$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa File: 038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa (raw, json) Hash identifier: ZAeP9KZhLUcsBzCCXqUWV4wREqNauqGyhKaI7CGgEEI= Subject key identifier: 1B:ED:41:FD:30:64:6A:E7:0B:12:A6:8F:C3:43:68:CA:7E:7C:6E:74 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB40EDC844C8E05FE1D300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 199.249.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:40:ed:c8:44:c8:e0:5f:e1:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=99c12813-aae1-4d19-8c40-f8e272297006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e4:b3:94:ec:79:d8:79:0f:9f:4f:1b:08:3f: cf:b3:9d:20:dd:8c:22:78:65:e0:7c:bb:d7:b0:1b: 12:20:5f:dc:b5:a6:40:83:d8:ee:18:3a:01:02:0f: d5:bf:84:25:38:9e:ba:51:73:e5:76:84:c2:b9:8b: 4f:7c:11:1d:31:40:0f:ec:c1:ef:e9:53:3e:85:03: 62:59:58:81:9b:02:93:31:aa:b2:84:4b:28:29:6a: 97:44:c0:1c:dd:18:73:af:38:c8:d8:dc:a7:1c:26: 7f:4a:61:75:c4:a3:0d:db:b7:12:56:6a:e8:64:8e: e0:f2:8b:a1:bc:77:31:03:ad:6d:e6:2f:4c:1a:de: ea:6d:98:3e:14:ac:b5:3c:0b:89:98:ac:f9:ae:9b: 94:59:96:b9:99:4c:89:06:49:54:9a:4a:83:51:22: a7:2b:b8:82:a1:68:c1:06:b2:a0:60:0b:11:93:ac: b3:7d:a9:1f:28:f0:5a:b7:6b:95:74:2b:19:54:51: 2c:08:81:55:3b:ef:c9:7f:14:c6:c0:dd:00:50:2b: 0b:e1:e3:38:35:d3:fa:a0:f9:a6:a9:4a:a3:12:ce: e3:7e:73:dd:a1:36:84:4c:04:86:23:68:10:66:26: 8c:93:c9:e9:c8:84:42:99:77:ec:a5:d1:5c:b5:7c: fb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:ED:41:FD:30:64:6A:E7:0B:12:A6:8F:C3:43:68:CA:7E:7C:6E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0a:79:a7:11:dd:d0:9d:1f:df:77:e7:1e:db:6d:5c:1a:94: 62:e7:4c:53:2e:c3:bf:5d:ab:08:07:a0:b5:4f:5c:3a:b2:f4: 5b:7b:f9:3d:5c:98:e2:d1:84:00:64:f9:b7:63:fa:4a:05:a0: 43:36:9e:ff:d9:ea:02:00:c9:7f:a2:a9:fd:77:df:d3:e1:60: 06:26:e1:80:8f:18:a6:8c:58:d1:45:cf:7b:a8:9f:6c:21:90: cb:b2:19:8b:29:ff:33:e6:4f:5e:64:fd:dc:c2:71:9e:99:72: 40:f5:cc:e6:25:6f:98:b2:b6:a4:aa:d6:5e:cc:d1:11:e7:40: dc:91:86:13:ab:60:cf:55:b8:9b:b5:59:d0:1e:01:2e:4d:b7: fb:2b:61:22:c0:ad:9c:18:8a:f1:be:3e:77:5d:61:43:68:2e: b7:df:cf:d6:ea:ed:8f:5b:cf:7c:ed:ef:39:7f:71:f5:9e:69: 6c:29:2b:8b:40:8b:6e:12:66:24:71:19:28:b1:24:40:2e:46: 45:93:a7:e9:24:63:9c:a9:66:41:d4:23:d6:a8:4f:ee:23:0e: 29:e9:51:c8:26:c6:7d:ae:2e:49:ee:14:66:37:33:ce:5b:7a: 07:46:7c:2c:a1:23:56:a9:d3:8c:c2:4d:e8:c5:bb:c7:be:a8: 42:82:47:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0DtyETI4F/h0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk OTljMTI4MTMtYWFlMS00ZDE5LThjNDAtZjhlMjcyMjk3MDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+SzlOx52HkPn08bCD/Ps50g3YwieGXgfLvX sBsSIF/ctaZAg9juGDoBAg/Vv4QlOJ66UXPldoTCuYtPfBEdMUAP7MHv6VM+hQNi WViBmwKTMaqyhEsoKWqXRMAc3RhzrzjI2NynHCZ/SmF1xKMN27cSVmroZI7g8ouh vHcxA61t5i9MGt7qbZg+FKy1PAuJmKz5rpuUWZa5mUyJBklUmkqDUSKnK7iCoWjB BrKgYAsRk6yzfakfKPBat2uVdCsZVFEsCIFVO+/JfxTGwN0AUCsL4eM4NdP6oPmm qUqjEs7jfnPdoTaETASGI2gQZiaMk8npyIRCmXfspdFctXz75wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvtQf0wZGrnCxKmj8NDaMp+fG50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDM4ZDA0YzUtYjNhZi0z NWE4LWJiZTgtNDlmNTJkYzZlM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgKeacR3dCdH9935x7bbVwalGLnTFMuw79dqwgHoLVPXDqy9Ft7+T1c mOLRhABk+bdj+koFoEM2nv/Z6gIAyX+iqf1339PhYAYm4YCPGKaMWNFFz3uon2wh kMuyGYsp/zPmT15k/dzCcZ6ZckD1zOYlb5iytqSq1l7M0RHnQNyRhhOrYM9VuJu1 WdAeAS5Nt/srYSLArZwYivG+PnddYUNoLrffz9bq7Y9bz3zt7zl/cfWeaWwpK4tA i24SZiRxGSixJEAuRkWTp+kkY5ypZkHUI9aoT+4jDinpUcgmxn2uLknuFGY3M85b egdGfCyhI1ap04zCTejFu8e+qEKCR/U= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:12 2025 by rpki-client