$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e71a788a-468e-3e8a-9c79-12c81f2fa063.roa File: e71a788a-468e-3e8a-9c79-12c81f2fa063.roa (raw, json) Hash identifier: pdRT/kPSg7zbsZ/mHpd5ANhK94YHqF5pf12A9avGfVo= Subject key identifier: 7C:F9:F5:6A:95:E2:FA:F7:88:1F:BC:96:EA:A6:3F:9C:A5:80:06:21 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8146203F6219E34027DB0140 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e71a788a-468e-3e8a-9c79-12c81f2fa063.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.115.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:20:3f:62:19:e3:40:27:db:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=3c7d4ee4-809c-4780-affc-15c7900e6188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:1f:6d:28:13:f6:14:91:fe:69:a2:35:d7: 31:a8:91:c9:28:64:20:85:99:60:ca:23:35:fd:c3: 77:05:3a:bc:de:3a:51:c9:ff:3e:fe:f3:4b:25:48: 58:ca:98:04:7a:1a:2a:1a:40:f9:7d:8d:67:bd:91: e3:0d:ff:1a:e1:c8:10:af:de:5d:a0:75:31:bd:74: ba:a2:0d:86:9e:76:c0:62:95:de:31:dd:69:df:9d: af:81:d3:c2:66:cb:91:9f:dd:6b:17:09:80:77:c4: 4e:b1:8a:67:76:97:8b:61:0d:f6:62:c3:09:9a:54: 25:11:51:5a:0e:31:be:d7:49:37:d4:d9:5a:e9:c1: c9:5b:69:82:06:af:cd:38:b4:75:09:a1:34:c2:38: c5:33:0c:89:fe:4c:e3:5d:9f:80:02:f2:b0:de:3d: a8:27:07:59:ba:a0:a2:30:c6:05:7e:67:38:8d:3d: 22:c8:2b:2d:d2:e5:29:3a:69:30:cf:22:cc:dc:89: 87:00:84:15:54:fa:87:ca:cb:5b:46:9a:67:78:ea: aa:81:37:f8:7e:0e:ba:6a:7b:59:63:7c:fe:cd:81: 77:84:80:8f:4b:7d:b5:a8:9b:45:d0:1f:1b:94:95: 66:dd:3d:0f:a2:a4:2d:3b:65:ab:20:31:f2:a3:8e: 84:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F9:F5:6A:95:E2:FA:F7:88:1F:BC:96:EA:A6:3F:9C:A5:80:06:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e71a788a-468e-3e8a-9c79-12c81f2fa063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:93:45:76:f7:93:06:08:64:51:21:74:59:6d:31:b4:1f:7f: 95:20:8e:4b:85:da:23:be:77:40:e2:11:81:30:24:d2:9c:34: a0:0c:cd:60:82:e1:cc:84:d9:1b:9d:e1:01:b3:4f:5e:37:90: cb:1f:82:89:9e:65:99:41:9a:91:0c:e2:fd:fc:93:b0:67:12: d0:24:59:dc:3a:ff:07:5b:fd:35:ba:ee:d4:8a:3a:15:ce:57: ad:2f:02:ae:4c:26:6d:99:74:ea:59:bb:c2:b7:06:da:68:fe: 65:4a:2a:21:c9:37:3f:81:e1:6e:c7:41:66:a9:48:67:c4:bf: 26:2d:7a:14:aa:87:78:d4:67:b4:0f:37:d9:f8:94:59:d7:58: 8f:77:55:67:99:ed:9f:fc:bf:81:be:e7:d2:ad:26:c9:bc:64: 29:2c:93:f1:37:11:83:3d:ae:4e:c2:a5:8e:e5:30:9f:d5:dc: 91:01:d1:1b:e7:48:10:7b:33:56:9a:b0:ad:53:64:76:88:e0: 4b:f1:1d:42:24:5d:f1:80:55:eb:c5:45:09:8c:b3:26:81:ca: 83:8c:31:99:8d:a1:5b:fb:b5:3b:59:ef:1f:07:39:61:58:90: 24:eb:d3:7a:92:52:e2:a2:ce:fa:59:91:33:7c:f6:c7:eb:21: ab:d4:39:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiA/YhnjQCfbAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk M2M3ZDRlZTQtODA5Yy00NzgwLWFmZmMtMTVjNzkwMGU2MTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryIfbSgT9hSR/mmiNdcxqJHJKGQghZlgyiM1 /cN3BTq83jpRyf8+/vNLJUhYypgEehoqGkD5fY1nvZHjDf8a4cgQr95doHUxvXS6 og2GnnbAYpXeMd1p352vgdPCZsuRn91rFwmAd8ROsYpndpeLYQ32YsMJmlQlEVFa DjG+10k31Nla6cHJW2mCBq/NOLR1CaE0wjjFMwyJ/kzjXZ+AAvKw3j2oJwdZuqCi MMYFfmc4jT0iyCst0uUpOmkwzyLM3ImHAIQVVPqHystbRppneOqqgTf4fg66antZ Y3z+zYF3hICPS321qJtF0B8blJVm3T0PoqQtO2WrIDHyo46E7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHz59WqV4vr3iB+8luqmP5ylgAYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTcxYTc4OGEtNDY4ZS0z ZThhLTljNzktMTJjODFmMmZhMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6TRXb3kwYIZFEhdFltMbQff5UgjkuF2iO+d0DiEYEwJNKcNKAMzWCC 4cyE2Rud4QGzT143kMsfgomeZZlBmpEM4v38k7BnEtAkWdw6/wdb/TW67tSKOhXO V60vAq5MJm2ZdOpZu8K3Btpo/mVKKiHJNz+B4W7HQWapSGfEvyYtehSqh3jUZ7QP N9n4lFnXWI93VWeZ7Z/8v4G+59KtJsm8ZCksk/E3EYM9rk7CpY7lMJ/V3JEB0Rvn SBB7M1aasK1TZHaI4EvxHUIkXfGAVevFRQmMsyaByoOMMZmNoVv7tTtZ7x8HOWFY kCTr03qSUuKizvpZkTN89sfrIavUOZ0= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:31 2025 by rpki-client