$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa File: cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa (raw, json) Hash identifier: gkyVvp/ilMsXs20S6CHKkAjvA3pKptfyv/GTFFxFaPk= Subject key identifier: 3D:E7:F6:AC:C0:FF:94:26:23:D4:0A:7A:01:C0:A2:07:83:06:7A:A0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62022D6377483A3FD6DB8680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.182.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:2d:63:77:48:3a:3f:d6:db:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=9b2ce578-d759-4a44-9d15-6c63c38fb872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d7:7a:e1:46:5c:73:47:4e:2f:b0:e6:aa:36: 3d:d7:59:9f:83:42:fe:d8:eb:c1:53:ac:75:2b:67: b4:37:20:35:51:06:04:e4:33:04:1e:95:05:79:36: de:83:8d:32:5d:bb:a1:8d:02:8f:2b:de:36:f9:4d: a1:56:2e:83:5b:73:f3:40:6c:f7:87:90:85:6d:d5: e1:07:d2:6c:9c:ae:62:ab:f1:47:05:14:1a:70:aa: 3a:71:b1:01:c0:b6:33:03:27:60:95:23:df:9c:b7: bd:29:f1:e2:40:22:79:14:84:e3:1a:89:fb:2f:b6: a4:94:46:97:91:93:14:89:2a:d7:36:7d:b4:41:50: 5c:2f:1e:28:76:2e:3f:f3:1a:af:bc:23:43:c1:3d: d0:20:d7:4e:11:0f:be:17:16:f2:74:ce:9f:ac:5d: e7:f6:50:58:6f:67:51:19:75:b4:7a:74:43:0e:10: ee:2e:f0:e0:83:52:1d:a7:c2:90:42:e9:3d:45:81: 47:b5:51:f7:47:e1:4b:b0:7c:ff:10:50:64:47:ea: 6e:ae:4d:ab:1f:da:41:a9:16:92:2f:fc:55:10:c3: 78:7b:63:09:53:0a:61:bf:89:d6:73:52:c6:a8:c0: 8d:39:71:7e:79:22:60:74:a2:93:75:11:e7:a6:05: 06:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E7:F6:AC:C0:FF:94:26:23:D4:0A:7A:01:C0:A2:07:83:06:7A:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:98:93:23:52:4a:07:4c:0d:a0:f8:87:43:30:12:35:01:13: 87:04:67:5e:5b:fc:a4:c0:2b:31:27:59:ad:f2:79:ab:c6:b5: 49:03:db:65:6a:6e:76:53:12:94:e2:df:3a:e7:9b:13:ce:d8: 8a:35:d9:a2:f8:03:39:2f:20:b7:7c:6d:0f:14:50:86:6a:92: 99:5e:6e:5c:89:1d:44:c4:10:dc:e8:c7:a1:87:82:5c:cc:c4: 98:94:39:ee:2e:ea:59:41:46:c7:ae:c8:bc:77:f0:24:55:f7: f7:1d:64:1d:99:d3:2b:bf:57:c9:54:f0:93:71:69:a3:6c:f7: 79:fd:9d:9b:4f:e9:62:69:a7:7a:de:dd:c8:a0:d2:83:fa:26: a7:dd:ed:b0:39:cb:c3:ba:b2:95:84:4d:00:76:86:0c:34:55: 4c:f6:5a:8d:4a:fe:de:41:49:39:3b:57:1d:78:4c:de:09:e6: ec:4d:64:f6:a5:37:86:77:bf:d7:a1:84:46:dc:76:25:72:c6: 7e:3e:8d:1a:16:cf:2a:f6:3b:f5:85:6d:26:8c:a8:f6:96:fb: 76:84:bb:ad:5e:ec:ca:a7:40:d6:30:2c:93:31:3c:42:fd:dd: c5:ca:34:26:b2:5d:b1:60:95:24:2e:e8:dc:ac:2f:d2:86:43: 6d:fa:ce:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAi1jd0g6P9bbhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWIyY2U1NzgtZDc1OS00YTQ0LTlkMTUtNmM2M2MzOGZiODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdd64UZcc0dOL7DmqjY911mfg0L+2OvBU6x1 K2e0NyA1UQYE5DMEHpUFeTbeg40yXbuhjQKPK942+U2hVi6DW3PzQGz3h5CFbdXh B9JsnK5iq/FHBRQacKo6cbEBwLYzAydglSPfnLe9KfHiQCJ5FITjGon7L7aklEaX kZMUiSrXNn20QVBcLx4odi4/8xqvvCNDwT3QINdOEQ++FxbydM6frF3n9lBYb2dR GXW0enRDDhDuLvDgg1Idp8KQQuk9RYFHtVH3R+FLsHz/EFBkR+purk2rH9pBqRaS L/xVEMN4e2MJUwphv4nWc1LGqMCNOXF+eSJgdKKTdRHnpgUG7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3n9qzA/5QmI9QKegHAogeDBnqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2Q4YzA5MDUtYWM4MC0z ODA2LWE5OGUtZTA3YmQ1ZmM1YTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyYkyNSSgdMDaD4h0MwEjUBE4cEZ15b/KTAKzEnWa3yeavGtUkD22Vq bnZTEpTi3zrnmxPO2Io12aL4AzkvILd8bQ8UUIZqkpleblyJHUTEENzox6GHglzM xJiUOe4u6llBRseuyLx38CRV9/cdZB2Z0yu/V8lU8JNxaaNs93n9nZtP6WJpp3re 3cig0oP6Jqfd7bA5y8O6spWETQB2hgw0VUz2Wo1K/t5BSTk7Vx14TN4J5uxNZPal N4Z3v9ehhEbcdiVyxn4+jRoWzyr2O/WFbSaMqPaW+3aEu61e7MqnQNYwLJMxPEL9 3cXKNCayXbFglSQu6NysL9KGQ236zpY= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:04 2025 by rpki-client