$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0d4e2f6-5ab7-39d6-9014-65c589d1a5a4.roa File: f0d4e2f6-5ab7-39d6-9014-65c589d1a5a4.roa (raw, json) Hash identifier: hELTh2THYH3L0eHjiMlcra/d+sVAz6iq3h1qSWB2AxI= Subject key identifier: F9:66:3E:68:F9:3A:4C:C9:BD:CE:8F:A1:09:1D:64:10:4A:91:BE:44 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62022A81176A930ED97C67E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0d4e2f6-5ab7-39d6-9014-65c589d1a5a4.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.182.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:2a:81:17:6a:93:0e:d9:7c:67:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=e0b8b6b2-59bf-4323-b422-e41f25da12ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:a0:f9:8d:6b:a3:89:a6:10:d5:c0:dd:cd: 69:70:61:eb:04:2c:bb:a7:a3:10:72:84:14:8b:58: 84:e9:b1:20:8d:91:30:81:b8:74:2b:67:8e:21:13: 15:30:d2:10:8c:72:db:75:5a:c2:f9:61:bf:68:fa: ac:94:fc:5a:fa:48:a8:6a:43:a5:05:1a:2c:cb:7f: eb:ec:1b:a9:80:20:85:48:64:ca:86:3c:2d:31:1c: e8:7f:86:4c:be:b4:c8:c1:41:3d:a8:45:ff:b0:ea: 87:dc:14:6b:42:b0:f9:58:f7:dd:c8:16:b5:88:36: 4f:61:b7:8e:cc:00:7a:3a:44:d5:47:09:86:38:db: 63:e6:56:cb:76:18:2a:5a:fe:f6:b9:96:d5:7b:18: 69:e2:67:c6:fb:e5:3a:14:df:ad:0d:fc:ee:25:96: a7:b1:42:72:a4:3f:82:c4:09:85:8e:36:11:59:4f: 62:90:64:74:4a:25:0c:32:bd:82:04:55:3e:40:d5: 79:0d:fe:1d:29:2e:1c:3d:90:dc:e9:e8:a9:ef:ed: 25:ba:89:4c:76:7f:47:d1:8d:02:d4:51:6c:cf:40: f5:25:9b:9f:3b:89:53:f4:63:14:1f:54:8e:76:70: 71:e6:8e:e3:36:64:92:41:41:dc:fb:a7:d3:f0:f1: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:66:3E:68:F9:3A:4C:C9:BD:CE:8F:A1:09:1D:64:10:4A:91:BE:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0d4e2f6-5ab7-39d6-9014-65c589d1a5a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ef:96:02:9e:12:a1:73:08:19:b3:78:b2:15:0d:47:59:c3: 11:4a:47:b3:8f:df:46:9f:08:78:f4:e0:9d:95:35:ed:d5:4e: 63:28:c3:e8:41:17:f6:77:71:31:bf:3c:84:8c:14:a6:9b:f7: ce:af:37:ee:1d:f4:76:ce:e0:45:8e:08:7b:1c:d7:f8:72:ff: 52:80:19:e3:c5:b2:b7:42:5e:ce:21:8d:1c:56:fb:da:42:e0: 0c:4a:40:8e:7f:fc:fe:d3:c7:2c:b0:d3:ab:65:fe:c6:7f:54: bb:4f:75:3b:4c:b9:36:f4:c0:98:46:41:b7:09:be:45:80:61: 54:e8:45:2a:42:28:69:19:3e:a7:5b:1a:a1:c3:de:45:41:9c: 54:30:e1:5e:ad:e0:39:63:79:e1:1f:36:47:d8:21:5f:38:6f: 97:29:61:b6:c3:31:0a:1c:bf:c0:33:3d:74:a5:1c:13:ed:3c: 40:de:89:ab:28:de:32:e1:3f:57:44:dc:6c:29:dc:a3:db:5e: eb:69:59:3e:03:af:30:ff:38:5f:2c:50:dc:cc:2e:01:a3:3c: 76:3e:5b:b8:8a:60:ef:db:d1:82:71:ac:13:be:25:07:69:92: 92:58:3e:03:b3:ee:0c:00:fb:3e:9a:55:4a:17:60:c2:31:df: 3c:15:84:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiqBF2qTDtl8Z+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTBiOGI2YjItNTliZi00MzIzLWI0MjItZTQxZjI1ZGExMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBKg+Y1ro4mmENXA3c1pcGHrBCy7p6MQcoQU i1iE6bEgjZEwgbh0K2eOIRMVMNIQjHLbdVrC+WG/aPqslPxa+kioakOlBRosy3/r 7BupgCCFSGTKhjwtMRzof4ZMvrTIwUE9qEX/sOqH3BRrQrD5WPfdyBa1iDZPYbeO zAB6OkTVRwmGONtj5lbLdhgqWv72uZbVexhp4mfG++U6FN+tDfzuJZansUJypD+C xAmFjjYRWU9ikGR0SiUMMr2CBFU+QNV5Df4dKS4cPZDc6eip7+0luolMdn9H0Y0C 1FFsz0D1JZufO4lT9GMUH1SOdnBx5o7jNmSSQUHc+6fT8PFW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlmPmj5OkzJvc6PoQkdZBBKkb5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjBkNGUyZjYtNWFiNy0z OWQ2LTkwMTQtNjVjNTg5ZDFhNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzvlgKeEqFzCBmzeLIVDUdZwxFKR7OP30afCHj04J2VNe3VTmMow+hB F/Z3cTG/PISMFKab986vN+4d9HbO4EWOCHsc1/hy/1KAGePFsrdCXs4hjRxW+9pC 4AxKQI5//P7Txyyw06tl/sZ/VLtPdTtMuTb0wJhGQbcJvkWAYVToRSpCKGkZPqdb GqHD3kVBnFQw4V6t4DljeeEfNkfYIV84b5cpYbbDMQocv8AzPXSlHBPtPEDeiaso 3jLhP1dE3Gwp3KPbXutpWT4DrzD/OF8sUNzMLgGjPHY+W7iKYO/b0YJxrBO+JQdp kpJYPgOz7gwA+z6aVUoXYMIx3zwVhJk= -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:33 2025 by rpki-client