$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e71a788a-468e-3e8a-9c79-12c81f2fa063.roa File: e71a788a-468e-3e8a-9c79-12c81f2fa063.roa (raw, json) Hash identifier: 87OMUz7nysxeCglRajPfNkcCQbfi6iA3GgShuKctuXo= Subject key identifier: A4:13:58:D9:ED:52:67:6E:5F:39:6B:05:5C:91:EA:C5:B2:EE:C6:0F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D0F20B6FEECEDDCC6680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e71a788a-468e-3e8a-9c79-12c81f2fa063.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.115.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d0:f2:0b:6f:ee:ce:dd:cc:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4626f87a-3fb3-403f-888a-a44b15fe5646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:39:6a:0e:50:52:87:58:59:31:15:a9:9b:f4: b9:3a:50:ef:8d:83:dd:4c:e8:53:63:3f:0d:7a:a3: 4b:17:85:68:c4:37:54:63:fd:6c:1a:47:96:20:a8: 20:68:55:7a:5d:e7:e2:b9:a7:22:02:90:d4:6e:f3: be:d6:19:36:17:84:20:6e:85:a3:bc:24:9e:ea:37: ba:17:8e:40:d0:4f:f2:d9:de:7e:25:77:66:69:18: 4d:a5:7e:45:eb:dc:98:96:18:55:9d:f1:11:a7:04: ea:90:45:81:2b:0e:59:a1:a4:85:2b:ed:22:c9:06: d2:67:47:a5:6f:72:8b:1c:2b:90:2a:60:5e:ae:8c: c7:75:e7:b3:f9:7a:5d:a7:c8:18:2e:1e:6d:31:53: d2:e8:26:bd:94:2a:cc:5e:9d:dc:44:d7:da:01:b9: c1:7c:87:c1:b6:9d:02:1b:5a:bc:a5:62:e9:50:6c: 12:98:65:57:f8:a6:b7:dc:4c:e8:b8:c0:52:67:b7: 66:ee:8e:b5:e4:60:42:7c:14:d0:d5:f0:d0:9b:77: 4d:88:60:e1:f9:6b:b7:99:57:85:70:d3:d0:44:fd: 03:8a:6a:35:47:e9:29:f0:3b:71:ff:1c:e4:24:0c: 84:62:28:6c:7c:1f:f9:72:17:c2:3d:d6:a7:28:a6: b5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:13:58:D9:ED:52:67:6E:5F:39:6B:05:5C:91:EA:C5:B2:EE:C6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e71a788a-468e-3e8a-9c79-12c81f2fa063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:6d:4a:3e:6f:ee:3a:19:4c:d3:1f:31:91:ac:e5:c6:4e:f9: f6:c5:26:2e:66:35:9d:a7:4e:8c:dc:f9:c8:c4:1d:aa:19:d3: 25:3c:95:37:1f:25:cd:8c:dd:42:b9:1a:e9:9a:04:cb:f0:bf: 2a:a9:f5:fc:26:9f:91:28:e9:6c:1b:c3:3b:b1:3f:e1:08:61: 3a:43:3d:b2:38:3d:a3:4f:c2:ce:17:67:0c:fd:9a:3c:f7:0e: ad:53:a8:0d:5c:3b:6f:ed:88:38:15:0f:60:15:34:68:ef:b8: 03:2a:13:51:f3:22:86:ff:6a:3f:8a:5f:86:c3:bc:87:77:e1: 29:d0:a0:af:ad:aa:8d:1c:c0:83:1c:9b:74:64:1f:bc:8c:84: 1d:c5:f4:69:a2:ad:d4:2d:8e:b2:1a:0f:e6:c1:34:e1:bf:9d: 75:48:cb:85:36:26:48:77:90:69:0b:a3:8e:0d:49:0e:5c:7e: 2a:4f:13:13:7c:8b:24:dd:95:c9:12:ad:db:1d:f3:35:b2:ea: 01:27:fc:0c:65:4a:65:a8:4b:d0:1d:41:69:7e:9a:6d:30:d9: 09:ca:e0:16:15:e1:c9:5c:2a:86:60:8f:76:ce:d6:0a:ad:5a: 78:9d:b5:9d:6a:1e:b2:85:04:c3:4c:95:ab:55:91:2d:51:4b: 44:db:58:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdDyC2/uzt3MZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDYyNmY4N2EtM2ZiMy00MDNmLTg4OGEtYTQ0YjE1ZmU1NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jlqDlBSh1hZMRWpm/S5OlDvjYPdTOhTYz8N eqNLF4VoxDdUY/1sGkeWIKggaFV6XefiuaciApDUbvO+1hk2F4QgboWjvCSe6je6 F45A0E/y2d5+JXdmaRhNpX5F69yYlhhVnfERpwTqkEWBKw5ZoaSFK+0iyQbSZ0el b3KLHCuQKmBerozHdeez+Xpdp8gYLh5tMVPS6Ca9lCrMXp3cRNfaAbnBfIfBtp0C G1q8pWLpUGwSmGVX+Ka33EzouMBSZ7dm7o615GBCfBTQ1fDQm3dNiGDh+Wu3mVeF cNPQRP0Dimo1R+kp8Dtx/xzkJAyEYihsfB/5chfCPdanKKa15QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQTWNntUmduXzlrBVyR6sWy7sYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTcxYTc4OGEtNDY4ZS0z ZThhLTljNzktMTJjODFmMmZhMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdtSj5v7joZTNMfMZGs5cZO+fbFJi5mNZ2nTozc+cjEHaoZ0yU8lTcf Jc2M3UK5GumaBMvwvyqp9fwmn5Eo6WwbwzuxP+EIYTpDPbI4PaNPws4XZwz9mjz3 Dq1TqA1cO2/tiDgVD2AVNGjvuAMqE1HzIob/aj+KX4bDvId34SnQoK+tqo0cwIMc m3RkH7yMhB3F9GmirdQtjrIaD+bBNOG/nXVIy4U2Jkh3kGkLo44NSQ5cfipPExN8 iyTdlckSrdsd8zWy6gEn/AxlSmWoS9AdQWl+mm0w2QnK4BYV4clcKoZgj3bO1gqt WnidtZ1qHrKFBMNMlatVkS1RS0TbWDY= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:23 2025 by rpki-client