$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d3f2d62-7392-3f54-9ead-3a261d95adca.roa File: 5d3f2d62-7392-3f54-9ead-3a261d95adca.roa (raw, json) Hash identifier: 9YdPvTSGXZrWSjzl+AonkXFsmquYokWdYv7QCWH22rQ= Subject key identifier: AD:7F:B2:20:6C:87:1F:92:8D:49:47:59:DB:87:39:2D:66:FC:DE:5C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D4FD7425D1B5CA918780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d3f2d62-7392-3f54-9ead-3a261d95adca.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.182.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d4:fd:74:25:d1:b5:ca:91:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=06e53bd6-fe20-4e74-abcf-50ef21f610d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2a:34:56:4d:eb:15:c0:40:59:85:69:1d:c2: 40:04:64:58:28:2f:7a:dc:61:c5:e7:0b:8c:00:0f: 21:c8:fc:dc:1f:3a:a5:3f:1d:f9:b9:0d:52:fd:7d: 9b:0c:5c:3d:27:ed:e9:aa:64:8e:a4:be:d1:92:2a: 64:a9:73:09:e2:72:6e:a1:30:25:4f:ed:a1:8f:81: db:22:bb:df:55:b0:92:1a:30:b2:f3:4f:10:43:76: 5d:d4:df:c3:07:b3:17:4d:55:28:f9:4a:a2:9c:ad: d7:19:0f:0a:1c:29:52:e7:a0:8b:72:7b:2c:4b:29: c8:ed:e3:a0:5c:55:a4:93:bb:64:a4:03:55:d6:44: ae:3c:e0:c6:fc:9c:f5:b0:84:c9:fc:26:83:23:ef: 44:09:65:e2:d2:57:64:11:d3:55:39:91:4a:ef:da: 81:5c:0c:37:59:95:6f:71:ab:48:5f:f6:d7:ce:fb: b2:20:00:db:ee:a5:2e:85:23:04:3a:3c:56:00:1e: c6:c4:f2:ce:28:0c:d3:95:dd:5f:44:f4:91:a3:b4: 52:87:6b:20:15:73:9f:e8:f8:e7:38:df:e5:c4:6f: df:20:4f:f3:8d:da:c4:54:98:41:05:04:9b:a4:33: 5d:a6:07:da:65:e5:a6:f4:e7:74:db:c9:63:8e:18: 93:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7F:B2:20:6C:87:1F:92:8D:49:47:59:DB:87:39:2D:66:FC:DE:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d3f2d62-7392-3f54-9ead-3a261d95adca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d7:ad:6f:4f:56:d6:24:b5:5c:16:c3:9d:21:72:e3:35:c9: 8a:e0:a8:65:1a:5f:87:2b:9b:18:66:e3:ba:8c:96:f0:14:40: 51:1a:d6:e1:ec:7a:95:f0:91:07:1c:da:eb:98:66:00:50:b7: 88:bd:cb:82:3c:30:23:07:ee:3d:ef:76:4d:5d:6b:42:0b:af: 14:9e:68:76:34:be:24:50:79:20:57:af:18:4f:d8:98:7e:a4: 55:66:f6:f8:66:80:20:00:84:cf:5d:d1:4d:b6:b2:22:dd:69: 9e:f6:04:43:ff:f1:c0:aa:2d:36:fb:01:a2:c8:b7:45:7f:e2: 3d:47:65:8c:51:b5:0b:cd:8e:e2:de:e9:bc:33:23:30:b5:dd: 71:55:31:47:53:e9:06:2f:5f:8d:ec:fb:58:77:31:2d:0d:d4: 3c:0f:fc:35:eb:04:66:6d:b6:ad:95:4e:8a:6a:b6:5c:59:6d: a2:9a:b8:52:84:a9:1a:78:b9:c9:3a:70:97:1b:78:c3:79:bf: b9:8f:5c:a3:49:12:99:e1:d7:05:80:f9:5f:8b:06:d0:6c:65: 9a:9f:01:49:fd:cf:6a:1e:90:f2:50:03:de:f0:43:5f:0e:6c: a0:6f:22:48:de:5d:b4:de:8c:52:20:df:89:68:fa:df:40:80: 5b:7a:ea:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdT9dCXRtcqRh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MDZlNTNiZDYtZmUyMC00ZTc0LWFiY2YtNTBlZjIxZjYxMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiio0Vk3rFcBAWYVpHcJABGRYKC963GHF5wuM AA8hyPzcHzqlPx35uQ1S/X2bDFw9J+3pqmSOpL7RkipkqXMJ4nJuoTAlT+2hj4Hb IrvfVbCSGjCy808QQ3Zd1N/DB7MXTVUo+UqinK3XGQ8KHClS56CLcnssSynI7eOg XFWkk7tkpANV1kSuPODG/Jz1sITJ/CaDI+9ECWXi0ldkEdNVOZFK79qBXAw3WZVv catIX/bXzvuyIADb7qUuhSMEOjxWAB7GxPLOKAzTld1fRPSRo7RSh2sgFXOf6Pjn ON/lxG/fIE/zjdrEVJhBBQSbpDNdpgfaZeWm9Od028ljjhiT5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1/siBshx+SjUlHWduHOS1m/N5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWQzZjJkNjItNzM5Mi0z ZjU0LTllYWQtM2EyNjFkOTVhZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzXrW9PVtYktVwWw50hcuM1yYrgqGUaX4crmxhm47qMlvAUQFEa1uHs epXwkQcc2uuYZgBQt4i9y4I8MCMH7j3vdk1da0ILrxSeaHY0viRQeSBXrxhP2Jh+ pFVm9vhmgCAAhM9d0U22siLdaZ72BEP/8cCqLTb7AaLIt0V/4j1HZYxRtQvNjuLe 6bwzIzC13XFVMUdT6QYvX43s+1h3MS0N1DwP/DXrBGZttq2VTopqtlxZbaKauFKE qRp4uck6cJcbeMN5v7mPXKNJEpnh1wWA+V+LBtBsZZqfAUn9z2oekPJQA97wQ18O bKBvIkjeXbTejFIg34lo+t9AgFt66t0= -----END CERTIFICATE-----Generated at Fri Oct 10 17:54:07 2025 by rpki-client