$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa File: f25e2b6a-11b7-35e3-a462-57f557c7d879.roa (raw, json) Hash identifier: /P0kmEWKFJpLtlleboAvh63mkDQlzrap4YpjOJy7NjI= Subject key identifier: DE:64:E3:65:A1:FF:16:CF:86:88:2F:73:42:78:E5:0F:6E:3D:E4:7C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B620205C3AEF6092C4102B600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.254.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:05:c3:ae:f6:09:2c:41:02:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=9153c621-267e-451d-827e-d59b1b8b2a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:0e:6e:da:6b:e8:1d:2b:84:d6:6a:df:65: 61:80:bf:48:c2:40:92:ff:c5:ce:d5:ec:db:3c:19: cd:92:8e:07:39:65:41:82:18:cf:a7:d8:44:75:05: dc:49:55:d2:cb:fd:b2:ac:0d:48:54:37:c0:f7:20: a2:3c:9f:8b:8f:f2:97:cc:0f:59:69:84:63:ca:9c: 30:fd:66:08:8d:5c:c0:09:4a:b4:07:68:7f:14:a9: 53:6c:49:a9:ed:ff:aa:58:90:b0:d8:49:f3:9f:aa: 91:d1:88:35:e2:8a:4a:f8:29:47:0d:0a:e0:ef:c4: d8:8d:b8:53:4d:e0:d6:b7:d2:f2:a2:23:e3:27:eb: da:e2:28:1c:18:20:96:90:e6:3d:a0:c0:89:24:2a: c4:87:3e:1f:c9:4d:bd:9f:05:39:54:dc:b9:ea:be: 9a:5d:9e:99:32:e6:bd:8a:49:52:02:46:4b:d4:de: b0:7c:7d:0e:f5:0b:1f:0d:15:65:25:03:21:f0:69: 00:49:8d:0b:17:82:50:b8:aa:94:06:98:16:b5:7c: 66:e8:39:bd:38:83:13:d4:d1:13:f1:b5:cf:c8:f3: cc:df:d7:24:16:31:df:84:2c:fb:85:3d:12:56:a9: bf:38:68:6f:81:b2:ae:aa:b8:d0:7a:7b:1c:49:54: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:64:E3:65:A1:FF:16:CF:86:88:2F:73:42:78:E5:0F:6E:3D:E4:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a0:47:c7:1c:9c:82:57:d3:85:50:42:08:88:e9:7e:0a:35: 4e:f5:22:14:2f:35:46:9a:10:60:0d:09:6a:05:92:f8:7f:f3: 92:c3:c7:a7:80:bb:78:31:72:52:50:7c:3e:24:2e:99:9b:29: 4b:0f:cb:75:dd:f1:26:e5:ef:4b:c2:9a:f1:20:97:c3:07:e3: cf:7d:fc:0d:85:33:21:10:d8:57:20:2b:54:41:3f:c0:0c:3b: 84:8d:10:74:f0:64:76:5b:43:27:94:f5:8e:f0:a1:00:f2:5a: b5:c8:c5:9b:fb:5d:96:6c:d4:8f:80:ba:b5:5b:e2:e3:81:e4: 9c:2f:61:55:b9:24:c5:c7:7b:1d:f5:20:05:0e:c1:f9:90:80: 0c:ec:ae:03:b2:2e:2c:b5:00:da:0a:4e:f5:f6:fc:85:d8:b4: dd:13:5d:f2:e8:02:49:13:6c:f7:06:2e:3d:f5:89:40:08:80: ca:3b:d4:5b:da:27:5e:72:7f:a8:cd:ac:93:7d:96:c7:21:20: 37:a6:56:30:2c:75:57:b7:25:aa:57:09:70:c0:1a:94:08:a0: 3d:bd:9f:90:b3:68:3d:67:a1:65:53:7e:37:a0:d8:ca:e7:92: d4:7d:a9:e7:59:e7:a8:0c:f0:21:ec:be:38:b1:c8:ee:d6:a2: af:57:60:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAgXDrvYJLEECtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTE1M2M2MjEtMjY3ZS00NTFkLTgyN2UtZDU5YjFiOGIyYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcoObtpr6B0rhNZq32VhgL9IwkCS/8XO1ezb PBnNko4HOWVBghjPp9hEdQXcSVXSy/2yrA1IVDfA9yCiPJ+Lj/KXzA9ZaYRjypww /WYIjVzACUq0B2h/FKlTbEmp7f+qWJCw2Enzn6qR0Yg14opK+ClHDQrg78TYjbhT TeDWt9LyoiPjJ+va4igcGCCWkOY9oMCJJCrEhz4fyU29nwU5VNy56r6aXZ6ZMua9 iklSAkZL1N6wfH0O9QsfDRVlJQMh8GkASY0LF4JQuKqUBpgWtXxm6Dm9OIMT1NET 8bXPyPPM39ckFjHfhCz7hT0SVqm/OGhvgbKuqrjQenscSVRVGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5k42Wh/xbPhogvc0J45Q9uPeR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjI1ZTJiNmEtMTFiNy0z NWUzLWE0NjItNTdmNTU3YzdkODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCgR8ccnIJX04VQQgiI6X4KNU71IhQvNUaaEGANCWoFkvh/85LDx6eA u3gxclJQfD4kLpmbKUsPy3Xd8Sbl70vCmvEgl8MH4899/A2FMyEQ2FcgK1RBP8AM O4SNEHTwZHZbQyeU9Y7woQDyWrXIxZv7XZZs1I+AurVb4uOB5JwvYVW5JMXHex31 IAUOwfmQgAzsrgOyLiy1ANoKTvX2/IXYtN0TXfLoAkkTbPcGLj31iUAIgMo71Fva J15yf6jNrJN9lschIDemVjAsdVe3JapXCXDAGpQIoD29n5CzaD1noWVTfjeg2Mrn ktR9qedZ56gM8CHsvjixyO7Woq9XYOM= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:35 2025 by rpki-client