$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/abc8a9e0-af50-3b34-9a51-53dc14bf06e6.roa File: abc8a9e0-af50-3b34-9a51-53dc14bf06e6.roa (raw, json) Hash identifier: fH7vx4dah07rFqOwFvLjcfNRMjCLGsFXn5JP7teOlz4= Subject key identifier: B7:4B:A6:32:59:02:DE:32:B7:4E:1D:73:19:F5:05:A5:60:4C:BC:88 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202177578D055DABF73E700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/abc8a9e0-af50-3b34-9a51-53dc14bf06e6.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.182.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:17:75:78:d0:55:da:bf:73:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=8a8045fc-4ca4-408e-90a6-aa95f9a1ac88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:79:0d:1f:ff:a7:86:11:a0:12:e5:d5:be:b4: 9a:ae:cf:22:ce:92:fa:b1:5f:c3:45:a2:89:05:b0: c5:df:35:d7:f2:de:55:e9:40:a5:02:43:c5:e4:c2: 5a:23:6b:69:ea:1e:7e:f4:a4:f7:e6:69:ea:b3:11: 60:a8:68:1b:ca:ac:eb:cf:d8:f9:83:79:86:d4:5b: 51:eb:b4:62:7c:8f:76:e1:b1:e3:ac:f2:a8:bd:cd: 08:17:4a:53:08:f8:7e:49:43:d2:38:8f:34:6f:46: 87:8f:60:7d:12:11:60:ac:24:00:c3:29:86:a4:c6: 9b:c7:7f:d3:59:e7:95:92:fc:fd:83:f9:a0:f9:82: 6a:da:3e:b4:dc:09:53:96:4c:3d:ff:10:2d:00:08: 34:5a:3b:4c:bb:08:64:ae:75:de:b5:3c:88:5e:28: e2:b0:2a:4d:ce:37:5d:25:d5:6f:14:33:aa:c7:5f: f7:96:fd:34:c4:ae:29:3f:b9:63:63:9c:86:f9:e7: 72:21:00:ac:94:fc:fc:f1:2b:a5:e2:a7:bd:11:dc: aa:b3:0f:93:f4:90:8a:b3:4c:bb:5d:e3:c8:9a:c0: c1:92:9d:29:ec:9e:a9:80:88:48:e1:b8:d0:df:0d: 04:a4:b3:c4:52:6a:81:b8:be:11:a4:77:43:b6:18: f2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4B:A6:32:59:02:DE:32:B7:4E:1D:73:19:F5:05:A5:60:4C:BC:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/abc8a9e0-af50-3b34-9a51-53dc14bf06e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c2:17:c1:98:cc:98:f3:41:1d:e5:8e:24:64:58:91:f2:8b: 99:61:d1:01:d3:14:65:09:9f:2b:ec:05:88:1e:b5:6f:c0:ba: 3e:71:fa:81:32:5b:ad:7e:fc:24:c8:e2:7e:a3:10:a5:42:47: a5:8c:f2:5e:85:15:ee:43:1e:d9:63:b1:e7:eb:fb:2d:d4:5b: 88:4d:77:0d:e6:4b:6f:e1:15:09:f8:d1:2c:bf:6e:d3:6a:02: 49:d2:f7:48:20:40:1b:70:3f:a5:54:46:cf:7f:7b:81:d3:1a: 92:c4:b7:72:8d:a1:e8:8d:0d:87:b7:0b:f1:31:39:bf:7f:85: c3:54:4c:97:3d:1a:d9:2b:70:73:8b:71:b8:71:07:2c:a1:9b: 2f:eb:f1:83:5c:78:f2:54:0c:bd:60:d6:83:4d:f1:44:85:a4: cc:23:af:82:33:ad:82:ae:bd:67:68:9a:a9:49:64:a2:c3:84: 93:89:01:56:17:39:dc:02:9a:17:35:ac:c3:ce:50:7e:d4:7e: 98:58:e6:85:3d:65:8b:8c:b4:1a:66:dc:e6:22:76:22:57:8f: dc:7a:0f:d5:9b:94:33:54:8a:05:13:c3:f6:af:e9:e6:88:ae: cd:3e:21:f8:4d:38:d8:a9:b1:61:f3:94:70:f2:92:4e:fb:1e: 20:a3:5c:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhd1eNBV2r9z5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OGE4MDQ1ZmMtNGNhNC00MDhlLTkwYTYtYWE5NWY5YTFhYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33kNH/+nhhGgEuXVvrSars8izpL6sV/DRaKJ BbDF3zXX8t5V6UClAkPF5MJaI2tp6h5+9KT35mnqsxFgqGgbyqzrz9j5g3mG1FtR 67RifI924bHjrPKovc0IF0pTCPh+SUPSOI80b0aHj2B9EhFgrCQAwymGpMabx3/T WeeVkvz9g/mg+YJq2j603AlTlkw9/xAtAAg0WjtMuwhkrnXetTyIXijisCpNzjdd JdVvFDOqx1/3lv00xK4pP7ljY5yG+edyIQCslPz88Sul4qe9Edyqsw+T9JCKs0y7 XePImsDBkp0p7J6pgIhI4bjQ3w0EpLPEUmqBuL4RpHdDthjy8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdLpjJZAt4yt04dcxn1BaVgTLyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWJjOGE5ZTAtYWY1MC0z YjM0LTlhNTEtNTNkYzE0YmYwNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTCF8GYzJjzQR3ljiRkWJHyi5lh0QHTFGUJnyvsBYgetW/Auj5x+oEy W61+/CTI4n6jEKVCR6WM8l6FFe5DHtljsefr+y3UW4hNdw3mS2/hFQn40Sy/btNq AknS90ggQBtwP6VURs9/e4HTGpLEt3KNoeiNDYe3C/ExOb9/hcNUTJc9GtkrcHOL cbhxByyhmy/r8YNcePJUDL1g1oNN8USFpMwjr4IzrYKuvWdomqlJZKLDhJOJAVYX OdwCmhc1rMPOUH7UfphY5oU9ZYuMtBpm3OYidiJXj9x6D9WblDNUigUTw/av6eaI rs0+IfhNONipsWHzlHDykk77HiCjXII= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:36 2025 by rpki-client