$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d84c6a65-765d-3a18-a0cc-8f4a1fecda9c.roa File: d84c6a65-765d-3a18-a0cc-8f4a1fecda9c.roa (raw, json) Hash identifier: K/ZJG6IgRczwUjjlHAIsNdVG1J+xLhZJWlkgCN/3OXE= Subject key identifier: 23:3F:10:AB:42:F6:85:4C:E1:6E:54:88:86:43:A5:CC:01:7F:FA:B0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201F2E7B85748DEAC032480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d84c6a65-765d-3a18-a0cc-8f4a1fecda9c.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.182.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f2:e7:b8:57:48:de:ac:03:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=9f4979bd-cce1-4431-94bb-77c5c679c65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:83:19:13:d1:06:f2:0a:9a:38:5a:ec:16:69: a3:8c:e8:1a:b0:0e:c5:ad:e3:b0:d5:f3:a3:41:66: 27:b7:66:8d:28:70:01:d0:27:ca:17:e2:b9:8f:4f: 67:6b:e0:95:0a:7e:9b:47:f1:ae:0b:22:e6:70:b0: 8c:3f:e2:fb:9a:de:22:dc:3d:5a:e0:81:a9:c9:cd: a6:f1:f2:82:2d:30:c1:db:81:05:93:6e:81:87:7d: b3:f1:d7:66:3f:c1:51:8e:9a:bd:1a:3b:ac:fe:73: 21:59:89:2b:e3:24:ef:8e:ee:7e:22:d0:3a:87:22: c6:32:ee:44:c3:93:e5:a4:77:5a:1d:76:e6:41:62: 51:ae:69:4b:ec:67:e5:f2:e2:d0:5c:91:97:11:0c: 2b:90:80:aa:b8:ca:74:7a:0e:02:c7:8d:ce:28:f3: 17:97:29:84:a4:e0:bf:f2:b1:e7:28:11:51:6e:05: 6b:b3:7b:78:96:1e:c3:86:f4:30:88:69:1e:09:0a: ed:5d:af:9e:70:f9:46:ac:a8:28:ce:4c:b5:b7:31: 1b:10:a8:d9:8e:a3:28:76:3a:b5:19:46:98:b3:53: 9f:ab:cc:98:2c:22:96:2e:d5:87:cd:0b:d7:7d:f0: e8:c5:f5:93:36:6e:21:f8:29:12:9d:5b:c2:2a:a4: 7d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3F:10:AB:42:F6:85:4C:E1:6E:54:88:86:43:A5:CC:01:7F:FA:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d84c6a65-765d-3a18-a0cc-8f4a1fecda9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:2f:f4:85:15:cb:b7:70:3b:a2:5e:fc:8f:a9:9f:c9:ae:be: 51:d4:b0:b1:2f:10:f7:b9:2d:cf:01:fc:84:e2:32:f3:8c:d9: fd:8c:0c:21:d4:a9:10:96:31:32:cb:7d:9c:aa:55:6a:12:6b: 2b:bb:af:57:6f:42:8e:54:4f:3b:3e:60:bd:b0:aa:25:b5:83: 70:79:6d:09:89:97:d3:4c:05:20:35:9b:68:65:ca:28:cc:b4: 9b:89:a5:b9:4b:b6:30:0a:52:b5:56:e2:f5:df:58:4e:ae:e8: 74:0f:01:f2:d3:64:b2:a2:dd:e4:db:26:bc:44:4c:86:3e:76: 98:e8:e9:b6:ed:c0:99:f6:13:44:1b:13:f0:35:af:9f:e8:3b: 91:87:c2:ba:be:6e:66:1b:22:f3:f3:b4:08:26:9d:9a:5a:7d: 83:3f:46:e6:86:94:42:1c:2d:34:b7:c0:ea:99:fe:02:c5:fb: d2:fd:51:40:a7:96:01:9f:71:5e:65:75:92:f6:cc:68:aa:ea: c9:73:25:d3:7d:44:29:ba:88:20:d4:c2:96:2f:ef:b4:94:0a: 9f:2d:16:5d:d0:a7:3a:31:4f:7e:0f:30:6c:26:85:57:0a:30: be:9f:18:88:8c:4c:2d:95:32:68:15:3b:4c:a5:6d:81:7e:2d: 1c:a8:21:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfLnuFdI3qwDJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWY0OTc5YmQtY2NlMS00NDMxLTk0YmItNzdjNWM2NzljNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoMZE9EG8gqaOFrsFmmjjOgasA7FreOw1fOj QWYnt2aNKHAB0CfKF+K5j09na+CVCn6bR/GuCyLmcLCMP+L7mt4i3D1a4IGpyc2m 8fKCLTDB24EFk26Bh32z8ddmP8FRjpq9Gjus/nMhWYkr4yTvju5+ItA6hyLGMu5E w5PlpHdaHXbmQWJRrmlL7Gfl8uLQXJGXEQwrkICquMp0eg4Cx43OKPMXlymEpOC/ 8rHnKBFRbgVrs3t4lh7DhvQwiGkeCQrtXa+ecPlGrKgozky1tzEbEKjZjqModjq1 GUaYs1Ofq8yYLCKWLtWHzQvXffDoxfWTNm4h+CkSnVvCKqR9SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM/EKtC9oVM4W5UiIZDpcwBf/qwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDg0YzZhNjUtNzY1ZC0z YTE4LWEwY2MtOGY0YTFmZWNkYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEv9IUVy7dwO6Je/I+pn8muvlHUsLEvEPe5Lc8B/ITiMvOM2f2MDCHU qRCWMTLLfZyqVWoSayu7r1dvQo5UTzs+YL2wqiW1g3B5bQmJl9NMBSA1m2hlyijM tJuJpblLtjAKUrVW4vXfWE6u6HQPAfLTZLKi3eTbJrxETIY+dpjo6bbtwJn2E0Qb E/A1r5/oO5GHwrq+bmYbIvPztAgmnZpafYM/RuaGlEIcLTS3wOqZ/gLF+9L9UUCn lgGfcV5ldZL2zGiq6slzJdN9RCm6iCDUwpYv77SUCp8tFl3QpzoxT34PMGwmhVcK ML6fGIiMTC2VMmgVO0ylbYF+LRyoIQ0= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:11 2025 by rpki-client