$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f64dd5b-6fd0-341d-8504-a02adae27e53.roa File: 8f64dd5b-6fd0-341d-8504-a02adae27e53.roa (raw, json) Hash identifier: GIbosyCnbHw6xELGYRwDpSeOXgq197YfS65xH1Ef9OE= Subject key identifier: 39:2C:C4:63:BA:1A:A0:38:B9:72:2A:AC:73:76:8E:47:F9:6C:8C:84 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620232EC7F218289746A45C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f64dd5b-6fd0-341d-8504-a02adae27e53.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.115.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:32:ec:7f:21:82:89:74:6a:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=621c5977-6434-422e-8b64-0d935f82e8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:70:a9:a8:a5:8f:7f:c4:0e:7d:41:0c:9d: ad:c4:36:3c:54:47:8d:d2:af:a4:e8:b2:3b:8b:31: df:cd:a7:03:93:96:a7:73:a1:6e:6a:9e:29:98:8c: 89:da:9c:b3:f9:f9:f5:e2:f8:53:68:1e:2c:99:7e: 93:9d:47:de:97:36:55:b3:fe:4a:73:ab:44:31:17: b9:a1:af:43:e8:a1:84:23:40:f1:ab:2d:57:35:a5: eb:9f:5c:5d:52:fc:d7:cb:be:ab:ef:96:d3:8d:e0: 16:e8:af:09:30:05:0f:35:81:18:ab:37:88:f6:dc: bb:c3:18:f9:a8:ec:e2:99:b0:63:a3:2a:db:93:f4: 47:32:a9:da:2f:21:47:99:fc:79:10:10:87:61:26: 52:fe:98:fe:3a:f1:f8:2c:c3:c7:52:2c:27:17:0c: 6e:85:98:a4:ad:ea:d4:a6:21:65:6d:b6:b0:30:fe: a8:84:38:d6:83:97:07:8c:66:b9:dc:56:10:16:29: f6:0a:8b:92:3a:e5:ec:d5:1b:24:68:d4:9d:c7:ef: 8b:13:17:ae:d3:4a:86:1e:1a:2e:4f:57:13:3f:a3: 82:38:05:47:44:4a:96:3e:56:16:6e:5d:16:74:53: 5c:92:c6:ba:de:ab:41:86:2f:15:3a:ef:6b:bb:bb: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2C:C4:63:BA:1A:A0:38:B9:72:2A:AC:73:76:8E:47:F9:6C:8C:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f64dd5b-6fd0-341d-8504-a02adae27e53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c7:0b:dd:16:6a:03:1f:da:21:d0:d0:a1:7c:a8:e8:77:77: 40:06:58:81:01:f9:18:7d:f5:5f:91:5f:53:af:c6:79:ee:25: eb:09:73:b5:d4:8e:22:ca:ec:92:89:56:90:ad:b5:2c:97:03: 13:5b:9c:24:98:13:80:22:54:dd:c2:64:6d:94:49:db:8c:c8: 14:eb:bc:c2:e0:db:c4:cf:a6:bd:10:58:b3:a0:6b:4a:ff:16: 8f:0f:de:74:26:91:87:39:4f:f3:bd:a8:43:3c:3b:f5:ad:f9: 85:21:0e:66:27:df:a0:f1:10:a0:8d:2f:35:99:c3:cd:da:69: 95:9e:0f:a0:78:d8:7f:0b:52:67:85:88:7b:e4:f4:82:0c:a3: c1:ba:82:2d:a7:c6:53:fc:e4:18:be:3b:18:01:23:2c:ec:57: 55:af:9c:5b:fa:46:b7:72:f3:41:f0:63:24:99:bc:0e:e3:65: 17:d5:61:4e:b2:5e:cf:39:31:5d:26:e3:09:a8:e1:56:24:c2: 4e:22:6a:14:c1:ba:91:6e:95:00:22:19:08:3e:fa:24:b3:da: c5:6f:e1:76:77:ba:40:7b:95:39:90:dd:e2:8c:a9:fb:c9:73: ef:c7:b6:90:c0:88:89:22:09:bb:1a:68:ca:09:8d:0e:82:bb: 97:cf:47:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjLsfyGCiXRqRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjIxYzU5NzctNjQzNC00MjJlLThiNjQtMGQ5MzVmODJlOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Qtwqailj3/EDn1BDJ2txDY8VEeN0q+k6LI7 izHfzacDk5anc6Fuap4pmIyJ2pyz+fn14vhTaB4smX6TnUfelzZVs/5Kc6tEMRe5 oa9D6KGEI0Dxqy1XNaXrn1xdUvzXy76r75bTjeAW6K8JMAUPNYEYqzeI9ty7wxj5 qOzimbBjoyrbk/RHMqnaLyFHmfx5EBCHYSZS/pj+OvH4LMPHUiwnFwxuhZikrerU piFlbbawMP6ohDjWg5cHjGa53FYQFin2CouSOuXs1RskaNSdx++LExeu00qGHhou T1cTP6OCOAVHREqWPlYWbl0WdFNcksa63qtBhi8VOu9ru7sRRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDksxGO6GqA4uXIqrHN2jkf5bIyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGY2NGRkNWItNmZkMC0z NDFkLTg1MDQtYTAyYWRhZTI3ZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3ObMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3HC90WagMf2iHQ0KF8qOh3d0AGWIEB+Rh99V+RX1OvxnnuJesJc7XU jiLK7JKJVpCttSyXAxNbnCSYE4AiVN3CZG2USduMyBTrvMLg28TPpr0QWLOga0r/ Fo8P3nQmkYc5T/O9qEM8O/Wt+YUhDmYn36DxEKCNLzWZw83aaZWeD6B42H8LUmeF iHvk9IIMo8G6gi2nxlP85Bi+OxgBIyzsV1WvnFv6Rrdy80HwYySZvA7jZRfVYU6y Xs85MV0m4wmo4VYkwk4iahTBupFulQAiGQg++iSz2sVv4XZ3ukB7lTmQ3eKMqfvJ c+/HtpDAiIkiCbsaaMoJjQ6Cu5fPR10= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:36 2025 by rpki-client