$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1f32044d-8d57-33e6-a098-267514b3c843.roa File: 1f32044d-8d57-33e6-a098-267514b3c843.roa (raw, json) Hash identifier: isE+i+AFGzG4G0ZI6oK8s9alYFyAUeqCpNGgu1S3T5I= Subject key identifier: 99:C5:67:D1:2E:C0:7B:D4:98:00:52:7D:A3:CD:43:05:2B:70:71:BF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81462157227C2558EB2D2300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1f32044d-8d57-33e6-a098-267514b3c843.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.182.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:21:57:22:7c:25:58:eb:2d:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=60d183b5-600d-4d41-b391-8a3587a133c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:29:ab:28:e1:76:92:79:d1:cd:95:32:42: a1:57:e3:77:3b:ff:50:89:7f:7b:bc:ee:42:2c:7a: ce:b0:4c:a1:a9:7f:a7:c1:4c:96:70:c6:55:2b:8a: 16:9d:99:ef:14:33:08:ac:6b:8b:a2:3e:79:a1:24: f6:b5:4f:ba:a7:db:4a:f1:95:af:de:ae:0d:d4:09: 3b:95:2b:56:51:57:7f:cd:c7:8f:71:0a:36:e1:cd: e6:74:5a:54:ad:f7:81:63:04:3a:7d:3f:05:9b:a3: 2e:bc:0c:0a:fe:55:15:fb:5b:7f:58:f1:8e:db:6a: d5:ef:b3:22:62:57:c3:d1:79:fa:ea:5c:a7:85:0c: aa:c6:90:2e:bd:7a:af:8a:0f:c6:b7:5a:84:7c:7d: 15:79:c0:c2:17:3d:7a:48:78:5d:47:c6:f2:bc:f2: 8f:43:44:1c:e2:22:77:9d:96:b6:fc:74:2f:18:3f: af:0d:af:23:e8:bd:b4:1a:3b:dd:9b:a2:5b:8c:e4: ec:b3:90:bc:97:9c:62:86:3b:96:cb:3b:cc:b9:c2: 62:6c:a2:f0:54:c7:1d:bc:ed:97:fb:d5:da:81:49: 48:cb:1d:f7:b4:d6:a5:0d:d4:69:ae:2f:01:98:56: 07:d9:3c:b6:02:1d:7b:ec:65:bf:73:89:be:0f:00: 46:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C5:67:D1:2E:C0:7B:D4:98:00:52:7D:A3:CD:43:05:2B:70:71:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1f32044d-8d57-33e6-a098-267514b3c843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:62:36:13:48:58:73:e1:4c:cc:02:53:f0:c5:2f:08:74:5a: 40:05:af:40:e6:2b:7c:da:e3:df:29:e7:44:36:7d:33:aa:2d: 74:93:37:3a:0c:24:9c:d2:38:25:a6:aa:2a:51:7d:1d:d3:16: cf:a4:61:14:71:23:ef:9a:85:49:eb:8a:94:ec:a3:ef:1c:db: 10:12:fa:d6:2f:cc:c2:c8:24:f1:18:8f:7f:61:2d:f3:7f:ea: 0a:24:2d:fe:a9:84:7a:51:d4:55:e3:9b:cc:a5:d3:92:ea:53: bd:7a:f1:e7:c5:c2:2c:4b:09:1f:df:f4:b3:06:f3:d3:ba:a0: b8:28:bb:2f:c6:32:8b:3f:ff:ab:49:49:81:56:05:6c:df:f5: 34:27:62:27:ae:01:6e:1e:76:1b:ec:4d:ff:ea:af:d5:14:f8: db:b6:47:e5:d2:48:d8:c9:30:e9:2e:fe:23:a2:a4:df:20:3c: c6:3f:8b:d2:60:39:5b:c8:72:ae:73:1b:81:73:e7:f8:ea:2c: aa:0a:e9:74:3b:1e:62:de:32:d0:e0:49:20:67:5b:2f:15:3e: 6f:75:59:d0:e0:8d:06:09:a6:18:2c:29:08:d8:ab:17:92:a7: 5e:54:98:12:19:a3:cf:f9:fe:44:96:14:4f:e7:b3:ec:97:7b: 85:cf:4f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiFXInwlWOstIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NjBkMTgzYjUtNjAwZC00ZDQxLWIzOTEtOGEzNTg3YTEzM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBcpqyjhdpJ50c2VMkKhV+N3O/9QiX97vO5C LHrOsEyhqX+nwUyWcMZVK4oWnZnvFDMIrGuLoj55oST2tU+6p9tK8ZWv3q4N1Ak7 lStWUVd/zcePcQo24c3mdFpUrfeBYwQ6fT8Fm6MuvAwK/lUV+1t/WPGO22rV77Mi YlfD0Xn66lynhQyqxpAuvXqvig/Gt1qEfH0VecDCFz16SHhdR8byvPKPQ0Qc4iJ3 nZa2/HQvGD+vDa8j6L20Gjvdm6JbjOTss5C8l5xihjuWyzvMucJibKLwVMcdvO2X +9XagUlIyx33tNalDdRpri8BmFYH2Ty2Ah177GW/c4m+DwBGNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnFZ9EuwHvUmABSfaPNQwUrcHG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWYzMjA0NGQtOGQ1Ny0z M2U2LWEwOTgtMjY3NTE0YjNjODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALliNhNIWHPhTMwCU/DFLwh0WkAFr0DmK3za498p50Q2fTOqLXSTNzoM JJzSOCWmqipRfR3TFs+kYRRxI++ahUnripTso+8c2xAS+tYvzMLIJPEYj39hLfN/ 6gokLf6phHpR1FXjm8yl05LqU7168efFwixLCR/f9LMG89O6oLgouy/GMos//6tJ SYFWBWzf9TQnYieuAW4edhvsTf/qr9UU+Nu2R+XSSNjJMOku/iOipN8gPMY/i9Jg OVvIcq5zG4Fz5/jqLKoK6XQ7HmLeMtDgSSBnWy8VPm91WdDgjQYJphgsKQjYqxeS p15UmBIZo8/5/kSWFE/ns+yXe4XPT0I= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:51 2025 by rpki-client