$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa File: ea5646e1-1195-382d-8eec-de8a18c25b3c.roa (raw, json) Hash identifier: w1edXhLzHv9pjA3rweW3XR8FcLvzqBJrrETFlwx41rM= Subject key identifier: 0C:E8:BC:EA:CC:6A:94:49:2B:60:01:8D:E0:BA:90:83:D9:1F:A5:69 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8146217233C4B434D57A7458 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.182.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:21:72:33:c4:b4:34:d5:7a:74:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=f26597ac-1f36-4ff8-898c-27e2af54a804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:70:0b:b7:57:e6:e5:bf:d3:d0:c5:58:cf: 1e:af:bc:63:e0:4d:13:61:cd:92:36:cc:8d:9b:73: 29:5a:c6:07:2e:ff:4f:cd:e1:42:cc:a8:0c:ba:55: 28:ce:38:94:9a:74:be:d1:e3:91:d5:48:59:2d:50: 3f:ad:a9:57:ac:82:52:5a:bb:d3:8c:28:52:55:7e: a8:a0:73:33:a9:e1:d5:ec:4b:3a:d2:ba:b9:10:a5: 36:fd:81:46:1a:a0:18:c0:bf:3a:7a:4e:54:1e:90: 15:96:88:e2:0d:66:a1:fa:fe:28:17:66:92:e9:8d: 65:f4:4f:42:ca:2b:1b:39:47:28:fe:24:ec:be:d7: 18:67:9b:3e:0e:b9:1a:4f:22:30:75:5b:3c:f0:d1: 91:5e:54:f0:89:30:93:d5:cb:79:59:46:f3:7c:54: d5:f5:a1:8e:26:50:fd:f9:c7:a1:86:71:9f:00:88: ef:f8:e0:55:57:ff:13:c9:38:4d:4b:62:70:dd:76: 0b:c0:50:4e:d5:50:e9:82:09:83:94:bf:15:e9:61: 69:29:93:be:06:e9:7c:98:ba:c4:a2:e8:c9:43:cd: 7d:20:f7:f6:5f:51:17:cd:94:6c:de:ca:ad:f7:7c: 04:60:96:d8:1d:56:c8:99:bd:81:11:ec:ac:4b:d5: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E8:BC:EA:CC:6A:94:49:2B:60:01:8D:E0:BA:90:83:D9:1F:A5:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:4e:87:ed:da:6b:4c:1b:21:a0:ed:ac:91:85:5e:75:50:ae: 84:9c:21:97:83:8a:8b:57:ea:70:7b:03:57:61:27:ac:73:5e: 86:0c:02:bc:bd:d8:1d:75:f7:20:74:43:69:92:3c:6a:dc:08: 93:09:79:58:42:66:d5:3f:a6:11:36:28:f2:a7:ab:b1:bd:ca: d2:c4:70:fc:34:07:9d:72:7f:6e:b3:45:ac:36:44:8e:66:1a: db:2d:76:a7:8d:94:0b:e6:7d:84:88:47:8f:8f:b0:01:09:bd: 31:c9:34:59:5d:65:1e:74:29:1f:aa:bd:c6:9d:fd:eb:35:ed: f5:53:46:3b:36:25:41:40:3f:c1:b4:7c:c8:c1:42:42:ba:05: c5:f4:55:64:6f:ee:ce:1a:a3:d7:32:21:5d:59:75:6c:8d:3c: 7b:1c:ef:7e:ea:49:49:b7:39:91:dd:16:ac:6a:44:3e:34:a3: f8:90:41:16:31:8c:b3:3b:51:1e:67:70:77:7a:4c:91:68:de: db:a7:b1:67:df:cb:90:e4:e1:09:1e:c1:3f:08:56:c3:08:78: 99:52:c6:72:c8:8a:04:06:ef:41:5c:07:9a:99:d6:8b:4a:42: 34:bf:b5:31:1d:88:0b:e2:8a:e5:d3:8a:a7:b3:d9:9d:f7:44: 7c:5e:a0:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiFyM8S0NNV6dFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZjI2NTk3YWMtMWYzNi00ZmY4LTg5OGMtMjdlMmFmNTRhODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPdwC7dX5uW/09DFWM8er7xj4E0TYc2SNsyN m3MpWsYHLv9PzeFCzKgMulUozjiUmnS+0eOR1UhZLVA/ralXrIJSWrvTjChSVX6o oHMzqeHV7Es60rq5EKU2/YFGGqAYwL86ek5UHpAVlojiDWah+v4oF2aS6Y1l9E9C yisbOUco/iTsvtcYZ5s+DrkaTyIwdVs88NGRXlTwiTCT1ct5WUbzfFTV9aGOJlD9 +cehhnGfAIjv+OBVV/8TyThNS2Jw3XYLwFBO1VDpggmDlL8V6WFpKZO+Bul8mLrE oujJQ819IPf2X1EXzZRs3sqt93wEYJbYHVbImb2BEeysS9VmCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzovOrMapRJK2ABjeC6kIPZH6VpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWE1NjQ2ZTEtMTE5NS0z ODJkLThlZWMtZGU4YTE4YzI1YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhOh+3aa0wbIaDtrJGFXnVQroScIZeDiotX6nB7A1dhJ6xzXoYMAry9 2B119yB0Q2mSPGrcCJMJeVhCZtU/phE2KPKnq7G9ytLEcPw0B51yf26zRaw2RI5m GtstdqeNlAvmfYSIR4+PsAEJvTHJNFldZR50KR+qvcad/es17fVTRjs2JUFAP8G0 fMjBQkK6BcX0VWRv7s4ao9cyIV1ZdWyNPHsc737qSUm3OZHdFqxqRD40o/iQQRYx jLM7UR5ncHd6TJFo3tunsWffy5Dk4QkewT8IVsMIeJlSxnLIigQG70FcB5qZ1otK QjS/tTEdiAviiuXTiqez2Z33RHxeoAo= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:22 2025 by rpki-client