$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa File: 536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa (raw, json) Hash identifier: tXgAd5rCzYpMQELi6iMROKt4T8/aBVSiVr5UdpKYHkc= Subject key identifier: A1:6E:97:F3:C4:BE:A2:F1:57:19:5C:CB:B5:C7:83:75:76:61:C4:3E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A8146248440F230787D3ED730 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.253.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:24:84:40:f2:30:78:7d:3e:d7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=60024c06-e9ec-4799-b584-8f74973d3cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:c7:ea:48:81:59:a8:b9:34:e2:49:8d:bd: a8:de:5b:49:17:60:b3:9c:74:27:fa:cf:d3:3f:2a: 65:ea:46:c0:a6:a5:d2:b2:d5:7a:1c:f0:7a:f5:22: 4b:0b:08:6c:de:e2:dd:3d:d2:74:78:9f:82:d7:79: 0d:88:10:54:ec:44:6e:00:ca:dc:74:85:89:69:a5: 9f:7a:c9:17:98:26:56:77:4c:79:36:4d:ec:5f:2f: d3:c1:98:f8:fe:3d:6a:2f:b3:42:f4:46:f3:da:20: 2f:d8:85:7b:be:ee:c2:4c:54:10:62:20:5a:f7:2f: a0:fd:88:83:4c:9f:50:e5:b2:ed:9a:f5:15:93:4c: 47:91:d9:55:f0:fc:b0:b5:8d:37:ec:31:96:b6:6a: ca:e1:96:d3:05:02:da:e3:c8:ef:f6:62:38:cb:92: 35:1d:a1:2b:fd:70:9a:a9:29:a8:d7:e4:b5:53:31: 96:96:0b:d3:b9:43:53:50:dc:a5:97:0f:cd:7b:70: 10:35:20:7f:be:c3:c7:cd:a3:dc:bd:13:d2:9c:c7: e2:00:9e:ae:44:21:77:5f:c6:d8:b7:4a:25:99:fa: d7:67:78:dc:9b:3d:7c:c5:e5:b4:a1:d1:76:34:10: 3f:c5:cc:bf:d3:44:d3:17:3f:34:5b:82:74:df:62: 82:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6E:97:F3:C4:BE:A2:F1:57:19:5C:CB:B5:C7:83:75:76:61:C4:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8f:5d:5c:3f:78:80:9a:0e:14:2d:8c:fe:46:95:b2:3c:67: 09:7d:0a:68:3f:9e:61:a7:dd:e2:f5:bd:03:9f:08:ce:e4:ed: ca:8c:8e:76:5e:2c:7f:af:14:00:cd:f2:d9:cf:1c:bd:74:e7: c7:95:ab:43:71:e6:a6:00:1a:7e:3a:d2:43:c5:34:c4:53:ee: 62:3d:52:9e:4a:e7:af:67:36:fb:eb:58:de:fa:54:47:35:4a: 60:07:b5:8e:1b:70:2b:fb:ab:a7:54:a7:ee:ef:d2:c8:47:17: 49:21:bb:79:4c:6b:bd:6e:82:c6:09:c9:66:74:17:b6:d9:48: 38:8e:66:9f:46:6a:f7:af:e0:a1:90:b9:b9:c6:9f:ce:9c:59: 7b:38:61:62:a7:85:b9:59:e8:79:e2:3c:6f:ea:11:fc:3c:a8: a2:b5:bb:f1:a5:d4:3a:98:54:68:38:43:b2:6b:47:e6:85:32: 8b:48:b0:2f:a7:5e:40:a2:05:cc:a1:73:57:d6:36:13:fb:bf: 31:ae:41:53:c7:b3:34:d1:92:94:6d:ba:49:51:60:d2:6b:83: 22:65:3f:2f:d2:9f:4c:68:77:83:3e:fe:b9:2f:a8:d0:50:42: ef:05:f1:d7:ea:ec:37:fa:1a:14:07:b7:71:72:b4:fe:2e:dc: 7a:77:86:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiSEQPIweH0+1zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NjAwMjRjMDYtZTllYy00Nzk5LWI1ODQtOGY3NDk3M2QzY2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EnH6kiBWai5NOJJjb2o3ltJF2CznHQn+s/T Pypl6kbApqXSstV6HPB69SJLCwhs3uLdPdJ0eJ+C13kNiBBU7ERuAMrcdIWJaaWf eskXmCZWd0x5Nk3sXy/TwZj4/j1qL7NC9Ebz2iAv2IV7vu7CTFQQYiBa9y+g/YiD TJ9Q5bLtmvUVk0xHkdlV8PywtY037DGWtmrK4ZbTBQLa48jv9mI4y5I1HaEr/XCa qSmo1+S1UzGWlgvTuUNTUNyllw/Ne3AQNSB/vsPHzaPcvRPSnMfiAJ6uRCF3X8bY t0olmfrXZ3jcmz18xeW0odF2NBA/xcy/00TTFz80W4J032KCOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFul/PEvqLxVxlcy7XHg3V2YcQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTM2ZjY1ZmMtNWNjMC0z MGIzLWExZjYtODRkZTdjNzcxYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSPXVw/eICaDhQtjP5GlbI8Zwl9Cmg/nmGn3eL1vQOfCM7k7cqMjnZe LH+vFADN8tnPHL1058eVq0Nx5qYAGn460kPFNMRT7mI9Up5K569nNvvrWN76VEc1 SmAHtY4bcCv7q6dUp+7v0shHF0khu3lMa71ugsYJyWZ0F7bZSDiOZp9Gavev4KGQ ubnGn86cWXs4YWKnhblZ6HniPG/qEfw8qKK1u/Gl1DqYVGg4Q7JrR+aFMotIsC+n XkCiBcyhc1fWNhP7vzGuQVPHszTRkpRtuklRYNJrgyJlPy/Sn0xod4M+/rkvqNBQ Qu8F8dfq7Df6GhQHt3FytP4u3Hp3hlo= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:53 2025 by rpki-client