$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d84c6a65-765d-3a18-a0cc-8f4a1fecda9c.roa File: d84c6a65-765d-3a18-a0cc-8f4a1fecda9c.roa (raw, json) Hash identifier: rfIea0IE0SNsizrXSiV9e5UTjkNCMOu8mTIFDdGBALA= Subject key identifier: C2:A2:5B:74:94:83:ED:45:0D:67:33:61:14:DA:A2:AA:27:7B:61:53 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814620EF9098D74922175040 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d84c6a65-765d-3a18-a0cc-8f4a1fecda9c.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.182.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:20:ef:90:98:d7:49:22:17:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=4f36fce9-a7af-4d87-80fe-8e6406db04b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6f:e2:c6:9c:38:c1:6e:89:fb:63:6f:56:ad: d7:09:26:5b:e7:d3:17:04:b7:f9:b0:7f:fc:b9:9c: e0:b6:4a:19:48:f5:f0:c7:df:c9:58:75:e8:dc:35: 4e:f4:8f:3b:36:52:19:8b:21:8c:2f:40:f6:ad:fc: 4e:0d:3f:20:ed:c0:79:fa:fd:76:7b:87:7e:65:9c: 6f:fb:ac:e5:b5:4f:4c:1e:1a:f6:54:38:76:d8:65: 65:ba:69:fa:96:68:7a:dd:59:11:37:55:f2:2a:a4: 94:72:59:f6:45:da:8a:8e:4c:b2:54:d7:99:c1:8a: ba:98:0b:8d:89:e9:d9:e1:33:54:a0:e6:92:8f:04: f1:65:8d:d9:7c:ee:6d:50:8f:88:fa:cb:63:9e:dd: c7:ed:7e:2c:c3:33:79:6e:be:de:51:7c:10:15:13: da:a2:83:8d:0e:73:11:3d:de:b9:b1:93:04:78:4e: 9b:fc:9b:1f:b1:59:10:ce:54:a9:f1:e9:22:a6:eb: 58:6d:86:d3:1f:04:16:20:eb:61:c6:be:f1:71:dd: ae:05:93:ac:b7:bc:f8:25:6d:53:0e:81:42:71:4a: 00:51:fd:be:33:c9:a4:47:f4:dc:03:22:b8:2a:d8: 23:54:a5:aa:a4:fd:53:3f:83:8a:72:9b:d3:35:1f: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A2:5B:74:94:83:ED:45:0D:67:33:61:14:DA:A2:AA:27:7B:61:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d84c6a65-765d-3a18-a0cc-8f4a1fecda9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:40:ac:e2:bf:b1:bf:2f:ca:89:05:e3:56:d7:1d:54:d4:6f: dc:f8:ff:d2:7a:da:3b:de:73:d4:16:80:09:c6:3a:86:57:ca: ff:71:52:6a:6b:d4:9e:ce:15:6d:b4:7a:42:5a:bd:4d:9d:f6: f1:39:45:7f:8e:60:26:43:4b:be:85:c2:4c:00:b2:7f:b4:89: 01:2b:e9:9b:89:58:ef:10:92:a3:6e:c2:bb:09:43:ee:9c:f4: 65:0c:64:d1:44:df:c0:38:16:e9:3f:ea:25:9d:9b:f8:66:71: ac:3b:d6:f3:70:c8:6f:25:9a:14:e7:f5:82:f7:ee:1d:29:86: 06:ee:39:87:61:ab:58:a4:48:27:2c:a6:03:34:d5:7b:ee:8b: d6:de:f9:e0:3d:9f:cc:26:5c:34:29:88:5c:bf:8a:c9:56:aa: 01:80:5a:26:d1:ce:49:f0:77:33:47:49:62:e2:29:2b:f8:e5: a8:fa:e5:54:19:ef:eb:69:b4:32:5d:bb:b1:6d:7d:51:d2:19: 46:11:a8:d3:35:6f:a0:42:70:ae:09:69:65:eb:11:b4:db:9b: 26:e1:52:b8:b4:e7:10:84:3c:7b:b7:57:d5:27:b2:f4:a8:1f: 2d:fb:ab:fe:dd:c0:60:2a:8d:36:ef:db:fc:a8:df:92:f0:7a: 65:8f:7e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiDvkJjXSSIXUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NGYzNmZjZTktYTdhZi00ZDg3LTgwZmUtOGU2NDA2ZGIwNGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W/ixpw4wW6J+2NvVq3XCSZb59MXBLf5sH/8 uZzgtkoZSPXwx9/JWHXo3DVO9I87NlIZiyGML0D2rfxODT8g7cB5+v12e4d+ZZxv +6zltU9MHhr2VDh22GVlumn6lmh63VkRN1XyKqSUcln2RdqKjkyyVNeZwYq6mAuN ienZ4TNUoOaSjwTxZY3ZfO5tUI+I+stjnt3H7X4swzN5br7eUXwQFRPaooONDnMR Pd65sZMEeE6b/JsfsVkQzlSp8ekiputYbYbTHwQWIOthxr7xcd2uBZOst7z4JW1T DoFCcUoAUf2+M8mkR/TcAyK4KtgjVKWqpP1TP4OKcpvTNR97BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKiW3SUg+1FDWczYRTaoqone2FTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDg0YzZhNjUtNzY1ZC0z YTE4LWEwY2MtOGY0YTFmZWNkYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9ArOK/sb8vyokF41bXHVTUb9z4/9J62jvec9QWgAnGOoZXyv9xUmpr 1J7OFW20ekJavU2d9vE5RX+OYCZDS76FwkwAsn+0iQEr6ZuJWO8QkqNuwrsJQ+6c 9GUMZNFE38A4Fuk/6iWdm/hmcaw71vNwyG8lmhTn9YL37h0phgbuOYdhq1ikSCcs pgM01Xvui9be+eA9n8wmXDQpiFy/islWqgGAWibRzknwdzNHSWLiKSv45aj65VQZ 7+tptDJdu7FtfVHSGUYRqNM1b6BCcK4JaWXrEbTbmybhUri05xCEPHu3V9UnsvSo Hy37q/7dwGAqjTbv2/yo35LwemWPfpE= -----END CERTIFICATE-----Generated at Thu Aug 7 05:01:57 2025 by rpki-client