$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3126372-297f-334d-8c96-7abcf2d19c7a.roa File: d3126372-297f-334d-8c96-7abcf2d19c7a.roa (raw, json) Hash identifier: OTxq2CwotJo6sKNfq2AUlqI9kVWpP+bWH4beIv4EeVk= Subject key identifier: 49:92:22:13:A8:6A:1D:FB:25:A0:1A:F5:23:F7:19:4C:FB:42:37:03 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201E956813E3B8F4D361F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3126372-297f-334d-8c96-7abcf2d19c7a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.254.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e9:56:81:3e:3b:8f:4d:36:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=49679fbf-9900-4bd7-9b14-24aaa73f9a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:e4:79:d3:2f:3c:d4:f3:22:00:52:07:34: e3:40:8a:8b:6c:1f:46:b8:60:64:81:ae:a7:4a:55: de:21:98:b0:b0:d8:f2:d1:ba:cd:50:69:86:ce:da: a9:c1:3b:2d:46:27:1b:4a:62:48:ea:b3:1d:68:9d: 32:68:bd:fe:9e:d7:6f:f3:c4:f4:ff:69:3c:dd:11: 75:28:24:d6:97:f9:a3:c6:36:63:98:e0:e0:50:ec: 6f:f6:c1:1f:60:97:bb:cf:1f:c7:03:f8:e8:99:5b: 14:92:8d:a2:00:e1:dd:17:fa:98:f7:37:19:9c:71: 9a:89:60:d1:e1:13:e2:0f:4d:e3:c8:4a:41:c5:40: 23:ae:3d:e0:59:07:cc:a8:98:05:ce:de:08:e4:60: e4:44:b6:a4:e4:5d:e1:03:77:37:70:c0:7f:c2:bd: 4b:49:92:13:f5:ae:f3:c2:0f:e5:43:d3:20:29:39: dc:26:0a:de:75:97:47:8c:fa:1a:22:de:75:1b:c8: cc:04:ac:05:02:3c:fd:e0:49:c4:4b:5f:88:10:34: a2:11:39:71:2f:22:18:e8:7b:c6:8c:e0:03:f5:00: 93:4d:a0:2e:7b:77:5d:98:3d:55:3e:05:7e:2a:3e: ba:f9:19:96:bb:58:0e:e5:23:20:06:26:5a:8d:5c: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:22:13:A8:6A:1D:FB:25:A0:1A:F5:23:F7:19:4C:FB:42:37:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3126372-297f-334d-8c96-7abcf2d19c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3e:23:11:c8:cb:5e:06:54:ab:cb:72:97:6f:30:04:82:53: c1:90:78:4c:f5:bf:10:88:61:b8:10:50:62:5b:28:ad:a7:48: 8a:47:6a:85:c2:30:6b:42:b5:d8:cd:d4:00:f0:54:eb:70:85: 18:8d:48:3b:a4:d8:d3:c7:70:fc:2a:dc:13:41:da:55:1b:b7: f0:cc:9a:74:25:b9:57:c8:d3:a7:35:4f:18:72:19:02:41:59: 58:68:d3:aa:5f:f3:0d:4b:e6:fc:d4:96:1b:7f:3e:cf:ec:f2: 5e:a8:bd:7c:e6:ff:b1:48:61:d3:a9:a7:55:02:f9:6a:f5:61: c6:70:3a:fd:be:79:08:05:65:71:9a:62:85:08:74:13:d7:79: dd:06:f1:17:05:79:f0:6b:14:f2:11:ca:8d:74:4f:87:30:c4: 9a:f8:03:66:e6:51:83:ae:2a:58:85:a0:34:38:9b:74:6b:8d: 59:2c:ba:bf:16:5e:01:2e:7d:39:ee:c6:ed:de:81:9a:ee:bf: f7:c0:0d:9a:f2:07:6e:33:d3:df:a8:67:70:36:0d:da:75:ac: 98:a0:d3:c9:06:f0:6e:76:c8:89:53:8e:d6:18:ef:af:73:74: 65:82:0a:38:b1:ff:ac:ea:54:bb:76:27:9c:da:f2:da:05:cb: 2c:1f:20:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAelWgT47j002HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDk2NzlmYmYtOTkwMC00YmQ3LTliMTQtMjRhYWE3M2Y5YTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3nkedMvPNTzIgBSBzTjQIqLbB9GuGBkga6n SlXeIZiwsNjy0brNUGmGztqpwTstRicbSmJI6rMdaJ0yaL3+ntdv88T0/2k83RF1 KCTWl/mjxjZjmODgUOxv9sEfYJe7zx/HA/jomVsUko2iAOHdF/qY9zcZnHGaiWDR 4RPiD03jyEpBxUAjrj3gWQfMqJgFzt4I5GDkRLak5F3hA3c3cMB/wr1LSZIT9a7z wg/lQ9MgKTncJgredZdHjPoaIt51G8jMBKwFAjz94EnES1+IEDSiETlxLyIY6HvG jOAD9QCTTaAue3ddmD1VPgV+Kj66+RmWu1gO5SMgBiZajVxwfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmSIhOoah37JaAa9SP3GUz7QjcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDMxMjYzNzItMjk3Zi0z MzRkLThjOTYtN2FiY2YyZDE5YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc+IxHIy14GVKvLcpdvMASCU8GQeEz1vxCIYbgQUGJbKK2nSIpHaoXC MGtCtdjN1ADwVOtwhRiNSDuk2NPHcPwq3BNB2lUbt/DMmnQluVfI06c1TxhyGQJB WVho06pf8w1L5vzUlht/Ps/s8l6ovXzm/7FIYdOpp1UC+Wr1YcZwOv2+eQgFZXGa YoUIdBPXed0G8RcFefBrFPIRyo10T4cwxJr4A2bmUYOuKliFoDQ4m3RrjVksur8W XgEufTnuxu3egZruv/fADZryB24z09+oZ3A2Ddp1rJig08kG8G52yIlTjtYY769z dGWCCjix/6zqVLt2J5za8toFyywfIMA= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:19 2025 by rpki-client