$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8e86245-eba8-3d5c-b8ec-d5a49d4ab9b0.roa File: b8e86245-eba8-3d5c-b8ec-d5a49d4ab9b0.roa (raw, json) Hash identifier: Xc2ZOIGVkA5YLg9TkAtPQFg4WAamHDq/1H5kF8bLVpw= Subject key identifier: 17:FE:B9:58:46:EE:5A:C6:E1:98:46:28:CC:12:D1:82:42:71:8D:D4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B8D477FC04031B11FFCCAF040 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8e86245-eba8-3d5c-b8ec-d5a49d4ab9b0.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 13901 IP address blocks: 199.19.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:7f:c0:40:31:b1:1f:fc:ca:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=db6f0fe0-4157-41be-ab4a-503c7f8dcf74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1c:bc:39:aa:b8:5e:b4:f4:a9:03:1e:15:f0: 21:6a:07:53:e9:54:b0:c8:f4:87:b3:24:01:ad:34: 2c:76:9b:b6:04:91:ec:57:b6:21:20:70:2f:a6:6c: 76:2e:3d:cc:84:1c:f4:a6:cc:8e:42:8f:7d:6d:ba: 01:02:72:23:e1:84:7f:1b:78:f2:2b:2e:d4:fd:8f: f8:55:e8:eb:28:59:e3:bd:e5:7f:2d:99:17:1c:ba: 33:e9:8b:6d:c9:76:91:21:92:03:e5:93:5e:2b:38: 1f:33:0c:60:49:4d:55:7f:70:12:ad:8d:3c:0f:68: d4:c2:42:05:de:62:40:48:81:85:11:40:eb:51:5c: fb:79:e4:0b:ba:b0:0b:83:25:ef:5a:48:b0:0e:2f: 14:d8:6c:7c:29:c0:f5:70:7b:be:78:1e:94:b9:80: 52:67:c8:f2:bd:a6:ce:e4:89:a2:ed:ae:77:ea:78: be:ef:58:23:c7:34:98:e1:9f:ba:f7:17:80:55:1b: 96:34:f4:18:16:8c:11:20:87:ab:0d:18:98:8b:c2: 35:8a:e0:02:19:38:4c:e8:29:bd:ca:f2:a4:c3:43: cd:41:51:2a:04:32:f0:d4:87:3c:e0:0f:5d:7c:d5: ef:3f:e5:7e:db:8d:51:f2:77:81:5c:8e:67:1e:af: 23:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FE:B9:58:46:EE:5A:C6:E1:98:46:28:CC:12:D1:82:42:71:8D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b8e86245-eba8-3d5c-b8ec-d5a49d4ab9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.19.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a1:ba:38:f4:d4:f6:c9:6e:0c:34:aa:84:eb:d9:5e:30:cc: 27:ce:fb:4b:84:79:d8:bc:98:63:5b:fd:e2:9c:c6:d2:06:08: 99:ac:de:fe:44:42:ae:d5:bb:95:a2:2d:c5:04:d7:82:52:30: ce:f9:8a:b6:f2:58:ea:b8:35:e5:04:2a:08:1c:4f:62:20:26: 26:02:5e:30:61:a2:89:f0:3f:e8:96:bc:df:24:4c:e1:2e:b1: 53:46:4f:46:62:f1:94:38:8f:39:1d:11:d5:61:3b:8a:55:d6: a4:ae:49:a9:e4:13:8c:6d:bc:d4:cf:43:02:6f:04:29:43:70: e9:e4:8d:af:80:c9:3e:46:ce:d1:5b:c2:99:83:92:6b:53:53: ae:13:f0:e2:ae:cc:7d:96:d5:3a:16:1c:4c:5b:33:d8:4c:68: 25:b4:52:ce:e4:31:23:56:d0:33:3e:7a:34:44:46:88:ac:59: 2e:0d:07:4b:53:d5:d5:6a:bf:bb:61:95:13:3d:e8:4f:9c:1a: 2a:39:93:5b:a9:d0:c0:69:b9:be:2f:9b:4d:26:e1:fa:33:cb: 26:13:dc:03:5a:50:9d:cd:ac:b8:22:65:61:53:67:c1:70:cc: 76:b1:20:a4:d2:0a:d3:06:30:f7:aa:6e:2a:ac:de:ee:5f:59: db:a8:ad:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNR3/AQDGxH/zK8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk ZGI2ZjBmZTAtNDE1Ny00MWJlLWFiNGEtNTAzYzdmOGRjZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhy8Oaq4XrT0qQMeFfAhagdT6VSwyPSHsyQB rTQsdpu2BJHsV7YhIHAvpmx2Lj3MhBz0psyOQo99bboBAnIj4YR/G3jyKy7U/Y/4 VejrKFnjveV/LZkXHLoz6YttyXaRIZID5ZNeKzgfMwxgSU1Vf3ASrY08D2jUwkIF 3mJASIGFEUDrUVz7eeQLurALgyXvWkiwDi8U2Gx8KcD1cHu+eB6UuYBSZ8jyvabO 5Imi7a536ni+71gjxzSY4Z+69xeAVRuWNPQYFowRIIerDRiYi8I1iuACGThM6Cm9 yvKkw0PNQVEqBDLw1Ic84A9dfNXvP+V+241R8neBXI5nHq8jWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBf+uVhG7lrG4ZhGKMwS0YJCcY3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjhlODYyNDUtZWJhOC0z ZDVjLWI4ZWMtZDVhNDlkNGFiOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKhujj01PbJbgw0qoTr2V4wzCfO+0uEedi8mGNb/eKcxtIGCJms3v5E Qq7Vu5WiLcUE14JSMM75irbyWOq4NeUEKggcT2IgJiYCXjBhoonwP+iWvN8kTOEu sVNGT0Zi8ZQ4jzkdEdVhO4pV1qSuSankE4xtvNTPQwJvBClDcOnkja+AyT5GztFb wpmDkmtTU64T8OKuzH2W1ToWHExbM9hMaCW0Us7kMSNW0DM+ejRERoisWS4NB0tT 1dVqv7thlRM96E+cGio5k1up0MBpub4vm00m4fozyyYT3ANaUJ3NrLgiZWFTZ8Fw zHaxIKTSCtMGMPeqbiqs3u5fWduord0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:46:08 2025 by rpki-client