$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/25288322-c799-369c-9460-850a0e2897f4.roa File: 25288322-c799-369c-9460-850a0e2897f4.roa (raw, json) Hash identifier: 0HzV7H4/vg4gTXWLO7B46qfBUZ+170XRz31RaA3TYs4= Subject key identifier: 3C:8F:80:13:F5:27:A7:3D:1B:F4:8D:03:49:8B:D8:60:3C:91:C8:B3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814621653E562742A97C2D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/25288322-c799-369c-9460-850a0e2897f4.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.182.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:21:65:3e:56:27:42:a9:7c:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=d3bbfeb4-0acc-422c-95ee-7402a09e0a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:05:15:a8:78:a2:0c:8b:3d:48:f2:fd:c0:50: 6d:8d:c2:ce:39:8c:cf:2c:d8:b4:b1:a5:70:bf:95: 58:21:f5:18:73:48:25:20:bb:64:6c:e4:09:c4:6b: a5:c5:c1:78:0b:1e:bf:7d:c5:8a:cc:d0:e6:88:ab: 56:10:05:d5:97:e8:72:67:58:ed:ce:2c:33:5b:60: 3d:d6:0c:b5:e3:6e:96:d0:3d:f9:56:5b:8a:a1:0d: 99:5b:02:69:21:ad:60:dc:d4:a0:47:ea:3c:32:34: 14:59:d1:75:8b:a6:fd:6d:fa:01:95:8b:58:9c:59: 50:4e:48:04:50:52:7d:ff:38:e6:0e:3f:e0:d3:75: 3d:db:e3:a4:30:12:49:9f:fc:68:1f:42:6b:b2:a5: 53:67:f1:32:77:47:66:f3:de:81:76:d1:bd:94:04: df:d2:02:3a:90:92:9c:58:b0:86:77:87:27:75:bf: c4:0d:e2:b2:31:db:8a:ef:26:8e:c8:9b:c6:f8:92: 71:0d:3b:d6:b1:a7:be:a3:38:37:57:a6:48:bf:7d: 45:44:de:bf:25:0b:10:bf:79:75:29:ff:3d:cb:50: 96:79:fa:01:07:97:c8:8e:f0:7e:cf:c5:f4:e3:c2: 9d:60:d1:e5:8c:46:e3:8d:4e:ad:ed:96:54:b8:49: 62:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8F:80:13:F5:27:A7:3D:1B:F4:8D:03:49:8B:D8:60:3C:91:C8:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/25288322-c799-369c-9460-850a0e2897f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c5:49:da:c9:f5:6a:80:85:ba:18:8d:53:fb:33:01:a5:25: 08:02:28:0d:2e:6e:11:06:1d:88:03:e7:b0:ca:6e:0a:29:2b: 5f:5c:fb:81:6f:ac:86:be:4b:df:4d:ac:83:f0:4d:00:b4:b8: 01:a5:a9:2a:3c:a8:45:1e:cf:50:95:ef:d2:c0:9e:83:8c:7a: 18:f0:35:bc:fc:a3:ba:95:74:8d:fd:43:97:ac:3d:09:28:14: e5:d2:ac:6f:be:7b:8c:85:34:24:44:2e:90:b0:c8:9e:e8:a6: dc:ad:ee:1e:44:72:5e:ac:2b:82:99:e1:3b:59:9c:87:d0:6a: 8a:21:6c:0a:a9:25:68:21:98:98:ed:d6:c4:52:49:77:4b:1e: 11:0a:fa:6b:00:6e:02:d8:74:fd:6b:23:52:75:5c:f1:c2:29: 78:b7:52:9a:ff:2d:91:81:68:f4:0c:1d:8c:f4:44:ad:e1:e1: 76:b5:bd:5f:17:2a:4b:a3:9f:ec:f3:55:0c:5d:70:31:84:cf: 85:26:1a:29:e8:33:4f:5d:40:84:d4:5c:41:c3:c0:d8:cc:b7: 8f:6a:92:d9:b0:69:e5:74:58:17:29:e5:a6:90:5e:5b:79:80: 1e:0d:87:0a:38:32:4e:10:cd:e7:f2:3a:aa:29:f6:85:ac:15: d7:4f:0b:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiFlPlYnQql8LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDNiYmZlYjQtMGFjYy00MjJjLTk1ZWUtNzQwMmEwOWUwYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQUVqHiiDIs9SPL9wFBtjcLOOYzPLNi0saVw v5VYIfUYc0glILtkbOQJxGulxcF4Cx6/fcWKzNDmiKtWEAXVl+hyZ1jtziwzW2A9 1gy1426W0D35VluKoQ2ZWwJpIa1g3NSgR+o8MjQUWdF1i6b9bfoBlYtYnFlQTkgE UFJ9/zjmDj/g03U92+OkMBJJn/xoH0JrsqVTZ/Eyd0dm896BdtG9lATf0gI6kJKc WLCGd4cndb/EDeKyMduK7yaOyJvG+JJxDTvWsae+ozg3V6ZIv31FRN6/JQsQv3l1 Kf89y1CWefoBB5fIjvB+z8X048KdYNHljEbjjU6t7ZZUuElizQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyPgBP1J6c9G/SNA0mL2GA8kcizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjUyODgzMjItYzc5OS0z NjljLTk0NjAtODUwYTBlMjg5N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbFSdrJ9WqAhboYjVP7MwGlJQgCKA0ubhEGHYgD57DKbgopK19c+4Fv rIa+S99NrIPwTQC0uAGlqSo8qEUez1CV79LAnoOMehjwNbz8o7qVdI39Q5esPQko FOXSrG++e4yFNCRELpCwyJ7optyt7h5Ecl6sK4KZ4TtZnIfQaoohbAqpJWghmJjt 1sRSSXdLHhEK+msAbgLYdP1rI1J1XPHCKXi3Upr/LZGBaPQMHYz0RK3h4Xa1vV8X Kkujn+zzVQxdcDGEz4UmGinoM09dQITUXEHDwNjMt49qktmwaeV0WBcp5aaQXlt5 gB4Nhwo4Mk4QzefyOqop9oWsFddPCwg= -----END CERTIFICATE-----Generated at Thu Aug 7 02:02:20 2025 by rpki-client