$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/718af13e-a931-33d1-82d3-4991b7f36dea.roa File: 718af13e-a931-33d1-82d3-4991b7f36dea.roa (raw, json) Hash identifier: Gw7Gmwrl/b2NqzyMH8OS1SJ0/LoC6b+CpYspyJvCLQY= Subject key identifier: AA:C9:99:0B:AC:5A:2E:D1:94:FE:D9:75:8F:F8:67:E6:D7:4C:7E:3D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B3C51A50D37D4CBA1390E7320 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/718af13e-a931-33d1-82d3-4991b7f36dea.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 198260 IP address blocks: 199.10.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:a5:0d:37:d4:cb:a1:39:0e:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=191d22bd-de51-40a1-9764-35f36fb073e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:31:f5:85:d0:a9:3f:28:c0:db:1b:40:fa: ab:ef:50:da:bf:34:e6:7b:69:b8:60:2e:62:83:01: 9e:7d:8a:1f:3b:ac:14:06:da:96:3d:7e:b8:6b:41: 40:f8:1b:fd:5d:c1:ff:ae:1d:48:57:23:0f:f5:1c: 36:f1:35:3b:90:43:6b:54:d6:0e:2d:ec:88:38:4b: bf:cd:1d:c8:e1:2e:09:f5:82:ff:87:dc:ec:47:af: 54:8a:ab:6f:fb:60:28:1a:e0:0c:d1:9b:70:8a:e1: 8c:a4:21:8d:61:13:05:e9:f3:4e:2e:e6:74:d7:57: 02:12:cd:f3:52:42:b2:2e:63:2e:73:95:bc:f1:68: 4e:0e:21:32:bc:aa:0e:12:cf:8c:ff:60:28:80:32: d0:33:78:f1:be:d6:06:7d:5e:af:fe:59:72:2d:44: 03:ac:4f:2c:40:24:f1:8e:86:f7:80:b7:e2:80:d0: 4d:9f:d0:a8:7c:99:81:28:05:77:7f:32:52:dc:dd: df:79:19:1b:25:9f:84:f3:2c:58:50:28:9a:a9:af: 9e:a6:6c:0d:3f:55:2c:20:6a:ca:29:b8:cf:ec:6d: 75:40:01:a6:0c:ed:29:8c:02:b7:27:f0:63:24:5d: 9d:1c:5a:92:e8:7a:9c:1e:12:08:5b:84:2e:cf:8b: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C9:99:0B:AC:5A:2E:D1:94:FE:D9:75:8F:F8:67:E6:D7:4C:7E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/718af13e-a931-33d1-82d3-4991b7f36dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.10.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:21:c4:7f:9c:09:c8:4c:fe:8d:f0:3d:dd:34:f9:74:e4:9e: 6e:e0:56:18:29:fa:04:74:03:d8:12:82:fc:36:98:5a:1d:52: 76:2a:c4:72:3d:4e:cd:53:c7:e8:4c:fd:d3:d2:f5:34:76:9f: 9a:bd:0c:e1:63:2d:52:2e:b3:9e:d3:cf:56:5c:3f:fc:a5:9d: 20:cd:c6:61:4c:99:b4:29:56:c6:d0:07:d3:8d:d2:87:ef:53: c1:4d:0f:f6:1b:b4:68:12:b6:7e:31:6c:2d:8b:9d:a9:e9:0d: 00:0a:9d:3c:9d:eb:80:be:4f:c9:b9:bc:e4:7d:6d:d8:30:ba: e8:cd:51:c2:3b:5f:d6:c9:bb:e1:79:6f:c9:86:f5:f0:b4:31: 1f:e7:b6:5f:83:9b:2f:88:fe:e0:4c:5a:88:74:10:7c:09:ea: 3c:b2:1c:53:e2:78:ac:46:0b:e7:d2:f2:aa:30:b6:1a:2b:bc: 91:5a:0c:e3:e9:42:e4:22:da:06:05:f9:07:44:0c:d8:89:6d: e8:4f:80:e1:70:6c:81:82:b2:1e:14:23:76:d6:74:a4:1d:0a: 76:42:ee:d6:08:c8:6b:6f:87:8d:1d:31:12:41:9f:ee:a5:b7: 2f:91:46:31:b5:62:87:c9:61:19:d0:a2:47:eb:7a:cd:dd:3b: ba:b3:41:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UaUNN9TLoTkOcyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk MTkxZDIyYmQtZGU1MS00MGExLTk3NjQtMzVmMzZmYjA3M2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZcx9YXQqT8owNsbQPqr71DavzTme2m4YC5i gwGefYofO6wUBtqWPX64a0FA+Bv9XcH/rh1IVyMP9Rw28TU7kENrVNYOLeyIOEu/ zR3I4S4J9YL/h9zsR69Uiqtv+2AoGuAM0ZtwiuGMpCGNYRMF6fNOLuZ011cCEs3z UkKyLmMuc5W88WhODiEyvKoOEs+M/2AogDLQM3jxvtYGfV6v/llyLUQDrE8sQCTx job3gLfigNBNn9CofJmBKAV3fzJS3N3feRkbJZ+E8yxYUCiaqa+epmwNP1UsIGrK KbjP7G11QAGmDO0pjAK3J/BjJF2dHFqS6HqcHhIIW4Quz4tCjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrJmQusWi7RlP7ZdY/4Z+bXTH49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzE4YWYxM2UtYTkzMS0z M2QxLTgyZDMtNDk5MWI3ZjM2ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4hxH+cCchM/o3wPd00+XTknm7gVhgp+gR0A9gSgvw2mFodUnYqxHI9 Ts1Tx+hM/dPS9TR2n5q9DOFjLVIus57Tz1ZcP/ylnSDNxmFMmbQpVsbQB9ON0ofv U8FND/YbtGgStn4xbC2LnanpDQAKnTyd64C+T8m5vOR9bdgwuujNUcI7X9bJu+F5 b8mG9fC0MR/ntl+Dmy+I/uBMWoh0EHwJ6jyyHFPieKxGC+fS8qowthorvJFaDOPp QuQi2gYF+QdEDNiJbehPgOFwbIGCsh4UI3bWdKQdCnZC7tYIyGtvh40dMRJBn+6l ty+RRjG1YofJYRnQokfres3dO7qzQSk= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:46 2025 by rpki-client