$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa File: 8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa (raw, json) Hash identifier: 3VMvtdSxutHYZDAp7/HBpBtRyuUyC46WYMurRAtxsrU= Subject key identifier: 6A:67:FD:FF:1B:4A:E7:BE:FF:8B:FC:14:58:A7:47:B7:DA:87:FA:3F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202361A3AD7BD4E1B176400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.254.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:36:1a:3a:d7:bd:4e:1b:17:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=fef14c07-3313-4bb7-9ad7-95c99df593f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:b3:0d:50:55:85:2d:ad:2f:ed:e2:6d:5c: 81:67:8a:9b:4b:52:e7:eb:6b:e1:ba:25:49:db:d3: 64:e7:a1:f8:2d:f7:0d:d3:a6:94:ff:1e:df:38:98: 13:51:37:bd:a7:1c:de:f5:5b:79:9a:24:d3:5a:7e: 2a:c7:eb:ea:2d:1c:96:ef:56:24:ca:29:fa:44:63: 16:c5:12:b8:1e:cf:59:44:e5:70:40:17:8c:0a:5e: 58:ea:f0:fd:08:bc:13:1d:05:a4:7e:33:ad:7c:1e: 09:22:a2:d5:74:8c:dc:e0:f1:0e:31:03:c6:cb:9d: 4d:ce:ab:b5:9c:fb:83:7b:81:88:ae:4b:c3:df:cb: c7:42:7c:36:ad:b9:c6:4d:10:01:91:c6:a5:44:77: 08:86:50:23:3e:b3:43:a4:c8:bc:0e:7f:78:2f:21: 9e:fe:c6:40:8b:1e:49:93:d5:15:78:7b:84:4c:ef: 93:ab:08:c6:10:a2:58:f9:b0:8a:bd:29:f9:ec:a7: 82:a8:b6:47:36:67:d8:e7:bf:fb:56:ed:f4:43:a3: 63:82:62:92:39:8e:bb:4f:2a:66:07:c6:05:63:0b: 3d:84:a9:78:9e:34:42:eb:d9:72:bc:65:ae:36:1a: ce:87:1e:3e:3e:50:2c:50:f5:92:61:ce:fc:d7:e7: 8d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:67:FD:FF:1B:4A:E7:BE:FF:8B:FC:14:58:A7:47:B7:DA:87:FA:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a5:44:da:74:0a:86:e2:31:e6:ad:58:aa:ea:2a:40:30:03: e4:3e:6b:00:1c:1f:28:b4:25:50:95:b7:92:bd:37:86:2e:27: 61:8e:9a:ba:7b:0a:30:cf:fd:38:9b:22:87:b4:fe:2a:75:26: 38:8d:af:12:c1:73:75:26:2a:16:58:61:2b:66:a6:06:04:88: dc:e9:0c:eb:8b:92:87:84:2d:54:6c:bf:f5:4a:0e:84:db:e4: 57:e2:47:33:55:e8:39:7b:fb:71:ff:e0:e6:b9:c6:ec:e9:96: 8d:48:18:c4:19:44:c9:7f:c0:1d:4a:4f:bf:f8:07:b5:ad:ec: bf:7f:87:b1:2b:85:00:c7:26:be:2e:ed:4d:eb:75:e7:24:a7: 93:3e:93:04:de:f8:1a:93:7b:58:50:5c:1e:2b:77:36:f4:9f: 2c:78:23:aa:ba:2a:8c:6e:47:cf:a0:24:d1:91:c0:45:3d:bd: 97:bd:08:8b:e6:33:c9:0c:c9:6d:f0:ce:50:da:b3:09:fb:f3: 90:2c:bc:55:48:9b:c7:0a:9c:5e:34:72:38:ec:04:da:1c:d3: 16:39:6f:50:18:88:52:2f:e2:ab:f5:09:74:f6:30:0d:59:f6: d6:78:10:1b:01:47:b8:5d:6e:cd:43:b0:5b:82:b6:e9:5b:2e: e3:75:97:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjYaOte9ThsXZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZmVmMTRjMDctMzMxMy00YmI3LTlhZDctOTVjOTlkZjU5M2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB2zDVBVhS2tL+3ibVyBZ4qbS1Ln62vhuiVJ 29Nk56H4LfcN06aU/x7fOJgTUTe9pxze9Vt5miTTWn4qx+vqLRyW71Ykyin6RGMW xRK4Hs9ZROVwQBeMCl5Y6vD9CLwTHQWkfjOtfB4JIqLVdIzc4PEOMQPGy51Nzqu1 nPuDe4GIrkvD38vHQnw2rbnGTRABkcalRHcIhlAjPrNDpMi8Dn94LyGe/sZAix5J k9UVeHuETO+TqwjGEKJY+bCKvSn57KeCqLZHNmfY57/7Vu30Q6NjgmKSOY67Typm B8YFYws9hKl4njRC69lyvGWuNhrOhx4+PlAsUPWSYc781+eNGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpn/f8bSue+/4v8FFinR7fah/o/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGQ3YzVkNGItMzc1OC0z Nzc2LWEzY2EtNjhiNTJjYzU0OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/46MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2lRNp0CobiMeatWKrqKkAwA+Q+awAcHyi0JVCVt5K9N4YuJ2GOmrp7 CjDP/TibIoe0/ip1JjiNrxLBc3UmKhZYYStmpgYEiNzpDOuLkoeELVRsv/VKDoTb 5FfiRzNV6Dl7+3H/4Oa5xuzplo1IGMQZRMl/wB1KT7/4B7Wt7L9/h7ErhQDHJr4u 7U3rdeckp5M+kwTe+BqTe1hQXB4rdzb0nyx4I6q6KoxuR8+gJNGRwEU9vZe9CIvm M8kMyW3wzlDaswn785AsvFVIm8cKnF40cjjsBNoc0xY5b1AYiFIv4qv1CXT2MA1Z 9tZ4EBsBR7hdbs1DsFuCtulbLuN1l0Q= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:34 2025 by rpki-client