$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa File: cdd97578-6813-332c-a0bf-22a87019cc3f.roa (raw, json) Hash identifier: N3kECmS1BSWymXdNRJe06rZk+rIgrxAFbsSzOlDMFT0= Subject key identifier: 77:EE:71:BF:DF:43:3D:F8:E5:08:8A:20:5F:6F:70:B9:C6:E9:49:FA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814624C0FD3E1A3E03924EC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.254.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:24:c0:fd:3e:1a:3e:03:92:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=bc02139e-4f6d-4065-9b7a-4d9eb3bc9d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:43:12:82:4d:61:27:aa:a9:ca:dc:71:cf:ea: ca:ef:94:84:1b:04:cf:50:93:ab:59:9f:a0:b6:4d: 7d:5a:c0:f4:48:b2:50:92:66:35:f7:14:b2:fa:98: 8f:90:ee:66:2f:fe:ba:cf:bf:03:4c:07:2a:bc:4a: 7f:09:c1:f7:b0:77:9a:f8:aa:5a:68:24:76:9b:aa: 01:0b:60:23:e2:6d:eb:3a:4e:3c:1e:65:ab:b5:fc: 50:ec:f1:26:24:d6:bf:4b:d7:6e:ea:85:f4:c3:27: 41:39:86:fd:f1:8b:af:46:c6:9d:30:36:52:a3:39: a7:b4:81:51:98:78:16:6e:d9:cd:e9:6b:1b:a9:b0: fc:40:79:a8:83:84:ad:11:1a:40:86:00:cf:83:0c: 07:84:e7:20:5c:f8:fd:c4:b9:bb:6a:a9:c8:f8:6a: bc:3d:3e:75:6b:72:2a:68:2a:3d:8b:01:b8:72:b1: 88:a7:65:72:3b:8c:38:02:84:5b:35:b1:eb:3e:45: 96:8c:f4:1d:f3:2b:5c:5a:7d:29:6c:4d:82:2d:15: fc:6c:3b:96:11:6b:ef:6b:a4:b5:d5:e9:d5:00:08: e4:52:92:77:cf:1c:21:17:32:e4:d6:0a:1e:b0:41: 68:92:8f:19:b6:62:5d:f0:5d:17:f9:78:dc:b6:2b: f0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EE:71:BF:DF:43:3D:F8:E5:08:8A:20:5F:6F:70:B9:C6:E9:49:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:13:80:45:01:b1:74:3b:08:a7:00:d3:3c:ee:10:66:9f:c4: 2c:89:bf:dc:12:82:5a:ac:ff:d4:ac:63:6e:80:0a:36:b1:02: b1:43:8a:ee:c3:34:c6:19:81:ed:ac:6a:c9:0e:17:c4:92:93: eb:55:27:c1:cc:26:a1:9e:14:7c:6d:c4:f7:98:d1:4e:17:9e: 1b:83:e3:52:05:b0:8e:be:6d:9c:71:fc:17:fa:7b:73:a9:71: 10:4e:6b:67:f6:e9:97:f0:0b:6f:ba:97:f4:2b:a7:64:4f:be: f3:bb:8b:b7:37:0c:d7:f9:cc:8b:c0:24:cb:f9:54:57:74:81: c3:11:d7:06:b6:cb:fd:83:da:8e:fd:5a:c2:61:ea:0f:7a:53: c2:1f:b1:80:ba:e1:2c:cb:97:55:1c:4b:09:47:34:ba:7f:03: 37:0c:18:1f:80:f5:ab:40:52:e7:06:6c:9a:24:ed:f6:2e:e5: a2:be:55:ad:54:5e:83:7f:17:19:29:e8:9a:7c:5e:b0:34:01: d1:a8:b3:d5:80:67:1f:b7:7b:bb:0e:c7:ed:79:88:01:e8:8c: 79:e2:43:cc:59:07:0e:1d:06:3c:bc:c9:19:49:9c:a4:70:bd: d4:63:1a:1f:7f:40:ab:17:d2:bd:1e:80:88:09:e8:26:0e:4a: c0:6f:de:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiTA/T4aPgOSTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YmMwMjEzOWUtNGY2ZC00MDY1LTliN2EtNGQ5ZWIzYmM5ZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EMSgk1hJ6qpytxxz+rK75SEGwTPUJOrWZ+g tk19WsD0SLJQkmY19xSy+piPkO5mL/66z78DTAcqvEp/CcH3sHea+KpaaCR2m6oB C2Aj4m3rOk48HmWrtfxQ7PEmJNa/S9du6oX0wydBOYb98YuvRsadMDZSozmntIFR mHgWbtnN6WsbqbD8QHmog4StERpAhgDPgwwHhOcgXPj9xLm7aqnI+Gq8PT51a3Iq aCo9iwG4crGIp2VyO4w4AoRbNbHrPkWWjPQd8ytcWn0pbE2CLRX8bDuWEWvva6S1 1enVAAjkUpJ3zxwhFzLk1goesEFoko8ZtmJd8F0X+Xjctivw5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfucb/fQz345QiKIF9vcLnG6Un6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2RkOTc1NzgtNjgxMy0z MzJjLWEwYmYtMjJhODcwMTljYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsTgEUBsXQ7CKcA0zzuEGafxCyJv9wSglqs/9SsY26ACjaxArFDiu7D NMYZge2saskOF8SSk+tVJ8HMJqGeFHxtxPeY0U4XnhuD41IFsI6+bZxx/Bf6e3Op cRBOa2f26ZfwC2+6l/Qrp2RPvvO7i7c3DNf5zIvAJMv5VFd0gcMR1wa2y/2D2o79 WsJh6g96U8IfsYC64SzLl1UcSwlHNLp/AzcMGB+A9atAUucGbJok7fYu5aK+Va1U XoN/Fxkp6Jp8XrA0AdGos9WAZx+3e7sOx+15iAHojHniQ8xZBw4dBjy8yRlJnKRw vdRjGh9/QKsX0r0egIgJ6CYOSsBv3kg= -----END CERTIFICATE-----Generated at Thu Aug 7 03:20:29 2025 by rpki-client