$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa File: 34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa (raw, json) Hash identifier: LhAnQYqNoQH2UHtrR81QGC9PA9RRzEV5PZ7VbxEs9hY= Subject key identifier: 52:91:A6:20:B2:78:E3:25:79:A6:11:EF:D9:A4:C3:20:03:EB:56:0E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584AAC8B85C864A766C74985D680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa Signing time: Tue 29 Jul 2025 01:00:48 +0000 ROA not before: Tue 29 Jul 2025 01:00:48 +0000 ROA not after: Mon 27 Oct 2025 01:00:48 +0000 asID: 393246 IP address blocks: 199.115.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:8b:85:c8:64:a7:66:c7:49:85:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:48 2025 GMT Not After : Oct 27 01:00:48 2025 GMT Subject: CN=044ab597-4de3-4922-b25a-981cbc1e8f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:bf:9e:62:0b:ad:e2:76:bf:1e:4f:b3:4b: 6e:5d:19:bb:5b:98:05:76:28:29:d3:0e:16:cd:6d: c9:ac:cf:3c:7c:8d:e4:e9:6c:c2:ff:f0:f8:f2:9a: 87:bb:1f:80:fc:d2:d3:2f:a9:b3:1a:f1:db:07:57: 66:2d:87:16:a3:70:34:96:82:d4:8d:83:00:11:bd: bb:85:66:19:5a:c2:aa:6e:ae:0b:ba:39:b8:6e:62: 4e:38:3f:c3:4a:cc:a2:9c:c0:d5:62:4f:55:58:f1: 11:36:a4:85:60:9a:9b:db:88:a8:26:07:4a:96:9b: 1b:8f:29:99:e1:2c:cf:74:07:f0:df:3e:88:6c:b1: 1f:f1:be:fa:78:dc:ac:90:28:57:eb:1c:bf:27:03: 57:e3:f9:24:ac:9a:b7:d5:49:f7:d8:74:30:52:f2: 55:c1:1f:92:c6:2c:b2:50:ce:8a:03:32:5b:80:24: 94:94:48:62:18:5c:ef:79:3d:70:67:8f:d9:af:42: 6c:bd:c7:10:69:ea:cf:4c:23:28:a2:60:eb:d4:4b: d0:43:90:4a:c4:85:59:5b:7e:2a:ae:99:e7:8f:3e: 49:b7:9f:1e:4e:97:4a:39:2b:55:21:66:2a:2a:a4: ed:6d:e4:19:66:73:c8:89:7c:9e:a7:f7:f9:08:fb: a1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:91:A6:20:B2:78:E3:25:79:A6:11:EF:D9:A4:C3:20:03:EB:56:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:37:c7:d6:5c:64:92:b3:2d:c8:f3:0a:26:cf:74:71:12:98: 57:84:70:bf:41:22:cf:94:64:87:d4:5e:2d:69:6b:48:5d:0b: e8:02:11:ef:b9:ee:e1:29:1d:68:39:d9:c9:0d:90:8c:c9:a9: 4d:2e:5e:48:33:17:56:b3:77:08:e3:9c:d7:c8:34:87:ea:a5: 7b:c5:5c:ed:14:2f:e6:61:87:f9:71:76:90:82:a9:fd:41:71: fc:39:77:c4:4e:fe:c6:72:84:28:a5:5b:4d:9b:d5:a3:fd:9f: 10:22:94:de:9b:ac:63:c2:cc:df:07:91:80:a4:98:9e:d1:96: a5:e7:67:a2:2d:22:f4:61:0f:cf:8b:c1:b8:57:3b:65:ee:01: 7f:d9:50:64:71:6e:a5:9c:6e:94:98:a8:fa:a5:01:07:4c:ab: 24:f1:9a:ca:a5:00:86:01:47:1c:bf:7d:75:b1:e2:26:9d:ed: 8f:ff:8d:d9:1e:ed:7f:00:37:ff:89:d8:a2:c3:5f:e7:cc:23: 38:ea:a8:80:58:1c:f0:07:cf:72:65:10:32:0d:59:80:a7:8f: 65:13:b2:46:e8:11:f7:83:ba:0d:41:91:23:a1:25:70:4b:7a: 2f:4e:47:81:32:cc:1a:ec:c9:2b:dc:24:99:16:71:e9:79:13: c3:b6:14:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqsi4XIZKdmx0mF1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcyOTAxMDA0OFoXDTI1MTAyNzAxMDA0OFowLzEtMCsGA1UEAxMk MDQ0YWI1OTctNGRlMy00OTIyLWIyNWEtOTgxY2JjMWU4ZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwm/nmILreJ2vx5Ps0tuXRm7W5gFdigp0w4W zW3JrM88fI3k6WzC//D48pqHux+A/NLTL6mzGvHbB1dmLYcWo3A0loLUjYMAEb27 hWYZWsKqbq4Lujm4bmJOOD/DSsyinMDVYk9VWPERNqSFYJqb24ioJgdKlpsbjymZ 4SzPdAfw3z6IbLEf8b76eNyskChX6xy/JwNX4/kkrJq31Un32HQwUvJVwR+Sxiyy UM6KAzJbgCSUlEhiGFzveT1wZ4/Zr0JsvccQaerPTCMoomDr1EvQQ5BKxIVZW34q rpnnjz5Jt58eTpdKOStVIWYqKqTtbeQZZnPIiXyep/f5CPuh6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKRpiCyeOMleaYR79mkwyAD61YOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzRjMmZiY2YtMzdiNS0z OTgzLThlODItNWI3YjMzNDNmMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo3x9ZcZJKzLcjzCibPdHESmFeEcL9BIs+UZIfUXi1pa0hdC+gCEe+5 7uEpHWg52ckNkIzJqU0uXkgzF1azdwjjnNfINIfqpXvFXO0UL+Zhh/lxdpCCqf1B cfw5d8RO/sZyhCilW02b1aP9nxAilN6brGPCzN8HkYCkmJ7RlqXnZ6ItIvRhD8+L wbhXO2XuAX/ZUGRxbqWcbpSYqPqlAQdMqyTxmsqlAIYBRxy/fXWx4iad7Y//jdke 7X8AN/+J2KLDX+fMIzjqqIBYHPAHz3JlEDINWYCnj2UTskboEfeDug1BkSOhJXBL ei9OR4EyzBrsySvcJJkWcel5E8O2FCU= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:06 2025 by rpki-client