$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa File: cdd97578-6813-332c-a0bf-22a87019cc3f.roa (raw, json) Hash identifier: ysuJX0A+oJEP/shMijO82vHyeq5BaICQsTPOXMrFfs8= Subject key identifier: 8C:76:87:EA:10:ED:CB:CA:E5:09:09:0C:49:29:22:7E:D7:51:E4:64 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201DE1DEA81D366335CEC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.254.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:de:1d:ea:81:d3:66:33:5c:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=fe3151fd-458f-460d-bb39-7c64f5acbee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:dc:df:81:4b:ff:77:f1:5f:cf:17:7b:a9:9c: 26:6b:73:93:f6:87:81:78:66:e7:a2:27:6f:e7:77: 62:cc:24:46:93:c7:4f:b8:77:12:03:af:09:fc:5d: 19:a6:c1:d3:be:98:89:2e:4a:1d:1d:67:fa:5a:9e: 7a:0a:e1:36:04:03:27:c6:bd:62:80:a7:f0:4e:32: 2e:a2:0e:a7:75:dc:38:74:9d:8f:c8:3a:00:be:73: 64:af:7b:15:aa:82:4c:a8:5c:07:aa:5d:5a:67:49: 1e:b5:f3:55:06:91:c7:fc:a3:ca:02:f1:d5:fb:5a: 21:f3:07:ad:4f:43:d5:5a:a1:32:18:42:6d:1e:d7: d6:4a:04:d2:43:52:f7:3e:8e:50:b3:a4:29:87:7c: cc:e2:2c:eb:f3:94:b7:05:1a:3c:cc:27:c8:3d:49: 7e:03:ab:22:69:94:a8:cf:ae:56:73:2b:78:c0:65: fe:65:ae:a2:90:76:d5:fd:f2:de:1e:37:7b:54:8d: 62:39:2c:17:f4:f2:48:7d:6d:b2:f8:ac:64:31:3f: 0d:b3:0c:d2:80:fd:ef:99:e0:af:c5:1e:3c:ae:15: 6a:12:3f:bc:7b:41:2d:e3:b1:5a:98:da:48:c5:e3: e7:9c:de:60:33:92:77:a5:06:71:ff:64:99:ed:be: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:76:87:EA:10:ED:CB:CA:E5:09:09:0C:49:29:22:7E:D7:51:E4:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:29:2a:f8:4b:02:4c:9d:c7:71:c4:67:ea:1c:e0:e2:f6:e9: 59:9b:29:9d:55:fe:61:21:a1:90:cf:90:2a:68:b2:2e:1f:02: 06:f3:e7:a7:5a:a7:f7:70:7a:3a:d5:14:10:c0:fb:b6:82:a1: 2a:f6:97:3f:2e:f4:90:b7:7d:87:60:ff:2f:13:36:66:96:fd: d7:b9:1c:f1:62:e1:8b:e4:e2:41:dd:cc:3e:84:39:c8:89:4e: 16:98:df:29:ee:a7:ae:dc:00:1e:c9:fb:d8:6e:32:6f:75:13: 0d:79:6d:7b:58:99:2b:3a:b7:52:bc:5e:63:7e:28:e4:2e:6d: 99:6d:a9:e9:05:f4:c0:9f:d0:85:aa:f6:b8:2c:c8:76:01:3a: 88:cc:f1:db:e0:32:fe:37:a1:84:66:87:03:b1:6c:b0:e3:d9: 09:6e:05:4f:b9:a8:49:72:43:a7:e1:ab:7e:43:06:ca:25:b3: 45:03:fd:ca:de:49:09:3f:18:24:b5:b8:0c:9e:fa:91:30:83: 73:2e:8d:6e:2b:85:91:06:2c:43:1e:35:78:d3:35:11:99:13: b1:9d:d2:cf:10:1a:0b:2b:98:d0:d1:7f:2c:c6:80:7e:bd:0e: 64:c9:fc:96:22:03:fe:ab:35:34:d0:41:03:51:da:29:c2:68: 93:2d:be:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAd4d6oHTZjNc7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZmUzMTUxZmQtNDU4Zi00NjBkLWJiMzktN2M2NGY1YWNiZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdzfgUv/d/Ffzxd7qZwma3OT9oeBeGbnoidv 53dizCRGk8dPuHcSA68J/F0ZpsHTvpiJLkodHWf6Wp56CuE2BAMnxr1igKfwTjIu og6nddw4dJ2PyDoAvnNkr3sVqoJMqFwHql1aZ0ketfNVBpHH/KPKAvHV+1oh8wet T0PVWqEyGEJtHtfWSgTSQ1L3Po5Qs6Qph3zM4izr85S3BRo8zCfIPUl+A6siaZSo z65Wcyt4wGX+Za6ikHbV/fLeHjd7VI1iOSwX9PJIfW2y+KxkMT8NswzSgP3vmeCv xR48rhVqEj+8e0Et47FamNpIxePnnN5gM5J3pQZx/2SZ7b6GoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx2h+oQ7cvK5QkJDEkpIn7XUeRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2RkOTc1NzgtNjgxMy0z MzJjLWEwYmYtMjJhODcwMTljYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgpKvhLAkydx3HEZ+oc4OL26VmbKZ1V/mEhoZDPkCposi4fAgbz56da p/dwejrVFBDA+7aCoSr2lz8u9JC3fYdg/y8TNmaW/de5HPFi4Yvk4kHdzD6EOciJ ThaY3ynup67cAB7J+9huMm91Ew15bXtYmSs6t1K8XmN+KOQubZltqekF9MCf0IWq 9rgsyHYBOojM8dvgMv43oYRmhwOxbLDj2QluBU+5qElyQ6fhq35DBsols0UD/cre SQk/GCS1uAye+pEwg3MujW4rhZEGLEMeNXjTNRGZE7Gd0s8QGgsrmNDRfyzGgH69 DmTJ/JYiA/6rNTTQQQNR2inCaJMtviI= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:30 2025 by rpki-client