$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3953ccbd-3c9d-37ae-a3ae-ef760167009a.roa File: 3953ccbd-3c9d-37ae-a3ae-ef760167009a.roa (raw, json) Hash identifier: 94bpFQP52KzyMxkDvRdsI82XpxfTp5ub/spgYtR8sy4= Subject key identifier: F9:3C:AB:4B:58:0F:13:EE:69:8B:C9:9C:35:57:5C:23:30:B8:44:B7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62021D2AF811068167D3EC80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3953ccbd-3c9d-37ae-a3ae-ef760167009a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.253.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1d:2a:f8:11:06:81:67:d3:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=9bd40b9e-88f1-4e08-8f65-8dc24e3f106c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:d5:ee:44:4f:dd:d3:97:8c:e4:b7:16:dc: a5:a5:e8:70:ac:05:e9:f6:15:8c:00:5e:26:78:a1: aa:a0:bf:0b:79:9c:f4:4a:d1:96:2b:59:d6:c3:21: e9:ba:bb:3b:e1:1b:af:35:36:e9:6a:c0:35:56:e4: e2:84:e6:29:86:9e:2c:0b:0c:93:57:10:b5:08:48: a2:70:25:60:c2:22:a4:03:1a:97:69:00:aa:e8:60: 57:88:47:d5:a7:6e:83:8c:aa:69:a2:99:54:c3:e7: 98:ef:d0:40:3c:34:47:fc:dc:26:34:94:9d:42:7b: 9c:e4:c1:bd:82:65:a0:a3:f4:5e:6b:ed:90:76:8a: 17:ef:d9:da:80:1d:77:7b:e6:40:bc:01:0a:b6:5c: ff:9b:08:c4:2e:b4:ed:3e:17:b3:95:91:ee:a4:36: 19:a5:9a:19:4e:8d:25:16:27:dc:a5:03:c0:17:66: 73:ee:87:5d:06:b3:1f:4c:09:e3:59:d9:8f:78:b3: f4:bc:ed:7b:20:f4:a0:3e:87:aa:7d:0f:e6:77:0f: f9:4b:69:52:c7:19:73:07:56:d3:c1:34:35:d8:f5: b7:8c:b1:49:9e:0d:41:22:d4:55:b4:00:e2:b6:e6: 50:54:a1:ab:c4:fe:44:81:5d:0b:94:2f:09:0f:79: 81:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3C:AB:4B:58:0F:13:EE:69:8B:C9:9C:35:57:5C:23:30:B8:44:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3953ccbd-3c9d-37ae-a3ae-ef760167009a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:28:ed:0b:43:76:aa:40:1e:cc:be:35:cd:fa:73:32:c7:62: 6e:f1:18:84:64:a0:34:73:bc:d3:e5:a5:d4:97:c6:f5:19:9c: 2d:de:18:ef:f8:33:c0:2d:9d:22:41:e1:15:90:69:2b:04:9d: be:65:a5:22:e9:5f:26:0d:2c:4a:25:06:00:5e:99:42:29:12: 18:3f:b7:3c:26:f9:b4:3a:d5:de:eb:b5:31:c4:de:b8:ed:5c: 61:2f:a3:65:f2:cf:1b:73:28:42:49:4b:f9:55:e2:32:b9:53: fe:8d:6b:75:03:da:da:29:66:1a:26:cb:88:38:d9:74:d3:65: e3:34:67:37:9f:a0:c4:b4:0c:49:41:2b:55:b6:42:c7:cb:86: 75:f8:a1:36:1e:bf:2f:43:a7:a6:17:81:a0:2e:0f:7c:17:e3: 63:b4:8f:cf:eb:3f:13:af:e6:de:2a:09:54:70:14:57:33:74: c6:06:83:3a:8a:6a:38:41:8f:7b:f5:75:03:65:9f:ae:55:79: 5b:51:9f:20:9e:44:e9:ab:65:c7:44:f7:ca:1c:a9:6d:9a:e1: f7:35:a6:81:6d:d2:8b:6b:68:49:d5:d0:8c:3b:85:08:d9:fd: 34:68:b9:13:2c:dd:f6:1b:f3:d1:2d:b0:14:4c:43:19:83:c9: 8c:08:d0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAh0q+BEGgWfT7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWJkNDBiOWUtODhmMS00ZTA4LThmNjUtOGRjMjRlM2YxMDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGfV7kRP3dOXjOS3FtylpehwrAXp9hWMAF4m eKGqoL8LeZz0StGWK1nWwyHpurs74RuvNTbpasA1VuTihOYphp4sCwyTVxC1CEii cCVgwiKkAxqXaQCq6GBXiEfVp26DjKppoplUw+eY79BAPDRH/NwmNJSdQnuc5MG9 gmWgo/Rea+2QdooX79nagB13e+ZAvAEKtlz/mwjELrTtPhezlZHupDYZpZoZTo0l FifcpQPAF2Zz7oddBrMfTAnjWdmPeLP0vO17IPSgPoeqfQ/mdw/5S2lSxxlzB1bT wTQ12PW3jLFJng1BItRVtADituZQVKGrxP5EgV0LlC8JD3mBmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPk8q0tYDxPuaYvJnDVXXCMwuES3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzk1M2NjYmQtM2M5ZC0z N2FlLWEzYWUtZWY3NjAxNjcwMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEo7QtDdqpAHsy+Nc36czLHYm7xGIRkoDRzvNPlpdSXxvUZnC3eGO/4 M8AtnSJB4RWQaSsEnb5lpSLpXyYNLEolBgBemUIpEhg/tzwm+bQ61d7rtTHE3rjt XGEvo2XyzxtzKEJJS/lV4jK5U/6Na3UD2topZhomy4g42XTTZeM0ZzefoMS0DElB K1W2QsfLhnX4oTYevy9Dp6YXgaAuD3wX42O0j8/rPxOv5t4qCVRwFFczdMYGgzqK ajhBj3v1dQNln65VeVtRnyCeROmrZcdE98ocqW2a4fc1poFt0otraEnV0Iw7hQjZ /TRouRMs3fYb89EtsBRMQxmDyYwI0As= -----END CERTIFICATE-----Generated at Fri Oct 10 22:07:43 2025 by rpki-client