$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3953ccbd-3c9d-37ae-a3ae-ef760167009a.roa File: 3953ccbd-3c9d-37ae-a3ae-ef760167009a.roa (raw, json) Hash identifier: vzWS1fBiwV9+aEZzkOm05hy1nx7kLGTcFiClbP0lyro= Subject key identifier: A6:68:B6:8B:0A:3B:4E:97:14:11:CA:6E:59:E4:B8:8A:1C:87:6D:3E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8146245C288023B119628800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3953ccbd-3c9d-37ae-a3ae-ef760167009a.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.253.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:24:5c:28:80:23:b1:19:62:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=a048d612-dfd6-4cd0-8857-d04f83b04d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4f:76:eb:5b:54:8f:9d:58:b4:a6:6e:d0:ce: 20:c3:ba:66:56:bc:81:b1:c4:e0:48:a3:51:07:73: 50:1f:69:9b:58:ca:66:a3:20:f5:72:b9:0a:20:ba: 94:4f:2b:9f:bf:91:01:2a:ba:d2:ff:c8:00:42:60: bc:95:18:38:d5:1e:94:e2:8f:3c:01:5e:5e:48:e6: e2:36:e0:f5:39:8f:39:02:42:50:d9:48:64:77:d8: 36:c2:3b:01:34:f9:ec:76:ad:ba:b4:c2:7b:ca:cc: e3:e4:e0:28:19:60:be:c7:19:8b:e0:fc:c5:5d:a4: b2:37:7c:45:7b:3f:d2:db:ad:74:57:b0:8f:51:47: 9d:60:21:62:54:a5:14:da:9f:19:15:48:c7:8f:86: f8:c8:c2:54:45:18:c4:e8:5f:19:b4:36:c7:6b:89: de:a3:8f:7d:ab:0c:23:e2:38:77:4e:52:94:3f:30: 04:b4:2e:51:8e:e6:69:14:52:6f:9d:2e:03:23:b7: 41:7b:3e:cf:12:a5:8a:74:f8:e5:fa:96:8e:b4:d1: 05:f2:4a:1d:99:9b:d8:cb:52:00:b9:4a:d9:99:84: c6:a7:77:be:9d:21:1d:fb:60:66:57:19:e5:d3:6b: cd:24:f4:dd:65:cb:99:f9:e9:45:19:0c:42:63:34: 98:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:68:B6:8B:0A:3B:4E:97:14:11:CA:6E:59:E4:B8:8A:1C:87:6D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3953ccbd-3c9d-37ae-a3ae-ef760167009a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:58:8e:d2:07:cf:a0:56:12:11:13:3f:e3:39:ee:c5:1d:60: 95:86:d2:49:31:b9:a1:c1:8d:02:e9:0e:5a:99:e7:50:47:31: 64:a9:fa:27:7b:24:a6:0b:6b:e8:50:ad:9b:b4:6c:4f:8c:e8: ae:62:99:8b:0e:58:00:8b:41:b0:18:e2:2e:32:30:b0:76:52: c9:ec:67:e6:5b:d0:95:c0:9c:a8:9a:65:aa:2e:13:8c:3c:25: 8c:ef:dd:43:d3:33:94:0f:e3:82:95:c5:66:39:07:77:81:c7: ba:7a:1d:96:8e:13:c3:61:cc:28:40:85:0f:db:47:c8:bc:01: e3:96:ef:61:23:f6:dd:60:27:c7:ff:8d:a5:98:45:f3:e0:5b: ed:14:ed:b4:15:8c:d5:89:60:b8:7d:f3:21:05:f2:c9:02:7e: ad:b8:54:c3:80:14:43:aa:1a:02:79:58:13:4e:e0:f3:c9:fc: 6f:57:2c:4c:1c:90:88:0f:a4:39:f8:45:15:48:c4:69:ef:ac: 06:d7:1a:24:22:66:dd:17:86:52:2c:a7:00:48:4a:a8:f4:d0: ac:19:33:e7:e0:15:ab:c8:22:88:cc:80:5e:62:36:63:d8:82: ef:16:82:ac:56:6b:23:13:55:54:33:43:4f:1f:0b:a9:7f:2c: af:9f:26:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiRcKIAjsRliiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YTA0OGQ2MTItZGZkNi00Y2QwLTg4NTctZDA0ZjgzYjA0ZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj09261tUj51YtKZu0M4gw7pmVryBscTgSKNR B3NQH2mbWMpmoyD1crkKILqUTyufv5EBKrrS/8gAQmC8lRg41R6U4o88AV5eSObi NuD1OY85AkJQ2Uhkd9g2wjsBNPnsdq26tMJ7yszj5OAoGWC+xxmL4PzFXaSyN3xF ez/S2610V7CPUUedYCFiVKUU2p8ZFUjHj4b4yMJURRjE6F8ZtDbHa4neo499qwwj 4jh3TlKUPzAEtC5RjuZpFFJvnS4DI7dBez7PEqWKdPjl+paOtNEF8kodmZvYy1IA uUrZmYTGp3e+nSEd+2BmVxnl02vNJPTdZcuZ+elFGQxCYzSYwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZotosKO06XFBHKblnkuIoch20+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzk1M2NjYmQtM2M5ZC0z N2FlLWEzYWUtZWY3NjAxNjcwMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRYjtIHz6BWEhETP+M57sUdYJWG0kkxuaHBjQLpDlqZ51BHMWSp+id7 JKYLa+hQrZu0bE+M6K5imYsOWACLQbAY4i4yMLB2UsnsZ+Zb0JXAnKiaZaouE4w8 JYzv3UPTM5QP44KVxWY5B3eBx7p6HZaOE8NhzChAhQ/bR8i8AeOW72Ej9t1gJ8f/ jaWYRfPgW+0U7bQVjNWJYLh98yEF8skCfq24VMOAFEOqGgJ5WBNO4PPJ/G9XLEwc kIgPpDn4RRVIxGnvrAbXGiQiZt0XhlIspwBISqj00KwZM+fgFavIIojMgF5iNmPY gu8WgqxWayMTVVQzQ08fC6l/LK+fJsI= -----END CERTIFICATE-----Generated at Thu Aug 7 04:05:39 2025 by rpki-client