$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5b9f62d-ee90-362f-a486-312630ce26d6.roa File: f5b9f62d-ee90-362f-a486-312630ce26d6.roa (raw, json) Hash identifier: DAu9i6xMGSgFU5aZxTPzPot7j5cbteg6uUWKwHoGEWk= Subject key identifier: 23:1F:21:F5:70:BC:54:22:F9:B4:C4:68:97:F6:58:FC:E3:BA:B7:C9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201FB89D788B96DE20F1560 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5b9f62d-ee90-362f-a486-312630ce26d6.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.182.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:fb:89:d7:88:b9:6d:e2:0f:15:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=2045d266-9d6d-4797-8a0a-788383d866ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:57:86:e7:d6:f3:e0:58:b9:88:bc:ec:c8: 9a:49:a7:15:81:91:d2:ae:a5:c0:61:4b:fe:e8:62: 14:8a:f1:ee:31:8e:60:ab:c5:32:cc:d1:58:11:78: e4:e2:d0:66:3c:06:2e:1e:7d:4a:d8:b4:f7:60:c3: 66:b3:3a:b0:6e:00:d7:18:5f:18:f3:01:fa:0f:15: 92:29:5d:06:98:8a:c8:26:c9:53:13:9a:d0:4a:0c: 35:07:1b:35:a2:89:e8:7e:f9:8f:b3:ec:75:c5:83: df:86:19:4d:66:9d:b4:fa:9e:ed:2b:ab:68:3c:9f: 9c:42:6c:7a:91:21:d6:9c:7a:08:f6:a9:2e:ed:89: db:05:c8:94:8e:95:45:24:7e:c8:bc:2c:04:08:47: ec:a2:bb:b1:64:78:08:49:27:9b:4e:92:19:03:cc: bb:e1:45:56:c4:1f:e0:be:94:5e:8b:d2:fc:e7:a7: 3d:32:fd:4c:d7:8b:d4:6b:27:70:61:e5:a3:8d:2b: b6:be:df:67:87:ba:35:c3:43:5a:27:b6:23:2d:3a: e5:d2:7f:e4:ab:45:19:1e:7a:99:6a:bf:55:65:bb: 08:5f:5d:3f:66:1c:57:a2:e0:79:db:28:55:be:b6: eb:ce:f5:6e:bd:8f:35:23:7d:60:ac:3e:2a:3f:85: dd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1F:21:F5:70:BC:54:22:F9:B4:C4:68:97:F6:58:FC:E3:BA:B7:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f5b9f62d-ee90-362f-a486-312630ce26d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:3f:b4:41:33:f7:f2:c7:18:ae:d6:63:9b:92:82:86:22:6e: 93:31:56:f0:e9:a9:d6:e8:59:5e:24:d3:f5:dd:84:7e:68:82: 0f:61:53:13:83:24:09:42:76:9f:10:75:cc:34:6c:ac:34:2b: 83:30:40:ca:2c:27:ff:1e:a9:0c:18:29:39:f5:7a:31:da:a9: 47:02:d0:24:71:66:c2:d3:6f:9f:11:8e:c9:9e:d3:4e:a1:34: 66:6e:00:58:64:9c:b1:37:27:0d:45:8d:b6:90:e4:18:9b:3e: 98:7e:58:03:be:2b:76:c0:0f:be:8f:41:6f:d5:2a:1e:48:21: 25:73:ac:b1:a2:29:d6:34:51:80:38:cb:23:9d:d4:b2:25:32: 53:68:34:38:49:a3:64:04:80:41:be:96:8e:c3:66:8d:a2:88: e6:fb:a0:3e:bf:9e:02:7d:e8:c6:ed:5d:35:f3:66:1a:f8:6d: f3:7d:8c:45:39:fe:43:7c:0c:0d:1b:f5:81:1b:e7:1d:e6:ee: ca:f2:3e:c2:64:97:5c:e3:d2:49:6a:7d:2d:17:60:d2:4a:09: 84:30:71:e4:ee:89:c5:2b:b3:ea:eb:36:2b:8e:36:df:02:3e: b7:59:67:51:f0:f8:34:4f:9f:1f:cf:6f:49:42:74:89:89:0d: 37:6c:18:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfuJ14i5beIPFWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MjA0NWQyNjYtOWQ2ZC00Nzk3LThhMGEtNzg4MzgzZDg2NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmelXhufW8+BYuYi87MiaSacVgZHSrqXAYUv+ 6GIUivHuMY5gq8UyzNFYEXjk4tBmPAYuHn1K2LT3YMNmszqwbgDXGF8Y8wH6DxWS KV0GmIrIJslTE5rQSgw1Bxs1oonofvmPs+x1xYPfhhlNZp20+p7tK6toPJ+cQmx6 kSHWnHoI9qku7YnbBciUjpVFJH7IvCwECEfsoruxZHgISSebTpIZA8y74UVWxB/g vpRei9L856c9Mv1M14vUaydwYeWjjSu2vt9nh7o1w0NaJ7YjLTrl0n/kq0UZHnqZ ar9VZbsIX10/ZhxXouB52yhVvrbrzvVuvY81I31grD4qP4XdeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMfIfVwvFQi+bTEaJf2WPzjurfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjViOWY2MmQtZWU5MC0z NjJmLWE0ODYtMzEyNjMwY2UyNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0/tEEz9/LHGK7WY5uSgoYibpMxVvDpqdboWV4k0/XdhH5ogg9hUxOD JAlCdp8Qdcw0bKw0K4MwQMosJ/8eqQwYKTn1ejHaqUcC0CRxZsLTb58Rjsme006h NGZuAFhknLE3Jw1FjbaQ5BibPph+WAO+K3bAD76PQW/VKh5IISVzrLGiKdY0UYA4 yyOd1LIlMlNoNDhJo2QEgEG+lo7DZo2iiOb7oD6/ngJ96MbtXTXzZhr4bfN9jEU5 /kN8DA0b9YEb5x3m7sryPsJkl1zj0klqfS0XYNJKCYQwceTuicUrs+rrNiuONt8C PrdZZ1Hw+DRPnx/Pb0lCdImJDTdsGBE= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:28 2025 by rpki-client