$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa File: efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa (raw, json) Hash identifier: 9+Ih4b8za1sl2lduyX4jyYyapSNh7gZCLVj1fbYzxKE= Subject key identifier: 2B:CF:BF:51:CF:F5:00:98:4D:8C:AE:92:7F:71:12:FC:37:97:BA:D3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620237BB98B9B10BE080F900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.254.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:37:bb:98:b9:b1:0b:e0:80:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=20be3e5b-886a-49f5-a655-95066220a272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:fa:1a:ab:40:7c:45:09:08:44:53:29:a2: 6f:05:f8:4c:7a:c3:86:c8:c9:9a:ce:08:82:dc:04: 70:48:0b:f4:3c:78:e6:7a:fb:df:7e:f9:19:fd:e2: 4c:79:da:f2:4e:79:ba:fd:c1:70:07:2f:0a:e6:30: 08:b1:38:40:8f:09:64:59:68:1b:b4:8a:87:0a:46: 13:dc:7c:fc:97:41:3a:11:c6:b3:74:bd:1f:5f:a1: 6d:af:a3:bd:30:27:d7:8f:b1:0d:82:5a:b1:e1:bb: 4f:ab:92:83:37:a6:dd:49:df:6d:4b:32:ff:91:99: 40:7c:0d:f1:17:72:5c:71:b4:4b:da:f1:f7:c2:64: fc:fa:cb:cb:8f:d3:8c:96:92:6c:97:b8:fb:e3:73: 4d:ac:f6:86:6d:8f:89:a7:fa:3a:ca:1a:57:df:da: f8:1d:46:a8:26:3b:38:2d:48:df:1f:c7:61:e4:ae: 46:54:87:60:1c:7c:c1:c9:93:2d:d8:22:ce:e6:c7: a9:43:55:90:b2:6e:17:2e:5f:64:54:a4:be:0f:d3: 51:8e:b0:c5:2e:39:36:f2:03:47:43:7d:1e:12:9f: b4:d0:61:dd:65:2a:67:98:e1:58:c3:09:d4:a3:b1: b2:71:72:87:7e:db:03:36:5e:56:68:b8:08:87:7a: f7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CF:BF:51:CF:F5:00:98:4D:8C:AE:92:7F:71:12:FC:37:97:BA:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:40:64:b5:3c:c0:1a:2f:1a:ad:e6:e7:78:9f:e5:bd:8e:08: 57:dc:9b:99:7d:8b:b0:22:89:86:54:bd:a1:e8:1f:0d:c7:8e: 86:2a:0f:f0:05:49:44:73:d7:bc:ae:89:06:82:40:5d:7b:b3: bd:c8:b7:d8:cd:76:33:12:4a:17:85:54:38:2a:02:7f:2d:44: 26:0d:4f:1e:aa:00:ed:e2:9f:2c:e8:ed:cd:a0:6a:bf:5d:bf: bc:e1:9f:17:79:45:7f:c8:0b:1e:e4:06:e8:4e:05:d9:26:bf: 33:10:39:90:8e:ab:70:e0:49:5a:e6:c4:3f:f3:49:d6:af:8b: 06:31:3c:6b:57:d3:a9:53:3e:40:32:0e:cb:5b:e0:bd:4a:50: 75:dc:b9:2b:a4:88:15:32:2d:25:ff:86:30:24:2c:9f:60:c3: 74:10:cd:d8:f8:43:e1:b9:99:a6:1d:0e:32:94:84:d9:ee:2e: 86:36:c3:e7:c2:0c:69:e8:8a:57:87:f4:06:01:38:b0:cb:d2: ad:94:d9:93:1a:68:e4:45:23:f2:be:d6:80:a5:99:f2:25:24: cb:53:5c:ac:ef:49:2e:36:b6:0b:2f:05:63:28:4f:60:57:08: b7:aa:0b:31:b7:3a:2e:f0:64:39:cb:62:90:67:64:04:79:7e: 00:a7:89:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAje7mLmxC+CA+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MjBiZTNlNWItODg2YS00OWY1LWE2NTUtOTUwNjYyMjBhMjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLL6GqtAfEUJCERTKaJvBfhMesOGyMmazgiC 3ARwSAv0PHjmevvffvkZ/eJMedryTnm6/cFwBy8K5jAIsThAjwlkWWgbtIqHCkYT 3Hz8l0E6EcazdL0fX6Ftr6O9MCfXj7ENglqx4btPq5KDN6bdSd9tSzL/kZlAfA3x F3JccbRL2vH3wmT8+svLj9OMlpJsl7j743NNrPaGbY+Jp/o6yhpX39r4HUaoJjs4 LUjfH8dh5K5GVIdgHHzByZMt2CLO5sepQ1WQsm4XLl9kVKS+D9NRjrDFLjk28gNH Q30eEp+00GHdZSpnmOFYwwnUo7GycXKHftsDNl5WaLgIh3r36wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvPv1HP9QCYTYyukn9xEvw3l7rTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWZkOGE5ZjYtN2Y2MC0z YzZlLTgwNzgtZDc0MmYyNWViZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/47MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNAZLU8wBovGq3m53if5b2OCFfcm5l9i7AiiYZUvaHoHw3HjoYqD/AF SURz17yuiQaCQF17s73It9jNdjMSSheFVDgqAn8tRCYNTx6qAO3inyzo7c2gar9d v7zhnxd5RX/ICx7kBuhOBdkmvzMQOZCOq3DgSVrmxD/zSdaviwYxPGtX06lTPkAy Dstb4L1KUHXcuSukiBUyLSX/hjAkLJ9gw3QQzdj4Q+G5maYdDjKUhNnuLoY2w+fC DGnoileH9AYBOLDL0q2U2ZMaaORFI/K+1oClmfIlJMtTXKzvSS42tgsvBWMoT2BX CLeqCzG3Oi7wZDnLYpBnZAR5fgCniXA= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:02 2025 by rpki-client