$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8026a59b-604d-3b85-a7cf-e775206c8d4c.roa File: 8026a59b-604d-3b85-a7cf-e775206c8d4c.roa (raw, json) Hash identifier: svvTWwrwhBcTXG1cC5ijfPZNmvZjgPtSCZqtobWtwVw= Subject key identifier: 3F:52:08:07:D9:A5:93:51:9C:A6:CD:01:84:12:99:87:77:CE:7A:27 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201F4632A7DC43273273440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8026a59b-604d-3b85-a7cf-e775206c8d4c.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.253.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f4:63:2a:7d:c4:32:73:27:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=e8b209a2-ec07-4cda-ba90-5e9d4bd5dbbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:5a:2a:f3:ca:14:e9:b1:ce:b8:11:26:5b: 18:7b:61:4c:2f:b7:c9:74:f9:39:70:66:e5:0a:c8: 22:b9:5e:15:bb:af:d4:51:03:4f:3c:fa:75:c7:e5: ff:74:95:de:f5:c1:31:fe:8e:7e:7c:bb:8b:8c:08: ca:dd:62:64:c9:3f:93:fd:ba:00:b9:91:b4:e4:c3: f6:44:09:b9:87:51:60:2a:56:2f:eb:32:8b:9c:62: 9a:00:ec:f2:d9:db:0e:27:40:78:f1:a1:d5:cd:3a: ae:98:dd:e7:01:cc:a8:7f:72:a4:93:db:bd:62:48: 2c:3f:fc:29:9d:4b:47:6c:26:6f:83:a3:26:5c:27: 4c:7f:c9:de:52:d5:d1:98:36:94:c4:5e:a2:4a:e4: df:4d:5b:6b:9f:a0:ad:d7:f4:02:62:ab:14:5d:f6: 79:f9:3b:6d:5e:7c:4c:b0:61:69:2d:7c:9c:15:d4: 56:67:09:34:c2:cb:42:88:02:0c:16:40:f0:b3:6c: bc:67:0a:95:3c:bb:e8:cb:ff:81:30:09:db:ad:ce: a4:7a:4c:18:c1:0c:18:3e:d1:b5:99:b8:75:4e:3a: 25:ec:5c:73:86:5e:53:2c:e7:54:d0:cc:94:ff:ef: fd:0e:71:3d:14:22:4d:b7:21:20:1a:1e:d6:14:1a: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:52:08:07:D9:A5:93:51:9C:A6:CD:01:84:12:99:87:77:CE:7A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8026a59b-604d-3b85-a7cf-e775206c8d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:8b:d9:35:06:a4:2f:c6:c4:33:c5:93:cc:1a:64:14:e5:56: cf:c8:1c:3c:c7:90:de:d4:ce:5f:36:68:a1:5b:c0:c2:35:2d: e5:71:e7:18:01:a3:d1:4a:f1:d0:ae:d6:f1:ea:12:bc:78:0f: 45:62:01:b6:64:0c:5b:ba:3b:48:03:22:b4:62:e7:53:47:f6: 53:a7:21:f4:5e:f3:39:ac:ea:7e:c8:e3:42:c5:e5:6a:61:9a: c5:52:4f:07:de:b3:54:6c:46:aa:cd:3f:bc:d3:ba:47:ae:f9: c9:47:0f:24:4b:53:7f:4c:a7:5d:ce:52:f1:36:92:9d:03:22: 0c:6a:c4:c0:90:4a:d2:cb:79:fa:ee:b7:9c:47:2c:ed:53:88: 88:2e:e2:dc:76:e0:ea:be:e7:58:e8:36:4f:31:d0:6e:a8:ab: f3:88:56:d3:a7:b4:35:c0:b3:45:1d:81:03:5a:5e:74:79:3c: 55:a1:cc:27:99:51:5e:23:5b:64:64:c0:c1:f6:e0:bf:87:91: 1c:3f:e5:b4:a6:56:f6:02:0c:07:3d:c8:74:62:c2:fe:b2:b3: 0a:ef:9d:a1:db:cd:8c:93:73:95:45:1f:41:bc:79:99:0c:1e: 00:9f:a1:44:5b:c0:92:46:49:b2:12:87:7c:3e:fe:27:ce:ed: cd:19:bc:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfRjKn3EMnMnNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZThiMjA5YTItZWMwNy00Y2RhLWJhOTAtNWU5ZDRiZDVkYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2haKvPKFOmxzrgRJlsYe2FML7fJdPk5cGbl CsgiuV4Vu6/UUQNPPPp1x+X/dJXe9cEx/o5+fLuLjAjK3WJkyT+T/boAuZG05MP2 RAm5h1FgKlYv6zKLnGKaAOzy2dsOJ0B48aHVzTqumN3nAcyof3Kkk9u9YkgsP/wp nUtHbCZvg6MmXCdMf8neUtXRmDaUxF6iSuTfTVtrn6Ct1/QCYqsUXfZ5+TttXnxM sGFpLXycFdRWZwk0wstCiAIMFkDws2y8ZwqVPLvoy/+BMAnbrc6kekwYwQwYPtG1 mbh1Tjol7Fxzhl5TLOdU0MyU/+/9DnE9FCJNtyEgGh7WFBrstwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9SCAfZpZNRnKbNAYQSmYd3znonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODAyNmE1OWItNjA0ZC0z Yjg1LWE3Y2YtZTc3NTIwNmM4ZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/0+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWL2TUGpC/GxDPFk8waZBTlVs/IHDzHkN7Uzl82aKFbwMI1LeVx5xgB o9FK8dCu1vHqErx4D0ViAbZkDFu6O0gDIrRi51NH9lOnIfRe8zms6n7I40LF5Wph msVSTwfes1RsRqrNP7zTukeu+clHDyRLU39Mp13OUvE2kp0DIgxqxMCQStLLefru t5xHLO1TiIgu4tx24Oq+51joNk8x0G6oq/OIVtOntDXAs0UdgQNaXnR5PFWhzCeZ UV4jW2RkwMH24L+HkRw/5bSmVvYCDAc9yHRiwv6yswrvnaHbzYyTc5VFH0G8eZkM HgCfoURbwJJGSbISh3w+/ifO7c0ZvLU= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:36 2025 by rpki-client