$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/83249b09-da78-3496-b35d-3cddaa31c30b.roa File: 83249b09-da78-3496-b35d-3cddaa31c30b.roa (raw, json) Hash identifier: MWr3LCbIQqfnQqRZm9Ig7iFcvzguJG8VtGipc7caHeU= Subject key identifier: BA:F1:7D:D4:33:4C:DE:E1:EA:41:C2:09:96:8F:70:BC:C0:3C:C1:54 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620218F39F1884BDF5895F20 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/83249b09-da78-3496-b35d-3cddaa31c30b.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.253.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:18:f3:9f:18:84:bd:f5:89:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=bf008ebc-0788-40bd-a278-ef4379b5a06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:87:76:07:3c:d5:d7:78:47:0b:4f:93:90:d6: ed:7d:95:9d:2a:69:7c:44:3b:8b:d0:42:e4:a3:8d: 02:83:00:95:8d:22:44:70:f4:98:22:c6:04:20:f8: 9c:72:2e:a8:83:4f:48:53:56:de:29:14:19:58:0a: 36:08:9f:d8:d5:45:ea:2e:62:ab:b0:5f:cc:07:5e: b2:77:c5:3e:e6:d7:a1:22:b1:b4:25:c8:e6:b7:3e: 04:5e:e6:be:a9:67:86:0c:42:be:79:54:4b:17:93: 6b:b1:32:c9:a1:79:45:97:99:04:59:0a:5b:e4:26: b5:b9:96:65:b0:35:78:d2:3d:5b:5d:5e:a6:68:31: c7:73:8a:5e:95:49:11:cb:99:58:97:27:3a:66:30: 59:b4:f6:69:39:90:d0:8d:e3:36:1a:97:ce:e5:74: 2a:0f:4b:0e:e6:78:4b:13:92:18:ed:0a:df:4c:ce: b6:b9:f2:0e:fc:c8:65:b2:02:47:4e:af:09:d1:65: ac:ea:c5:e7:d7:ac:de:e0:f3:d2:09:65:e4:23:39: 1e:e0:11:7e:f4:de:25:6e:6c:7f:e7:a5:e0:ba:75: 43:29:58:fa:f0:20:6f:1d:5b:6c:9a:35:8a:f2:05: d5:57:00:fa:1e:f6:af:59:12:e6:2a:3c:9f:b9:ed: 9a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F1:7D:D4:33:4C:DE:E1:EA:41:C2:09:96:8F:70:BC:C0:3C:C1:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/83249b09-da78-3496-b35d-3cddaa31c30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:ad:34:05:4c:d2:1a:38:f8:6e:e1:40:94:79:c7:da:e7:42: 2d:a7:4d:21:68:33:39:66:dc:0e:75:00:f3:50:7a:2d:9a:15: 71:58:dd:48:b4:ba:da:49:c2:75:24:5b:e9:1f:65:5e:e0:bf: 35:c4:3e:3e:10:a2:89:34:12:bc:aa:cd:cb:7c:17:b8:f5:c7: 8a:73:90:b2:06:4e:fd:9f:55:75:f9:ae:2f:64:b3:c3:8b:ab: 29:d2:1b:26:ee:84:50:af:32:e9:31:52:08:df:95:fd:77:3c: 48:f2:92:84:c7:99:c5:f7:8f:3e:03:3b:73:31:21:2a:62:0e: 88:6b:12:79:b8:48:c3:d7:f0:be:77:c4:25:a6:af:b7:cc:78: fa:9d:c6:c8:a7:15:bc:7f:34:ab:c1:72:a1:d8:c2:4f:8b:98: 22:19:99:06:f6:6f:d7:63:20:ad:80:99:99:79:bc:0a:98:bd: 2b:48:9b:e9:d9:51:dd:e6:1a:9d:8f:c6:40:18:b6:cc:97:86: 89:53:03:41:7e:32:77:54:d3:1f:e6:87:46:1e:bf:57:c2:75: aa:f6:46:46:e8:26:71:0d:0c:8a:32:f5:85:fe:70:52:70:7c: db:14:59:87:0c:85:ab:e9:cb:c1:33:3e:c6:71:8e:5f:4c:9f: d4:68:67:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhjznxiEvfWJXyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YmYwMDhlYmMtMDc4OC00MGJkLWEyNzgtZWY0Mzc5YjVhMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhId2BzzV13hHC0+TkNbtfZWdKml8RDuL0ELk o40CgwCVjSJEcPSYIsYEIPicci6og09IU1beKRQZWAo2CJ/Y1UXqLmKrsF/MB16y d8U+5tehIrG0Jcjmtz4EXua+qWeGDEK+eVRLF5NrsTLJoXlFl5kEWQpb5Ca1uZZl sDV40j1bXV6maDHHc4pelUkRy5lYlyc6ZjBZtPZpOZDQjeM2GpfO5XQqD0sO5nhL E5IY7QrfTM62ufIO/MhlsgJHTq8J0WWs6sXn16ze4PPSCWXkIzke4BF+9N4lbmx/ 56XgunVDKVj68CBvHVtsmjWK8gXVVwD6HvavWRLmKjyfue2aDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrxfdQzTN7h6kHCCZaPcLzAPMFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODMyNDliMDktZGE3OC0z NDk2LWIzNWQtM2NkZGFhMzFjMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/05MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALutNAVM0ho4+G7hQJR5x9rnQi2nTSFoMzlm3A51APNQei2aFXFY3Ui0 utpJwnUkW+kfZV7gvzXEPj4Qook0Eryqzct8F7j1x4pzkLIGTv2fVXX5ri9ks8OL qynSGybuhFCvMukxUgjflf13PEjykoTHmcX3jz4DO3MxISpiDohrEnm4SMPX8L53 xCWmr7fMePqdxsinFbx/NKvBcqHYwk+LmCIZmQb2b9djIK2AmZl5vAqYvStIm+nZ Ud3mGp2PxkAYtsyXholTA0F+MndU0x/mh0Yev1fCdar2RkboJnENDIoy9YX+cFJw fNsUWYcMhavpy8EzPsZxjl9Mn9RoZ+w= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:35 2025 by rpki-client