH4sEqvsHsmwNcGzmlR4nKYKT5FI9/hLRRU8Zi2eMHefY bkbLjzgVU+3aek8ZWpd0apup01JWbRPK5cpDVZiFZ9wVoU+3bH9hU+qaybtSUgbq /KzeJsA0pDjdBKfBb0RJOymGA6OjZ+4= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:34 2025 by rpki-client