$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a565a19c-a06d-3e70-b1f5-14a0b9e8d5dc.roa File: a565a19c-a06d-3e70-b1f5-14a0b9e8d5dc.roa (raw, json) Hash identifier: GvGwvaTWuH7Aa7FSW0S7tu7T1xZqnqEGjyJXhBMuXMU= Subject key identifier: 77:A1:D6:75:EE:37:D6:2F:48:7D:A9:48:58:88:D5:CA:C5:53:A9:73 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B63674AD8BD6F5340B77E19A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a565a19c-a06d-3e70-b1f5-14a0b9e8d5dc.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 207266 IP address blocks: 199.115.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:4a:d8:bd:6f:53:40:b7:7e:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=c8ea692b-1942-4274-b0dc-07df553f204d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:37:9b:a9:a9:3a:56:b8:1b:9a:f4:c4:6a: ab:9a:95:0b:e4:d7:44:eb:d7:9f:4d:5f:d5:dd:ba: 16:88:80:38:ba:cd:f8:a6:c3:5a:33:93:2c:1f:52: 06:45:f4:f9:f7:7f:d2:b5:95:51:80:13:c4:b7:b0: 6e:80:b0:1b:9a:e9:52:f6:e1:00:55:c6:b9:b6:85: 0d:90:95:52:28:50:96:4a:67:4e:1b:77:1f:76:4e: c4:e4:29:45:e4:69:de:cf:f7:dd:92:42:99:cc:04: d7:4e:aa:22:2f:af:2d:3d:25:e2:7a:13:65:56:5e: 6c:56:d9:6f:3a:e4:f6:86:b1:4d:2b:dc:dd:da:40: 8b:ed:14:0b:70:85:db:67:85:e7:2e:a9:53:c3:d1: 6c:d7:51:c6:b8:bd:a4:39:f5:09:df:1e:29:ee:33: 95:bf:bf:44:18:dd:84:90:1f:f4:f3:20:16:75:80: 8c:71:59:e6:ae:8d:24:d4:33:ae:de:f6:32:09:83: 60:11:7a:00:1a:07:9b:34:c5:cd:0f:69:d3:ca:e1: c6:d3:06:15:94:34:02:21:92:6d:31:e5:6f:b3:07: ee:f6:57:07:83:b7:b5:d5:00:ef:e8:bf:0b:51:25: a9:ba:d6:f7:db:a2:75:8a:6d:e4:dc:de:22:c6:f5: 04:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A1:D6:75:EE:37:D6:2F:48:7D:A9:48:58:88:D5:CA:C5:53:A9:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a565a19c-a06d-3e70-b1f5-14a0b9e8d5dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:59:46:73:29:65:bb:51:63:33:ec:15:77:03:49:f5:1a:6c: 7f:bd:36:2c:0f:40:0d:8d:62:ca:2c:63:af:ba:e2:71:a5:a6: 64:3e:a9:35:f7:45:53:eb:e5:d3:71:59:05:26:93:f6:17:f5: 48:ac:26:39:f0:e2:ea:82:d2:25:cc:c6:f7:be:1c:db:2e:cb: 36:1d:72:0a:0f:cd:1f:a5:a5:36:33:ce:a2:f7:f9:82:1d:d0: 45:0f:8b:92:08:4f:b5:bc:31:90:1e:69:18:8b:5f:80:47:cd: 28:17:64:4a:a1:d9:f8:e1:f9:6b:cb:32:89:45:6d:e1:be:7f: ec:8d:9d:40:65:b8:51:33:1f:a0:82:49:94:f3:a6:bb:be:c9: 0e:62:e1:f8:fc:fe:7b:df:39:42:4b:80:2f:0c:83:75:2a:ae: 05:91:f1:a6:3f:01:ea:2a:70:cc:b8:af:73:1a:9a:ca:41:29: 47:5e:92:9c:db:44:82:31:19:46:3e:6e:96:7c:c5:e6:14:d0: b2:2b:56:b7:fe:c5:52:1b:b2:3f:9a:d5:48:a9:4c:c3:15:19: 34:77:cf:b8:7d:95:0c:df:5d:22:af:38:cb:16:b4:99:87:ec: 77:7d:ce:cd:21:0a:d1:06:82:6f:a4:3e:d2:a3:03:e4:ff:8f: 29:49:df:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0rYvW9TQLd+GaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YzhlYTY5MmItMTk0Mi00Mjc0LWIwZGMtMDdkZjU1M2YyMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOM3m6mpOla4G5r0xGqrmpUL5NdE69efTV/V 3boWiIA4us34psNaM5MsH1IGRfT593/StZVRgBPEt7BugLAbmulS9uEAVca5toUN kJVSKFCWSmdOG3cfdk7E5ClF5Gnez/fdkkKZzATXTqoiL68tPSXiehNlVl5sVtlv OuT2hrFNK9zd2kCL7RQLcIXbZ4XnLqlTw9Fs11HGuL2kOfUJ3x4p7jOVv79EGN2E kB/08yAWdYCMcVnmro0k1DOu3vYyCYNgEXoAGgebNMXND2nTyuHG0wYVlDQCIZJt MeVvswfu9lcHg7e11QDv6L8LUSWputb326J1im3k3N4ixvUE7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeh1nXuN9YvSH2pSFiI1crFU6lzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTU2NWExOWMtYTA2ZC0z ZTcwLWIxZjUtMTRhMGI5ZThkNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxZRnMpZbtRYzPsFXcDSfUabH+9NiwPQA2NYsosY6+64nGlpmQ+qTX3 RVPr5dNxWQUmk/YX9UisJjnw4uqC0iXMxve+HNsuyzYdcgoPzR+lpTYzzqL3+YId 0EUPi5IIT7W8MZAeaRiLX4BHzSgXZEqh2fjh+WvLMolFbeG+f+yNnUBluFEzH6CC SZTzpru+yQ5i4fj8/nvfOUJLgC8Mg3UqrgWR8aY/AeoqcMy4r3MamspBKUdekpzb RIIxGUY+bpZ8xeYU0LIrVrf+xVIbsj+a1UipTMMVGTR3z7h9lQzfXSKvOMsWtJmH 7Hd9zs0hCtEGgm+kPtKjA+T/jylJ3w4= -----END CERTIFICATE-----Generated at Fri Oct 10 19:47:39 2025 by rpki-client