$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa File: 49cb8b45-24ac-3df5-8192-267514fc0835.roa (raw, json) Hash identifier: FD4JTST8eMIvxxXxEkKjaHvrlnaJ0jNDvMnrbRtw7No= Subject key identifier: BC:C2:0A:22:3D:1C:E5:74:A3:BE:60:51:FA:8E:80:1F:CF:56:B7:7A Certificate issuer: /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb Certificate serial: 010D0C9F4328584AF52145F123C533E9EF912D80 Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 26677 IP address blocks: 199.212.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:45:f1:23:c5:33:e9:ef:91:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=f40f11b9-63a7-4267-9733-f34bbf30f1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:5e:24:72:97:8f:21:21:0c:ae:95:5e:45: e7:78:38:c3:f8:ba:dd:94:cd:ff:ec:0e:86:57:5e: c3:27:7a:bd:b1:d0:ed:a4:8c:68:75:be:6d:61:29: 1f:df:70:6b:a8:20:fd:1c:7f:b5:ef:23:6f:b3:7f: 3a:70:60:c9:2a:0d:e7:52:4e:51:ff:97:4f:34:36: b1:48:bf:f7:a9:33:ff:c7:a6:7d:31:ec:93:09:6b: 98:e8:65:c9:6a:0b:5f:f0:d2:01:9e:24:8e:1b:cd: 71:ec:1d:e3:4b:18:53:33:4e:9d:fc:b8:7d:21:e6: ea:35:ed:f5:58:fb:2a:ad:5c:fd:c1:72:6c:1f:e1: b4:13:82:f2:77:aa:22:65:15:6c:e9:32:53:b9:24: 6d:b3:34:cf:18:a8:06:34:42:33:5f:c7:09:19:cf: 22:d9:c1:8f:ca:ab:30:b5:24:34:bd:2e:86:71:1f: c7:fe:46:0f:1f:90:30:43:34:2d:54:3d:6d:c4:92: 3b:1a:ab:0e:a3:f5:46:35:1d:30:55:8b:2b:b8:82: fe:42:4f:ab:0f:02:f9:a7:07:9b:50:c1:5b:ea:81: b3:40:e8:50:ef:c1:35:bf:5b:86:91:8b:98:4c:3c: 5a:09:d8:16:74:07:82:c8:1a:54:1d:96:8e:63:e2: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C2:0A:22:3D:1C:E5:74:A3:BE:60:51:FA:8E:80:1F:CF:56:B7:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl X509v3 Authority Key Identifier: keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer sbgp-ipAddrBlock: critical IPv4: 199.212.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:b1:bf:e7:5a:c9:9f:5d:27:37:e8:8d:ab:73:98:7d:ef:c2: 25:40:26:ec:be:72:cf:a9:af:92:50:30:f1:c9:3f:34:23:fd: e1:00:f2:e1:3e:96:f3:c4:fa:36:fc:fa:41:85:6a:07:f7:f9: 45:b3:fc:7b:5e:ee:1f:a6:a6:0f:3f:c7:da:03:51:c4:41:b4: 9f:bc:84:dd:10:c4:86:98:9d:75:4c:d9:44:30:a9:5d:57:51: 85:7d:bc:0e:ea:0d:a5:3a:87:db:77:ec:39:4e:42:db:f8:ee: 8b:64:8e:d6:c0:35:8b:b9:3d:a9:b4:94:2e:c1:e6:47:b3:bf: d0:a7:9e:77:bc:28:c8:34:8b:3b:3f:eb:1b:d9:43:12:cc:1f: da:77:21:7e:1f:3b:8c:c1:cf:5e:27:eb:40:1c:0f:fd:a9:1a: a9:e9:53:af:87:d1:6c:35:c9:c4:7f:26:df:0f:e9:1a:c0:40: 8e:f4:d9:94:b8:b8:1a:bf:89:00:64:04:02:84:0a:b1:c7:37: 55:97:eb:98:93:16:e9:8f:34:99:4c:b9:7c:7b:59:4b:eb:07: ae:85:33:2e:65:1d:6d:57:ca:1b:4b:18:9d:e0:a1:e8:57:c4: f7:2c:6d:75:a2:a9:00:0e:8b:f5:cc:92:67:f9:93:e0:81:c7: a0:50:db:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUXxI8Uz6e+RLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlNGUyOWMtZjNjYS00ZWU1LTkyZGEtNDQ0Mzk2OWUz ZGViMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjQwZjExYjktNjNhNy00MjY3LTk3MzMtZjM0YmJmMzBmMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgVeJHKXjyEhDK6VXkXneDjD+LrdlM3/7A6G V17DJ3q9sdDtpIxodb5tYSkf33BrqCD9HH+17yNvs386cGDJKg3nUk5R/5dPNDax SL/3qTP/x6Z9MeyTCWuY6GXJagtf8NIBniSOG81x7B3jSxhTM06d/Lh9IebqNe31 WPsqrVz9wXJsH+G0E4Lyd6oiZRVs6TJTuSRtszTPGKgGNEIzX8cJGc8i2cGPyqsw tSQ0vS6GcR/H/kYPH5AwQzQtVD1txJI7GqsOo/VGNR0wVYsruIL+Qk+rDwL5pweb UMFb6oGzQOhQ78E1v1uGkYuYTDxaCdgWdAeCyBpUHZaOY+L2EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzCCiI9HOV0o75gUfqOgB/PVrd6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xZmU0 ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQzOTY5ZTNkZWIvNDljYjhiNDUtMjRhYy0z ZGY1LTgxOTItMjY3NTE0ZmMwODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWZlNGUyOWMtZjNjYS00ZWU1LTky ZGEtNDQ0Mzk2OWUzZGViLzFmZTRlMjljLWYzY2EtNGVlNS05MmRhLTQ0NDM5Njll M2RlYi5jcmwwHwYDVR0jBBgwFoAUCbXJ9Jrd59UO6Ntu9RFJXobmFlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xZmU0ZTI5Yy1mM2NhLTRlZTUtOTJkYS00NDQz OTY5ZTNkZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9T8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqxv+dayZ9dJzfojatzmH3vwiVAJuy+cs+pr5JQMPHJPzQj/eEA8uE+ lvPE+jb8+kGFagf3+UWz/Hte7h+mpg8/x9oDUcRBtJ+8hN0QxIaYnXVM2UQwqV1X UYV9vA7qDaU6h9t37DlOQtv47otkjtbANYu5Pam0lC7B5kezv9Cnnne8KMg0izs/ 6xvZQxLMH9p3IX4fO4zBz14n60AcD/2pGqnpU6+H0Ww1ycR/Jt8P6RrAQI702ZS4 uBq/iQBkBAKECrHHN1WX65iTFumPNJlMuXx7WUvrB66FMy5lHW1XyhtLGJ3goehX xPcsbXWiqQAOi/XMkmf5k+CBx6BQ260= -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:30 2025 by rpki-client