$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ba145d-b90e-3d5b-ab15-5422177aace2.roa File: d3ba145d-b90e-3d5b-ab15-5422177aace2.roa (raw, json) Hash identifier: F8/T+IqYoxbeStJQYR0w5csqqR2iwpdXAZ52fQ5K0CU= Subject key identifier: 5D:E3:0B:4B:6D:C8:4C:78:46:D2:A4:5B:14:FA:29:0A:8B:51:DE:A2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814620BDB5008D3C69703680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ba145d-b90e-3d5b-ab15-5422177aace2.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.182.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:20:bd:b5:00:8d:3c:69:70:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=32d785b7-b210-4ec2-8d92-b2b45fdc506d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:b7:de:04:75:15:d4:f1:a0:79:bf:c7:fd: 60:5f:dc:21:25:74:3d:4d:b9:22:3a:50:43:46:46: e8:3c:8d:b9:16:e5:83:8d:e1:fc:3d:2c:ce:af:ee: 67:a7:38:d9:73:e8:3b:16:2f:4c:65:ab:31:41:8d: 19:a3:5c:46:d2:c4:37:0a:86:22:13:e5:13:c6:5d: dc:eb:61:2e:ae:36:ba:69:5e:8d:eb:e5:76:da:6a: 2e:60:ad:db:65:23:db:d2:cb:52:9f:9b:cd:bb:7b: 30:8e:ce:08:f5:39:f2:6c:15:6b:77:4f:98:b6:fd: 75:fe:23:0c:fa:5d:fb:eb:1f:23:3a:5e:36:21:35: d5:65:8d:0b:28:1b:f8:f6:5c:dc:0a:b8:bc:1b:b5: 5c:40:9f:d5:bc:f2:fc:e9:58:ca:5b:65:fc:40:17: cb:50:7a:1c:36:36:4e:2e:43:43:4d:1e:14:b8:ef: 9f:05:bb:43:e9:b4:2c:3b:63:1a:72:99:b2:ee:ca: 8a:66:07:2d:22:ef:ad:4a:bb:0c:37:27:ad:a7:6b: 54:5a:81:d1:93:e0:5d:06:24:f1:c4:dc:61:09:3c: 08:c8:d3:66:e0:cf:84:d2:58:7a:c3:34:81:65:08: 18:98:29:a2:44:fb:81:70:fd:6a:16:ee:2f:3b:50: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E3:0B:4B:6D:C8:4C:78:46:D2:A4:5B:14:FA:29:0A:8B:51:DE:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d3ba145d-b90e-3d5b-ab15-5422177aace2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:cb:c4:16:63:77:5a:e7:c2:d4:61:86:6c:a3:4e:2c:ad:26: d0:93:06:d0:3c:cc:8e:57:76:36:f0:64:c6:c1:81:4d:98:f7: f7:ea:0e:2b:4d:17:29:84:9b:52:96:b8:5b:29:e8:26:36:77: ac:c3:07:9c:fb:96:16:b6:d8:e8:8e:c9:e1:d6:c6:7f:9d:8e: fd:bf:b1:b6:a7:38:c6:1f:d9:7c:f7:27:fc:f7:b1:e1:58:80: 8e:7c:08:22:07:aa:eb:f9:37:75:9e:12:85:b0:c2:0b:45:ea: 83:8f:c7:e7:d8:a7:db:d9:0b:e0:f0:9d:4b:1d:53:de:56:b8: fc:6a:9d:e0:ec:db:c6:0c:a7:28:d1:07:21:d7:eb:89:68:0d: 33:27:d5:6d:9f:26:41:e4:4b:1c:2d:21:0a:f8:fd:cb:fe:c0: 45:01:3b:2a:4f:15:9d:01:74:31:5e:10:94:8c:c4:c8:72:aa: c8:79:c7:12:e9:f5:a3:c9:47:47:39:db:14:bd:7f:a8:fc:6d: 1c:84:1d:11:fc:23:1d:df:2e:8b:d1:16:51:15:2b:d7:3f:4c: 89:c5:08:7d:14:85:42:e0:a7:96:35:f6:00:bc:e6:40:5c:dc: 7c:29:d1:69:86:54:d5:9b:3d:b7:18:c4:23:8d:7f:f5:23:37: 8e:97:20:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiC9tQCNPGlwNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MzJkNzg1YjctYjIxMC00ZWMyLThkOTItYjJiNDVmZGM1MDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk633gR1FdTxoHm/x/1gX9whJXQ9TbkiOlBD RkboPI25FuWDjeH8PSzOr+5npzjZc+g7Fi9MZasxQY0Zo1xG0sQ3CoYiE+UTxl3c 62Eurja6aV6N6+V22mouYK3bZSPb0stSn5vNu3swjs4I9TnybBVrd0+Ytv11/iMM +l376x8jOl42ITXVZY0LKBv49lzcCri8G7VcQJ/VvPL86VjKW2X8QBfLUHocNjZO LkNDTR4UuO+fBbtD6bQsO2Macpmy7sqKZgctIu+tSrsMNyetp2tUWoHRk+BdBiTx xNxhCTwIyNNm4M+E0lh6wzSBZQgYmCmiRPuBcP1qFu4vO1B4VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3jC0ttyEx4RtKkWxT6KQqLUd6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDNiYTE0NWQtYjkwZS0z ZDViLWFiMTUtNTQyMjE3N2FhY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/LxBZjd1rnwtRhhmyjTiytJtCTBtA8zI5XdjbwZMbBgU2Y9/fqDitN FymEm1KWuFsp6CY2d6zDB5z7lha22OiOyeHWxn+djv2/sbanOMYf2Xz3J/z3seFY gI58CCIHquv5N3WeEoWwwgtF6oOPx+fYp9vZC+DwnUsdU95WuPxqneDs28YMpyjR ByHX64loDTMn1W2fJkHkSxwtIQr4/cv+wEUBOypPFZ0BdDFeEJSMxMhyqsh5xxLp 9aPJR0c52xS9f6j8bRyEHRH8Ix3fLovRFlEVK9c/TInFCH0UhULgp5Y19gC85kBc 3Hwp0WmGVNWbPbcYxCONf/UjN46XINs= -----END CERTIFICATE-----Generated at Thu Aug 7 03:20:06 2025 by rpki-client