$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b59db570-05e4-3a87-bf9b-7ee8db5a1156.roa File: b59db570-05e4-3a87-bf9b-7ee8db5a1156.roa (raw, json) Hash identifier: 85fXW4t8ISxU8MGkf7ctKrS2BoaY/q142noLSbW7bmg= Subject key identifier: 0D:52:7C:06:83:9D:62:63:EF:49:CE:0E:93:23:55:A1:F5:36:C5:FD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202276F0C9ECEEB9F63B010 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b59db570-05e4-3a87-bf9b-7ee8db5a1156.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.182.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:27:6f:0c:9e:ce:eb:9f:63:b0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=87e601d2-771a-487c-91ac-45b0bd03c20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f0:58:e1:39:59:b2:ec:b7:13:cd:54:ef:7f: 93:3c:dc:c8:61:e8:b0:59:2c:c2:2c:4e:35:bf:0f: 0b:6b:20:e1:92:4d:16:4a:12:b2:65:b3:e9:3a:c4: a9:f9:ee:4b:d3:11:f9:a9:bb:58:c9:23:ae:43:88: 5a:42:06:40:32:e5:56:b8:01:65:c1:e7:15:88:dd: 02:80:3c:c4:2d:df:d4:d3:a5:42:40:a2:f7:5b:41: 06:95:4a:35:87:70:1c:88:9f:d0:52:34:e7:70:c8: 6d:71:27:0f:f6:62:e6:b8:de:71:de:9a:ba:b1:0b: df:1f:fb:34:16:ef:6b:dd:58:fe:13:35:e6:22:c9: 48:a4:24:45:75:fb:4b:b7:da:26:82:41:cb:e4:1e: 76:8d:d5:2d:17:ca:39:34:1a:53:d2:87:41:5f:3c: 59:85:17:fb:71:6b:6a:64:89:f9:77:ab:d5:76:4c: d2:eb:44:46:4e:93:fa:0b:e3:56:b7:a4:08:37:b1: f2:9c:3b:e8:0b:83:43:bf:5d:cb:0b:6f:6f:41:c2: 95:77:bc:69:62:d9:7f:b1:b0:6f:2c:71:3a:8f:2e: f6:ce:98:57:d5:ef:1e:e6:4c:b9:38:9a:89:b6:8f: 09:5e:bd:ee:bf:1f:b6:15:85:1c:a4:e2:70:0e:7b: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:52:7C:06:83:9D:62:63:EF:49:CE:0E:93:23:55:A1:F5:36:C5:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b59db570-05e4-3a87-bf9b-7ee8db5a1156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:44:ab:65:e6:81:78:d6:45:1f:fc:80:61:9d:a2:15:80:95: b7:12:c6:70:19:81:80:d8:e9:d2:c7:fe:0d:48:f2:04:8e:6c: bd:4d:ba:71:f8:9c:77:28:d4:02:99:6e:f3:50:dc:04:9b:22: 13:15:39:6c:98:a7:c4:6d:36:6d:f7:95:08:2d:b0:aa:11:f9: 3f:2c:0c:3a:f8:ce:42:10:47:31:49:4d:31:f6:0b:df:44:b5: be:56:2f:ee:72:8e:e6:db:48:af:44:16:94:fa:9f:09:75:7d: f1:7d:6a:08:10:f9:5f:33:08:4c:db:a2:0b:38:59:f7:e0:5e: 91:a8:29:eb:c4:8a:9e:3b:55:16:ab:5a:43:4c:e7:95:d2:b4: e3:32:c4:0b:e2:c6:8a:8e:80:21:73:aa:79:e6:29:30:bb:9d: a2:fe:30:10:7f:86:99:c8:1e:cc:29:3e:89:7c:38:5e:af:0d: 4d:3f:92:82:94:70:29:b9:27:82:c9:7d:19:92:bd:c5:f0:a8: 44:a9:07:7e:a9:47:de:1f:8c:7b:e7:e0:ee:8c:0a:fe:ac:9a: 85:05:8b:e2:05:74:8f:ca:90:a7:3e:8e:e5:ab:e0:37:1e:86: 39:e5:9d:0f:db:b2:78:79:ff:9d:c8:98:33:64:4e:d7:d7:8b: ea:4b:d0:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAidvDJ7O659jsBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ODdlNjAxZDItNzcxYS00ODdjLTkxYWMtNDViMGJkMDNjMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/BY4TlZsuy3E81U73+TPNzIYeiwWSzCLE41 vw8LayDhkk0WShKyZbPpOsSp+e5L0xH5qbtYySOuQ4haQgZAMuVWuAFlwecViN0C gDzELd/U06VCQKL3W0EGlUo1h3AciJ/QUjTncMhtcScP9mLmuN5x3pq6sQvfH/s0 Fu9r3Vj+EzXmIslIpCRFdftLt9omgkHL5B52jdUtF8o5NBpT0odBXzxZhRf7cWtq ZIn5d6vVdkzS60RGTpP6C+NWt6QIN7HynDvoC4NDv13LC29vQcKVd7xpYtl/sbBv LHE6jy72zphX1e8e5ky5OJqJto8JXr3uvx+2FYUcpOJwDnsW8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1SfAaDnWJj70nODpMjVaH1NsX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjU5ZGI1NzAtMDVlNC0z YTg3LWJmOWItN2VlOGRiNWExMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFEq2XmgXjWRR/8gGGdohWAlbcSxnAZgYDY6dLH/g1I8gSObL1NunH4 nHco1AKZbvNQ3ASbIhMVOWyYp8RtNm33lQgtsKoR+T8sDDr4zkIQRzFJTTH2C99E tb5WL+5yjubbSK9EFpT6nwl1ffF9aggQ+V8zCEzbogs4WffgXpGoKevEip47VRar WkNM55XStOMyxAvixoqOgCFzqnnmKTC7naL+MBB/hpnIHswpPol8OF6vDU0/koKU cCm5J4LJfRmSvcXwqESpB36pR94fjHvn4O6MCv6smoUFi+IFdI/KkKc+juWr4Dce hjnlnQ/bsnh5/53ImDNkTtfXi+pL0Mk= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:34 2025 by rpki-client