$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2797cec6-dd1c-359f-be1a-51bf1f83dbe9.roa File: 2797cec6-dd1c-359f-be1a-51bf1f83dbe9.roa (raw, json) Hash identifier: ljW+TMIdUjj5DG6Nx/xS/wnlcVMPp/JxNiN5IPXBKk8= Subject key identifier: 18:52:CF:89:28:14:30:0E:1C:19:E6:BD:AD:12:52:A4:4F:78:C1:A2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202239E2E10C9653A3F8D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2797cec6-dd1c-359f-be1a-51bf1f83dbe9.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.115.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:23:9e:2e:10:c9:65:3a:3f:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d92c3239-45fc-47e3-b97a-e1377d944c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:54:1b:3f:6f:b7:7f:63:df:69:d6:71:f0: 71:63:24:97:87:d0:17:f5:48:99:eb:36:86:9a:cd: 94:9c:06:aa:9a:15:b4:18:5f:4f:4b:67:b5:09:c1: 8a:96:b4:f9:73:10:76:fc:d5:b8:d5:8f:32:79:44: 60:a7:7c:3c:f6:e3:d0:25:79:00:93:86:42:5d:f0: f0:24:8f:6c:f6:48:89:a2:f2:2a:b9:7e:b4:25:94: 2d:d0:d2:dd:5d:cf:8c:7a:03:ee:ff:fc:5d:4c:48: 13:3d:18:34:ec:45:c3:14:b2:a9:9a:bb:cc:6f:78: a8:bf:e1:b0:52:73:be:58:3e:e1:e5:3c:1d:07:8c: 80:24:12:a0:3a:11:5e:23:54:4a:15:d9:60:73:d2: 14:61:4d:2a:79:15:38:8f:9e:4c:79:3a:bc:47:f3: b6:82:d8:40:0c:4e:54:ea:76:ab:41:67:17:db:a0: 12:f4:75:33:15:d0:cc:e2:d5:58:5e:70:86:fa:26: 49:55:91:59:ed:8c:c1:9e:96:21:f4:02:96:55:2e: 8f:2b:a9:a1:7c:b1:1c:97:ce:c0:82:cd:78:92:a0: d9:3f:86:83:91:fb:b1:32:5d:68:c2:44:b3:d2:85: fa:ae:24:20:95:38:6a:67:11:51:47:b5:45:0e:32: 05:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:52:CF:89:28:14:30:0E:1C:19:E6:BD:AD:12:52:A4:4F:78:C1:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2797cec6-dd1c-359f-be1a-51bf1f83dbe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:57:76:bc:76:3f:d3:eb:c6:47:6c:e1:45:fe:55:0c:bc:0a: ca:32:98:a7:7e:c2:68:eb:51:3d:c9:99:61:a4:4a:03:33:fc: 94:ad:d5:3d:32:3c:68:e8:97:b2:fd:05:ce:65:07:a0:5c:2a: 36:79:40:08:a5:ab:8d:73:b8:02:1f:02:ae:e7:c2:67:81:d4: 7a:c0:fa:bf:0f:ea:72:5f:64:b5:a9:28:93:3f:69:2c:35:28: 33:86:c3:72:79:4d:2a:ac:7a:93:64:c9:5d:6c:9f:85:75:71: 90:e7:46:c6:a4:0b:a9:b5:b0:02:78:1a:79:8c:53:4e:7d:10: 1e:e8:fe:ab:0f:2d:f6:95:c2:9d:a5:af:5b:3c:b7:b9:41:79: 65:16:0a:0b:fb:8b:eb:16:b9:4c:f8:61:6e:87:f9:e3:5f:f9: 38:00:0b:b5:95:fe:c5:35:28:c4:af:95:5e:00:1f:8c:85:55: 9e:4c:4c:ee:8d:57:c6:bc:bf:11:0e:07:f6:97:d1:5e:4b:19: 47:98:bc:1b:41:70:5f:29:1e:6e:c9:c9:84:06:9a:4a:36:fe: cf:45:2f:cb:17:9d:b0:cd:50:d3:49:dd:df:58:7b:3f:3c:71: 98:00:16:98:30:d5:d6:37:e2:ba:2f:3f:e9:b8:0d:7c:e4:40: e3:1e:e8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiOeLhDJZTo/jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDkyYzMyMzktNDVmYy00N2UzLWI5N2EtZTEzNzdkOTQ0YzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocVUGz9vt39j32nWcfBxYySXh9AX9UiZ6zaG ms2UnAaqmhW0GF9PS2e1CcGKlrT5cxB2/NW41Y8yeURgp3w89uPQJXkAk4ZCXfDw JI9s9kiJovIquX60JZQt0NLdXc+MegPu//xdTEgTPRg07EXDFLKpmrvMb3iov+Gw UnO+WD7h5TwdB4yAJBKgOhFeI1RKFdlgc9IUYU0qeRU4j55MeTq8R/O2gthADE5U 6narQWcX26AS9HUzFdDM4tVYXnCG+iZJVZFZ7YzBnpYh9AKWVS6PK6mhfLEcl87A gs14kqDZP4aDkfuxMl1owkSz0oX6riQglThqZxFRR7VFDjIFcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhSz4koFDAOHBnmva0SUqRPeMGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjc5N2NlYzYtZGQxYy0z NTlmLWJlMWEtNTFiZjFmODNkYmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtXdrx2P9Prxkds4UX+VQy8CsoymKd+wmjrUT3JmWGkSgMz/JSt1T0y PGjol7L9Bc5lB6BcKjZ5QAilq41zuAIfAq7nwmeB1HrA+r8P6nJfZLWpKJM/aSw1 KDOGw3J5TSqsepNkyV1sn4V1cZDnRsakC6m1sAJ4GnmMU059EB7o/qsPLfaVwp2l r1s8t7lBeWUWCgv7i+sWuUz4YW6H+eNf+TgAC7WV/sU1KMSvlV4AH4yFVZ5MTO6N V8a8vxEOB/aX0V5LGUeYvBtBcF8pHm7JyYQGmko2/s9FL8sXnbDNUNNJ3d9Yez88 cZgAFpgw1dY34rovP+m4DXzkQOMe6Is= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:33 2025 by rpki-client