$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa File: 7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa (raw, json) Hash identifier: TOg7JIaZvByqjOPUFx5cnmas15rKHUHVR0uwZV0HvVY= Subject key identifier: F1:39:5D:81:27:10:F8:DF:72:1F:F1:CD:CE:4B:AE:7D:AF:AF:E8:DD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814624ECE16FEC1E2141E100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.254.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:24:ec:e1:6f:ec:1e:21:41:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=af4569c3-3ddd-4eb2-9a53-d80f8917c764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c3:f2:90:d4:b3:da:cc:a2:6d:71:7d:0d:53: 79:20:11:aa:3e:03:31:08:8c:b5:f6:e1:30:34:f3: 56:fc:0f:a6:cf:a0:c5:61:26:19:28:b8:d4:22:ba: 05:67:b9:8d:ab:19:14:50:0d:c0:9e:97:14:68:b1: d7:5e:c4:7b:2e:b0:28:17:4c:8e:c1:57:81:a1:e8: e7:e6:71:de:c8:d9:ed:5c:ec:86:a8:a1:8e:d7:4e: cd:ae:9b:81:8d:24:f7:c6:7b:de:7a:d8:b4:12:31: c5:cf:0c:d3:dd:e7:68:25:bb:df:5e:95:c2:dd:0d: 67:10:12:87:fb:6b:bf:53:52:aa:e2:30:90:41:91: 06:8d:ec:3a:2e:6e:cf:42:38:38:71:06:2c:30:68: 83:f8:44:87:64:71:fc:54:a2:3b:fb:80:22:fb:dc: 30:ff:f5:11:e9:d0:2f:de:7a:9a:6a:37:7c:a1:dd: 16:89:be:e4:61:36:45:20:74:8b:ad:32:74:db:d3: 63:3f:33:ba:66:37:00:b7:b9:77:2d:c0:1b:5a:06: 95:b7:82:74:e1:4c:45:c4:ff:6e:0f:cf:9e:97:a0: 93:1c:3d:22:75:83:74:d3:51:44:cf:97:41:f9:98: 1e:9d:0a:3a:dc:7a:d2:5c:fa:02:4a:d9:12:47:61: d8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:39:5D:81:27:10:F8:DF:72:1F:F1:CD:CE:4B:AE:7D:AF:AF:E8:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7f:1d:72:1a:3d:3b:5f:70:fa:c1:b5:c4:71:b1:3f:95:49: b4:df:08:f6:d7:95:cb:dd:3c:3b:ac:2c:43:a7:be:97:7c:82: 20:cd:9a:5a:b8:c6:5b:cc:ec:e3:b5:b9:56:0e:84:7f:ce:c3: 0a:ba:33:5d:2b:70:a1:74:64:5d:f2:c4:14:a3:eb:ab:61:16: 4c:09:2c:5d:7c:6c:45:95:c7:33:48:48:c4:66:06:ad:b1:fb: 6f:5d:64:38:f5:78:cc:d4:a0:25:3c:cb:c7:27:a0:07:ee:7d: 13:8d:fc:eb:8d:1f:2a:91:44:8f:b9:fd:7d:08:5b:6c:b0:a4: 21:30:48:ad:c0:a4:b0:69:21:4e:0f:4d:ce:22:38:83:d1:d2: 53:6a:54:92:56:9a:10:70:39:4f:bf:70:af:0f:de:08:59:a5: 65:d8:89:62:3e:98:25:50:63:08:02:6d:81:f0:8e:79:74:16: 04:4e:54:e2:78:e9:8c:2c:2c:ed:e0:fe:32:3f:38:35:4c:2b: 2b:6a:10:50:bf:c6:53:75:82:79:76:b3:1a:fa:80:32:58:83: 34:4f:98:24:7f:7b:66:c9:e7:da:ba:99:5b:17:aa:1e:48:65: f6:3e:34:71:ba:42:0c:58:59:23:a6:27:48:87:5f:cc:de:2c: ca:dc:95:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiTs4W/sHiFB4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YWY0NTY5YzMtM2RkZC00ZWIyLTlhNTMtZDgwZjg5MTdjNzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsPykNSz2syibXF9DVN5IBGqPgMxCIy19uEw NPNW/A+mz6DFYSYZKLjUIroFZ7mNqxkUUA3AnpcUaLHXXsR7LrAoF0yOwVeBoejn 5nHeyNntXOyGqKGO107NrpuBjST3xnveeti0EjHFzwzT3edoJbvfXpXC3Q1nEBKH +2u/U1Kq4jCQQZEGjew6Lm7PQjg4cQYsMGiD+ESHZHH8VKI7+4Ai+9ww//UR6dAv 3nqaajd8od0Wib7kYTZFIHSLrTJ029NjPzO6ZjcAt7l3LcAbWgaVt4J04UxFxP9u D8+el6CTHD0idYN001FEz5dB+ZgenQo63HrSXPoCStkSR2HYBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE5XYEnEPjfch/xzc5Lrn2vr+jdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2MyNWY2MGQtZTY1Mi0z OWMyLWFkM2ItZTdiY2I0NmVlMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR/HXIaPTtfcPrBtcRxsT+VSbTfCPbXlcvdPDusLEOnvpd8giDNmlq4 xlvM7OO1uVYOhH/Owwq6M10rcKF0ZF3yxBSj66thFkwJLF18bEWVxzNISMRmBq2x +29dZDj1eMzUoCU8y8cnoAfufRON/OuNHyqRRI+5/X0IW2ywpCEwSK3ApLBpIU4P Tc4iOIPR0lNqVJJWmhBwOU+/cK8P3ghZpWXYiWI+mCVQYwgCbYHwjnl0FgROVOJ4 6YwsLO3g/jI/ODVMKytqEFC/xlN1gnl2sxr6gDJYgzRPmCR/e2bJ59q6mVsXqh5I ZfY+NHG6QgxYWSOmJ0iHX8zeLMrclbE= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:07 2025 by rpki-client