$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/afe705d0-6e36-3b3e-b92d-9377ab88bf0d.roa File: afe705d0-6e36-3b3e-b92d-9377ab88bf0d.roa (raw, json) Hash identifier: YXRRTF2p5yB1AaDGyrvWBxzerhRuAHIT7W4nUwdnCNs= Subject key identifier: E9:AD:85:4D:53:4A:2F:38:A5:2E:A3:43:E4:7A:C5:85:43:91:8A:71 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201F6FB47892CE3477FD080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/afe705d0-6e36-3b3e-b92d-9377ab88bf0d.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.115.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f6:fb:47:89:2c:e3:47:7f:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b7329ece-0a09-4e9a-8a0c-47700650d6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:05:2c:c8:ff:22:ad:ad:d4:6d:55:d6:bc:34: d2:7c:e7:b6:a6:f6:4c:f2:3b:5c:27:0f:02:e5:ab: 76:08:d0:fb:3b:55:1e:a1:53:0f:5c:16:08:7f:55: cf:08:b2:e2:5e:8d:4a:a1:48:3d:ec:2e:bd:28:42: 25:2b:3e:6f:7a:de:c1:04:81:ba:ea:04:ef:b6:15: dc:48:e6:4c:ea:9d:bd:f3:3f:c5:90:48:cf:49:14: 25:34:91:48:82:00:e4:50:10:58:a7:dc:9b:ca:69: f8:40:cc:b6:28:f9:e2:b3:31:9a:97:c0:ed:83:cd: a3:a1:1b:fa:f2:65:aa:f9:37:03:1d:1b:b3:31:d3: 73:f6:59:0c:b5:8e:f9:b1:06:9c:21:5d:0e:e3:00: 00:6e:5e:34:f6:01:4d:f5:d8:8a:75:e9:d3:1a:a6: 5e:df:0b:02:41:88:38:35:c2:f7:d7:6a:fe:96:71: 9b:67:04:b3:0f:05:96:bf:c3:69:de:b0:40:a4:29: 71:fc:32:47:ff:4a:7d:f5:d9:cb:5d:53:3f:a7:99: 5d:df:a2:01:28:11:84:e0:7a:67:03:49:c1:cf:fc: 1f:88:84:8d:bc:53:40:20:2b:76:d9:57:5a:21:ce: f8:97:56:c1:68:c5:0f:8c:be:f2:f1:44:46:5e:c9: 5e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AD:85:4D:53:4A:2F:38:A5:2E:A3:43:E4:7A:C5:85:43:91:8A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/afe705d0-6e36-3b3e-b92d-9377ab88bf0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f0:3f:14:eb:e4:4a:e7:bb:f8:27:f3:13:67:25:e0:a1:15: 47:ea:d0:67:9c:e8:d2:14:03:ed:81:e0:6c:2f:50:a8:ed:c3: b9:5b:dd:1a:e5:0e:2c:a5:90:f6:69:58:4c:05:dc:06:99:9e: 03:d3:3b:0b:57:35:80:af:d7:00:32:62:19:f5:bc:25:fd:de: 9b:c8:a8:6b:5f:e0:00:d1:c0:f8:7d:10:7c:82:c1:31:66:f9: df:de:3e:dc:1e:8f:1e:6f:0e:13:97:1e:63:86:8f:cb:56:ff: 07:e6:cf:37:27:c8:58:2e:11:9c:79:3d:53:f8:9d:1f:bf:61: 25:73:0d:f4:ef:b6:f2:f6:ed:5e:ad:da:58:c0:f7:92:53:86: a7:60:bc:ea:91:4b:72:f7:4a:4b:6d:4d:a7:d6:79:21:89:25: a0:5d:4e:d4:42:7f:f5:64:12:f8:fa:b2:cc:53:72:21:4a:f9: 70:13:95:e6:62:ea:f1:4b:e3:c5:b2:bc:d8:e9:3f:30:be:74: 38:cf:f8:fe:03:71:5d:c4:b7:01:4d:54:3a:94:da:25:c3:b7: 31:9d:d7:83:54:2a:2e:26:3d:1c:eb:fe:19:3e:0d:cd:a5:08: 73:60:c7:b8:e1:d3:9a:ca:81:c0:82:97:fc:b6:1e:dc:cc:7c: 85:46:a2:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfb7R4ks40d/0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjczMjllY2UtMGEwOS00ZTlhLThhMGMtNDc3MDA2NTBkNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwUsyP8ira3UbVXWvDTSfOe2pvZM8jtcJw8C 5at2CND7O1UeoVMPXBYIf1XPCLLiXo1KoUg97C69KEIlKz5vet7BBIG66gTvthXc SOZM6p298z/FkEjPSRQlNJFIggDkUBBYp9ybymn4QMy2KPniszGal8Dtg82joRv6 8mWq+TcDHRuzMdNz9lkMtY75sQacIV0O4wAAbl409gFN9diKdenTGqZe3wsCQYg4 NcL312r+lnGbZwSzDwWWv8Np3rBApClx/DJH/0p99dnLXVM/p5ld36IBKBGE4Hpn A0nBz/wfiISNvFNAICt22VdaIc74l1bBaMUPjL7y8URGXsleRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmthU1TSi84pS6jQ+R6xYVDkYpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYWZlNzA1ZDAtNmUzNi0z YjNlLWI5MmQtOTM3N2FiODhiZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzwPxTr5Ernu/gn8xNnJeChFUfq0Gec6NIUA+2B4GwvUKjtw7lb3Rrl DiylkPZpWEwF3AaZngPTOwtXNYCv1wAyYhn1vCX93pvIqGtf4ADRwPh9EHyCwTFm +d/ePtwejx5vDhOXHmOGj8tW/wfmzzcnyFguEZx5PVP4nR+/YSVzDfTvtvL27V6t 2ljA95JThqdgvOqRS3L3SkttTafWeSGJJaBdTtRCf/VkEvj6ssxTciFK+XATleZi 6vFL48WyvNjpPzC+dDjP+P4DcV3EtwFNVDqU2iXDtzGd14NUKi4mPRzr/hk+Dc2l CHNgx7jh05rKgcCCl/y2HtzMfIVGotM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:53 2025 by rpki-client