$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa File: a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa (raw, json) Hash identifier: TsIazhsjDFsxaxQqpvfmOkj+UI57eZ/9PSq/ycrHM98= Subject key identifier: FC:E8:95:17:04:A1:46:7F:2A:8B:04:6D:EA:13:83:5A:14:FC:FD:55 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201DAA4D919D545BDB96800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.254.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:da:a4:d9:19:d5:45:bd:b9:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=0d5de287-2e64-4c6a-bfb8-bc62e68e3364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fa:b3:8d:81:91:0a:c7:82:14:58:35:87:69: d5:e3:e3:5c:df:11:fc:d6:b0:37:69:ac:38:df:0a: c9:1d:37:16:e4:6e:71:ee:40:bc:ba:6e:82:32:15: d8:89:84:ab:5c:49:c3:bf:23:c6:61:d5:25:dd:2b: 7b:56:ee:e4:d7:3d:8a:c0:3a:94:7a:c7:c9:be:4d: 9a:f3:96:02:c7:cc:70:19:66:be:3e:c8:85:ca:63: 5f:05:63:15:be:00:fb:b2:8b:7f:3e:45:34:70:2e: ff:c4:60:b2:6c:41:c1:54:63:b8:e8:07:95:f5:59: 25:d9:45:8d:95:1f:ae:87:9c:9d:9c:15:43:cb:5e: d8:97:7f:57:95:dc:bf:f6:bb:16:6d:25:de:04:70: 2e:22:27:31:de:e4:fa:8b:98:27:97:c9:96:b8:0d: 1c:58:b9:b0:d0:75:9a:5c:09:f5:bf:ab:5e:4f:02: 6c:e0:a6:52:64:92:79:29:df:7a:16:20:35:d9:db: 96:ad:f4:41:f9:f1:f3:86:7d:6e:5a:f3:2f:70:be: a6:7b:99:63:47:a4:3f:1c:08:92:80:28:95:e1:4a: 50:ef:98:9d:a0:21:02:e4:a2:58:7c:dc:ee:dc:af: 08:45:e4:d4:b0:c4:3d:cc:94:61:75:81:14:90:3d: 46:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E8:95:17:04:A1:46:7F:2A:8B:04:6D:EA:13:83:5A:14:FC:FD:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:d4:50:05:81:c9:e7:a6:77:ca:e7:ad:5d:20:20:bc:0a:db: d1:c1:52:a5:65:b9:50:7f:fd:93:92:d4:09:3b:2e:4f:1f:08: 90:5f:f4:a8:25:03:55:a9:ab:02:5b:7f:88:ab:f9:c3:ef:8f: 85:37:c6:a6:45:ec:f9:9c:91:59:22:a6:fd:b2:c7:2a:76:50: c7:80:d6:a7:0b:3a:1a:e1:01:4e:ae:46:1b:75:dc:90:40:50: 0b:23:25:ad:39:de:61:d1:34:1b:63:90:b0:60:ad:da:2d:3d: f0:62:64:58:53:00:20:8d:cb:23:56:d7:4b:4d:fc:7c:5f:b4: c0:76:0d:4b:6a:75:7a:ae:6b:98:95:e8:0b:20:8b:17:a9:04: 27:02:a2:28:86:bd:0f:ba:00:56:02:09:fd:c6:8e:65:44:b3: d3:f9:c1:ac:40:5b:49:3d:e4:b8:e0:74:02:00:03:df:a7:28: de:c6:c3:b0:9a:49:49:5c:80:ca:bc:1a:9a:ae:7b:48:98:e6: 06:21:14:c5:45:6a:1b:3d:57:03:50:7d:0e:4b:74:b0:40:7c: c6:96:71:ff:65:a2:f1:a5:dc:34:3b:98:e7:fa:ae:00:2c:86: 0a:52:17:1e:be:40:4e:03:e2:3e:7e:68:95:79:01:aa:b8:3c: 92:63:0c:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdqk2RnVRb25aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MGQ1ZGUyODctMmU2NC00YzZhLWJmYjgtYmM2MmU2OGUzMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PqzjYGRCseCFFg1h2nV4+Nc3xH81rA3aaw4 3wrJHTcW5G5x7kC8um6CMhXYiYSrXEnDvyPGYdUl3St7Vu7k1z2KwDqUesfJvk2a 85YCx8xwGWa+PsiFymNfBWMVvgD7sot/PkU0cC7/xGCybEHBVGO46AeV9Vkl2UWN lR+uh5ydnBVDy17Yl39Xldy/9rsWbSXeBHAuIicx3uT6i5gnl8mWuA0cWLmw0HWa XAn1v6teTwJs4KZSZJJ5Kd96FiA12duWrfRB+fHzhn1uWvMvcL6me5ljR6Q/HAiS gCiV4UpQ75idoCEC5KJYfNzu3K8IReTUsMQ9zJRhdYEUkD1GAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzolRcEoUZ/KosEbeoTg1oU/P1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYThiNzBkMjMtNzFiMy0z OTg5LWI2ZjEtN2NhMTMzZWMzOTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbUUAWByeemd8rnrV0gILwK29HBUqVluVB//ZOS1Ak7Lk8fCJBf9Kgl A1WpqwJbf4ir+cPvj4U3xqZF7PmckVkipv2yxyp2UMeA1qcLOhrhAU6uRht13JBA UAsjJa053mHRNBtjkLBgrdotPfBiZFhTACCNyyNW10tN/HxftMB2DUtqdXqua5iV 6AsgixepBCcCoiiGvQ+6AFYCCf3GjmVEs9P5waxAW0k95LjgdAIAA9+nKN7Gw7Ca SUlcgMq8Gpque0iY5gYhFMVFahs9VwNQfQ5LdLBAfMaWcf9lovGl3DQ7mOf6rgAs hgpSFx6+QE4D4j5+aJV5Aaq4PJJjDI8= -----END CERTIFICATE-----Generated at Fri Oct 10 22:19:10 2025 by rpki-client