$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4d63adb-87a9-3e83-ae6a-239a95c378dc.roa File: e4d63adb-87a9-3e83-ae6a-239a95c378dc.roa (raw, json) Hash identifier: XfQkKDp5IYfgueZpES9giMTP+qkGQkc3mHLZ31JpJsg= Subject key identifier: 16:C7:21:C0:67:A5:4E:5E:62:54:21:2A:45:D9:99:E4:52:96:35:3E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B62022FBB94A9976170DA2200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4d63adb-87a9-3e83-ae6a-239a95c378dc.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.254.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:2f:bb:94:a9:97:61:70:da:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=9b3e42c7-9f9d-4d42-a0bb-b817828ce449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:63:7e:ed:c5:f7:fd:48:2d:4a:dc:8a:b1: ef:1a:31:eb:1f:f3:a6:41:24:7f:a0:b2:0d:51:26: 14:84:62:8a:9d:93:f5:06:0d:6f:1a:10:c8:c7:25: b1:04:97:7a:cb:37:1d:3c:9f:33:e6:9f:0a:c1:b2: f0:74:b0:e5:e6:08:b6:8c:0e:76:1a:04:66:a0:ef: 59:ae:b2:30:d2:69:14:89:81:9d:eb:6d:83:95:8e: 33:3b:f8:3d:94:b8:46:5e:bf:e2:21:a9:f9:c6:70: 47:7c:79:15:22:23:92:91:d6:af:e0:01:e1:3b:26: 4f:75:1a:38:90:52:42:41:70:61:52:3e:f0:02:7f: d0:b6:7f:f4:4f:c4:e1:11:0d:13:35:00:95:13:4e: cb:92:c1:bb:37:89:f8:83:59:5b:4e:37:e8:07:53: 91:09:df:84:a9:91:39:d6:74:96:8d:59:c4:be:78: 6e:96:20:ab:fb:10:97:a0:00:83:51:6e:0b:ea:c5: 7b:9e:eb:62:f4:a8:f2:d1:d1:ea:f3:62:32:2b:a5: 2a:bf:1d:9f:70:e7:ab:09:a4:f7:dc:56:bc:71:79: 9e:37:76:c5:f6:1f:1b:bb:d2:75:63:33:fd:15:c7: 30:5b:1b:b4:03:76:a3:ba:9a:f6:31:e9:16:b3:d7: 03:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C7:21:C0:67:A5:4E:5E:62:54:21:2A:45:D9:99:E4:52:96:35:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4d63adb-87a9-3e83-ae6a-239a95c378dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:19:ea:c2:a3:9d:62:6e:b2:4d:07:85:d4:5d:c9:5e:b4:b5: 59:9b:6d:3d:4c:bd:0d:a2:86:99:61:a6:21:ea:74:2b:6d:17: ea:f0:34:80:c5:cc:c5:3c:7c:4a:db:83:af:23:b4:eb:a8:1d: 8e:09:e0:59:4d:22:4b:41:5f:6f:52:97:cf:15:46:21:63:6b: d9:80:d8:90:68:2b:13:4a:91:32:1c:97:a6:c6:b3:21:b8:64: ea:66:8b:5d:83:31:9f:ae:91:3d:da:56:4f:4a:a2:62:6e:70: 6e:d7:a0:7a:f6:47:0d:f2:82:71:f0:9a:c4:59:92:86:e3:f4: 2c:08:51:95:49:ec:17:b5:53:ec:83:27:97:e8:05:c2:16:4d: b4:00:db:d9:48:0e:fa:51:29:f3:ba:c9:c1:0a:00:62:3e:17: d4:03:5a:0e:05:de:45:cb:6b:33:b6:ca:d7:65:1b:21:98:f1: 00:0c:45:e1:d0:0a:14:25:24:61:f4:95:7b:e3:eb:35:3e:b5: 89:44:7a:86:c3:e5:76:e0:f3:2f:63:b0:1e:2b:f0:f9:a5:1c: 5d:09:f4:de:e8:13:5b:fd:e4:46:fe:7b:6b:eb:a2:1e:1a:da: a5:a2:96:e5:a7:01:e0:6a:48:aa:06:4f:ec:8c:16:69:79:71: 0c:89:70:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAi+7lKmXYXDaIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWIzZTQyYzctOWY5ZC00ZDQyLWEwYmItYjgxNzgyOGNlNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY5jfu3F9/1ILUrcirHvGjHrH/OmQSR/oLIN USYUhGKKnZP1Bg1vGhDIxyWxBJd6yzcdPJ8z5p8KwbLwdLDl5gi2jA52GgRmoO9Z rrIw0mkUiYGd622DlY4zO/g9lLhGXr/iIan5xnBHfHkVIiOSkdav4AHhOyZPdRo4 kFJCQXBhUj7wAn/Qtn/0T8ThEQ0TNQCVE07LksG7N4n4g1lbTjfoB1ORCd+EqZE5 1nSWjVnEvnhuliCr+xCXoACDUW4L6sV7nuti9Kjy0dHq82IyK6Uqvx2fcOerCaT3 3Fa8cXmeN3bF9h8bu9J1YzP9FccwWxu0A3ajupr2MekWs9cDcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbHIcBnpU5eYlQhKkXZmeRSljU+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTRkNjNhZGItODdhOS0z ZTgzLWFlNmEtMjM5YTk1YzM3OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQZ6sKjnWJusk0HhdRdyV60tVmbbT1MvQ2ihplhpiHqdCttF+rwNIDF zMU8fErbg68jtOuoHY4J4FlNIktBX29Sl88VRiFja9mA2JBoKxNKkTIcl6bGsyG4 ZOpmi12DMZ+ukT3aVk9KomJucG7XoHr2Rw3ygnHwmsRZkobj9CwIUZVJ7Be1U+yD J5foBcIWTbQA29lIDvpRKfO6ycEKAGI+F9QDWg4F3kXLazO2ytdlGyGY8QAMReHQ ChQlJGH0lXvj6zU+tYlEeobD5Xbg8y9jsB4r8PmlHF0J9N7oE1v95Eb+e2vroh4a 2qWiluWnAeBqSKoGT+yMFml5cQyJcDM= -----END CERTIFICATE-----Generated at Fri Oct 10 22:17:11 2025 by rpki-client