$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa File: de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa (raw, json) Hash identifier: M5Ueec0mozUFJjHKPboC2UNN5hKpbxHue1MFbtiMSr4= Subject key identifier: 83:C9:D6:0E:F7:B5:8A:37:BE:2F:C2:E5:B9:45:6D:92:5E:BE:80:CE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201CD6AE021AB1C93ED66A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.249.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:cd:6a:e0:21:ab:1c:93:ed:66:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=90e08a52-6edb-4faa-82d1-6d3200071f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:93:26:44:10:15:23:1c:0b:3e:e4:62:3a: 58:35:e0:3f:2d:26:a6:74:0a:e8:4a:8a:31:d8:f8: 06:6e:b4:e3:ae:71:c2:44:ba:f7:3f:f3:60:45:e5: 75:e7:1c:cb:84:72:40:a2:ff:31:c7:69:7b:94:3e: 8d:97:b6:04:34:f2:1a:14:01:44:15:72:b5:c7:84: 66:19:72:a1:93:ae:ed:ed:4b:56:05:b5:ba:93:a4: 1a:17:00:f4:e0:aa:37:76:95:b1:18:9d:30:3c:cd: bf:67:55:c5:be:fc:2d:91:5e:72:bb:19:90:20:d6: 79:1c:89:11:e4:e3:e2:10:67:6d:a2:c9:68:6b:6d: ee:bb:1b:65:5a:90:12:05:7f:e7:31:77:bd:32:af: c6:eb:20:cf:11:0a:7f:5b:3b:ae:46:97:44:ff:a6: 37:1a:e8:cc:d9:dd:e0:8f:6e:b0:e8:cc:7e:d3:24: 50:c2:18:cf:29:6b:c6:ed:88:a2:8d:f3:df:8e:ad: c2:a8:e3:5b:b8:bc:d1:8b:3b:bf:12:11:f2:35:0d: 25:93:65:a4:9f:49:67:c2:19:59:00:96:eb:c1:ba: 31:69:ca:71:ef:e8:dd:7c:83:8c:c1:4c:77:07:cf: 7a:14:d3:09:77:86:1d:04:82:88:6f:e8:08:0a:fe: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C9:D6:0E:F7:B5:8A:37:BE:2F:C2:E5:B9:45:6D:92:5E:BE:80:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:7e:99:34:68:87:6b:2f:36:61:8b:76:75:4b:f1:d8:29:be: e9:a8:1e:fd:14:f5:4c:d1:cf:d6:37:9a:cb:c2:ed:f8:52:3a: a9:9e:01:2c:de:94:86:76:f3:cd:c3:c7:f2:4a:11:78:6c:95: 29:11:21:de:4c:e0:cb:d0:69:96:c6:9c:01:50:de:5b:f3:a4: 4f:7b:8c:06:7c:cd:68:d3:3e:f3:eb:c2:ef:2f:cb:03:35:05: dc:23:09:07:af:75:a1:e1:01:14:d9:f6:38:d2:09:74:c9:01: 48:e8:24:f5:42:f7:13:19:fd:83:03:8c:c9:fc:72:7b:0e:70: e7:c4:eb:eb:0a:20:36:a3:57:4d:00:97:c0:c8:1a:87:9d:19: 5f:86:40:d3:02:21:74:3a:7f:5e:35:fc:ac:c0:65:a8:b4:f4: 34:03:95:ac:1e:60:c1:4f:12:0c:97:63:5a:5e:7f:9a:59:b9: aa:d3:e9:f3:c9:a8:44:27:ba:ca:33:ff:ca:91:01:33:6a:b5: 0d:1c:f2:b8:e7:08:3f:3b:50:7a:55:40:ad:d8:ca:6e:aa:50: b9:8b:78:52:49:d8:d4:02:f5:76:74:96:25:6c:19:cf:91:62: 02:84:fa:d2:26:57:e0:81:18:0b:8b:1e:b9:8d:63:06:76:5c: d1:16:ef:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAc1q4CGrHJPtZqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTBlMDhhNTItNmVkYi00ZmFhLTgyZDEtNmQzMjAwMDcxZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygmTJkQQFSMcCz7kYjpYNeA/LSamdAroSoox 2PgGbrTjrnHCRLr3P/NgReV15xzLhHJAov8xx2l7lD6Nl7YENPIaFAFEFXK1x4Rm GXKhk67t7UtWBbW6k6QaFwD04Ko3dpWxGJ0wPM2/Z1XFvvwtkV5yuxmQINZ5HIkR 5OPiEGdtosloa23uuxtlWpASBX/nMXe9Mq/G6yDPEQp/WzuuRpdE/6Y3GujM2d3g j26w6Mx+0yRQwhjPKWvG7YiijfPfjq3CqONbuLzRizu/EhHyNQ0lk2Wkn0lnwhlZ AJbrwboxacpx7+jdfIOMwUx3B896FNMJd4YdBIKIb+gICv7YJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPJ1g73tYo3vi/C5blFbZJevoDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGU3Yzg3MzEtOWJhOC0z YTlhLWJjMmUtMWNmOWI5ZTAyMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ+mTRoh2svNmGLdnVL8dgpvumoHv0U9UzRz9Y3msvC7fhSOqmeASze lIZ2883Dx/JKEXhslSkRId5M4MvQaZbGnAFQ3lvzpE97jAZ8zWjTPvPrwu8vywM1 BdwjCQevdaHhARTZ9jjSCXTJAUjoJPVC9xMZ/YMDjMn8cnsOcOfE6+sKIDajV00A l8DIGoedGV+GQNMCIXQ6f141/KzAZai09DQDlaweYMFPEgyXY1pef5pZuarT6fPJ qEQnusoz/8qRATNqtQ0c8rjnCD87UHpVQK3Yym6qULmLeFJJ2NQC9XZ0liVsGc+R YgKE+tImV+CBGAuLHrmNYwZ2XNEW758= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:20 2025 by rpki-client