$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa File: 598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa (raw, json) Hash identifier: y5PuEpf3Ji/JFPmcn/qsS4EcYXJPMKnaxZj0z+IXGI8= Subject key identifier: 6A:1F:74:BE:6A:1B:55:00:49:C0:C6:B1:3F:00:B3:CA:21:49:55:03 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814624951004A530AABB0EA0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.253.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:24:95:10:04:a5:30:aa:bb:0e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=3ab84f33-5cf9-4007-99ca-090da4f801f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:67:ad:14:7d:e7:56:43:c6:3b:56:72:24: c5:2c:64:1b:2b:07:16:cd:ba:54:36:d4:35:56:21: 4b:53:29:fc:51:d5:be:5c:54:f5:1d:4f:e3:2a:23: a0:40:ca:91:1c:27:98:00:1b:11:a7:c3:8c:d3:ab: 63:46:8b:ab:7b:d1:9b:ad:8b:f5:b1:7e:45:9e:d9: 01:ad:82:cb:f0:0e:2a:58:be:c0:d3:fa:c4:15:a2: 3a:f2:67:9e:7c:c7:ba:c3:d0:f0:6d:ef:fe:e0:3a: 96:ab:85:3d:0b:ee:a5:7c:fa:ed:12:9f:d3:ac:2e: 64:cf:3f:29:41:f5:fa:51:7f:47:13:58:22:d9:e0: 5f:b5:1c:61:bd:eb:2e:61:31:a8:9e:7b:37:6f:3e: 71:c7:ef:bc:eb:8b:f1:48:13:95:f9:83:cb:9c:64: 14:a4:2b:4a:d1:71:d9:1c:d2:ac:11:28:25:35:3f: ad:5f:c8:92:70:9b:11:9e:73:16:d5:90:69:2d:7b: c7:85:e1:75:64:62:9d:74:08:81:be:03:b1:09:4f: 36:cf:05:ea:2c:5e:d0:6c:24:a4:bd:08:5b:07:2e: cf:8b:f5:0b:79:89:34:d6:ae:65:69:d5:78:08:e8: 97:55:d0:14:9c:a3:d7:f6:ad:5d:0b:e3:26:2d:be: f1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1F:74:BE:6A:1B:55:00:49:C0:C6:B1:3F:00:B3:CA:21:49:55:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b1:58:9e:2f:09:bf:89:65:5a:70:ae:71:af:21:f6:9a:36: a9:25:b7:6c:63:b7:a0:43:cb:c2:4d:10:37:f3:46:19:91:f0: 7d:e4:d5:0a:70:5d:60:9e:0b:b3:e1:44:6b:69:22:66:e1:55: ca:01:89:5e:0d:94:3d:d6:8d:4f:ad:d1:43:84:e7:61:b6:b3: 45:ea:38:87:60:9e:f5:84:5f:e7:1b:b4:71:df:19:ca:fc:b7: e8:20:d1:8b:47:bb:bf:92:2b:c4:e5:72:59:3b:1e:97:0f:d8: e9:9b:99:79:a8:51:0e:39:57:c8:bc:f0:96:2f:01:31:a7:f9: 6c:fc:95:71:72:c6:ff:b3:f0:73:ef:cd:33:4e:7d:31:7a:0f: f1:c3:f8:ba:d6:72:a9:94:58:95:8b:d4:8b:9d:ea:48:20:cc: 74:e2:56:9e:90:f5:5c:81:ba:4c:06:38:e3:05:ac:52:68:f6: 9d:fb:94:f7:be:b9:9e:b8:ec:3a:57:a4:2e:4a:5a:b2:52:3f: 72:5c:c5:53:67:78:8a:84:a1:88:fd:1b:e3:69:96:0d:b0:c2: 88:9c:56:51:0f:f7:72:d8:8d:ac:1f:8f:ca:54:20:74:59:14: c4:50:2e:5e:a3:d8:ad:f6:af:f6:50:bc:b8:8f:cc:f6:51:36: 38:38:ce:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiSVEASlMKq7DqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk M2FiODRmMzMtNWNmOS00MDA3LTk5Y2EtMDkwZGE0ZjgwMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXNnrRR951ZDxjtWciTFLGQbKwcWzbpUNtQ1 ViFLUyn8UdW+XFT1HU/jKiOgQMqRHCeYABsRp8OM06tjRoure9GbrYv1sX5FntkB rYLL8A4qWL7A0/rEFaI68meefMe6w9Dwbe/+4DqWq4U9C+6lfPrtEp/TrC5kzz8p QfX6UX9HE1gi2eBftRxhvesuYTGonns3bz5xx++864vxSBOV+YPLnGQUpCtK0XHZ HNKsESglNT+tX8iScJsRnnMW1ZBpLXvHheF1ZGKddAiBvgOxCU82zwXqLF7QbCSk vQhbBy7Pi/ULeYk01q5ladV4COiXVdAUnKPX9q1dC+MmLb7xkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGofdL5qG1UAScDGsT8As8ohSVUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTk4ZmRkM2EtNGVmNC0z OWNlLTg0MmEtMDc3YjY3MmEwYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFexWJ4vCb+JZVpwrnGvIfaaNqklt2xjt6BDy8JNEDfzRhmR8H3k1Qpw XWCeC7PhRGtpImbhVcoBiV4NlD3WjU+t0UOE52G2s0XqOIdgnvWEX+cbtHHfGcr8 t+gg0YtHu7+SK8Tlclk7HpcP2OmbmXmoUQ45V8i88JYvATGn+Wz8lXFyxv+z8HPv zTNOfTF6D/HD+LrWcqmUWJWL1Iud6kggzHTiVp6Q9VyBukwGOOMFrFJo9p37lPe+ uZ647DpXpC5KWrJSP3JcxVNneIqEoYj9G+Nplg2wwoicVlEP93LYjawfj8pUIHRZ FMRQLl6j2K32r/ZQvLiPzPZRNjg4zvI= -----END CERTIFICATE-----Generated at Thu Aug 7 01:10:52 2025 by rpki-client