$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa File: ea5646e1-1195-382d-8eec-de8a18c25b3c.roa (raw, json) Hash identifier: RB+1/Bn8uVAa/fsLcMkOrn9y//e3qxMAsmkzFLCBDks= Subject key identifier: 72:F7:CC:0E:2A:C5:8E:7A:50:99:6C:B0:5E:0A:20:FE:3B:9A:0B:16 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201F1745A6684D32B2B5420 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.182.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f1:74:5a:66:84:d3:2b:2b:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=e1861fe4-eec5-43aa-ba39-f1a43183123d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:41:85:5c:bf:4d:fe:8c:50:78:52:b0:13: 45:65:6d:c1:95:6d:c8:02:95:a7:7e:76:af:14:8c: 3f:5c:14:96:e5:37:c8:5b:9f:51:27:b7:4c:20:0b: 43:00:90:a1:fa:0c:e1:bc:7d:29:bd:1d:00:ab:7c: 83:9c:a4:3a:92:49:57:71:05:a7:48:a3:f5:e4:fb: dc:8d:36:0d:b9:66:60:9f:ff:12:60:f6:65:93:f9: cb:58:ea:f7:32:49:76:94:15:fd:73:10:52:5e:85: 67:f4:29:44:30:1a:69:70:2d:25:6e:d1:39:64:10: e0:64:10:d9:15:cf:21:c6:2e:34:d3:19:1c:05:6b: d5:7a:87:40:6f:b7:24:c2:33:21:9f:46:09:43:a0: b1:12:b2:93:75:ca:65:42:a3:83:39:d1:d0:f8:cb: 5d:6e:10:bd:60:d1:49:10:56:15:a8:07:ce:9c:4e: 1b:bb:3a:43:8d:3f:9b:36:e9:70:54:ca:0f:7c:96: bb:89:ef:66:dc:b7:56:8e:e6:26:1c:81:93:12:0c: 03:53:51:0a:07:ca:09:46:a1:3b:da:6e:dc:c4:b9: ca:fd:e8:37:27:5b:d1:29:d0:5b:3e:85:c9:49:b1: 97:95:6b:60:cb:ff:a8:45:79:b3:8f:84:55:3e:3f: 86:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F7:CC:0E:2A:C5:8E:7A:50:99:6C:B0:5E:0A:20:FE:3B:9A:0B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:01:a2:81:4c:cf:a4:ba:45:47:26:5c:7e:31:e0:63:8a:62: a2:ef:b2:51:c2:b5:db:13:53:aa:e2:d8:ad:ff:c5:90:62:06: 6a:66:a3:03:6c:0d:52:da:6d:eb:fa:87:95:e8:8b:e9:7c:5b: c8:76:57:61:71:bc:19:cf:08:8e:49:6c:b2:ba:e9:7d:12:c2: 28:6a:3b:4f:c2:cb:6c:c6:9f:07:17:81:1f:80:42:a5:87:93: 7a:9c:8e:b1:c3:aa:78:47:50:64:48:cc:5b:2a:78:4b:27:18: 9d:5e:9a:57:de:b7:c8:0f:3e:0d:f3:9f:8d:38:b3:b8:8c:c8: 0c:81:f7:2f:0e:7d:db:67:a8:af:fd:54:8b:60:dc:8c:65:53: 4a:8a:51:07:74:99:53:6d:f9:44:03:95:2c:8c:2a:54:8d:72: 66:7f:1e:a1:0e:2a:75:89:f2:a1:6d:93:a2:31:b1:c3:1e:a5: 5d:1f:03:98:9d:62:52:a3:ee:ef:ad:6e:8a:08:3c:28:3a:9b: de:de:76:e8:5e:78:74:bf:c7:73:31:77:6d:22:9e:3b:37:85: 2a:39:f4:90:e9:e6:01:5a:e7:36:ee:c6:c1:41:9c:23:70:58: be:14:74:23:a6:81:e7:76:74:4f:20:4a:d8:99:19:27:2a:c3: 3e:e2:71:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfF0WmaE0ysrVCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTE4NjFmZTQtZWVjNS00M2FhLWJhMzktZjFhNDMxODMxMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywZBhVy/Tf6MUHhSsBNFZW3BlW3IApWnfnav FIw/XBSW5TfIW59RJ7dMIAtDAJCh+gzhvH0pvR0Aq3yDnKQ6kklXcQWnSKP15Pvc jTYNuWZgn/8SYPZlk/nLWOr3Mkl2lBX9cxBSXoVn9ClEMBppcC0lbtE5ZBDgZBDZ Fc8hxi400xkcBWvVeodAb7ckwjMhn0YJQ6CxErKTdcplQqODOdHQ+MtdbhC9YNFJ EFYVqAfOnE4buzpDjT+bNulwVMoPfJa7ie9m3LdWjuYmHIGTEgwDU1EKB8oJRqE7 2m7cxLnK/eg3J1vRKdBbPoXJSbGXlWtgy/+oRXmzj4RVPj+GXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL3zA4qxY56UJlssF4KIP47mgsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWE1NjQ2ZTEtMTE5NS0z ODJkLThlZWMtZGU4YTE4YzI1YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0BooFMz6S6RUcmXH4x4GOKYqLvslHCtdsTU6ri2K3/xZBiBmpmowNs DVLabev6h5Xoi+l8W8h2V2FxvBnPCI5JbLK66X0SwihqO0/Cy2zGnwcXgR+AQqWH k3qcjrHDqnhHUGRIzFsqeEsnGJ1emlfet8gPPg3zn404s7iMyAyB9y8OfdtnqK/9 VItg3IxlU0qKUQd0mVNt+UQDlSyMKlSNcmZ/HqEOKnWJ8qFtk6IxscMepV0fA5id YlKj7u+tbooIPCg6m97eduheeHS/x3Mxd20injs3hSo59JDp5gFa5zbuxsFBnCNw WL4UdCOmged2dE8gStiZGScqwz7icYk= -----END CERTIFICATE-----Generated at Tue Oct 21 09:15:58 2025 by rpki-client