$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa File: 598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa (raw, json) Hash identifier: 4XfvlHONy3bReBGIMeE1g+xRUxp9Wy7zqruz15ymnQY= Subject key identifier: 32:3B:17:E8:72:59:61:5B:DF:60:EF:10:0C:61:76:CD:C1:A7:2D:F8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584EA79CB44F9C7B1D17236AB600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12041 IP address blocks: 199.253.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:b4:4f:9c:7b:1d:17:23:6a:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d8bd0ee5-99df-448a-ae7a-f0734c84b536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9a:36:4a:5c:b3:10:5c:1f:4a:7f:37:66:98: 49:14:f1:ae:dd:df:59:34:0a:c3:53:b4:0b:c5:b5: c7:21:51:11:a3:fd:b6:4c:a6:cf:6a:38:45:b6:77: 5f:b1:74:12:81:46:bc:f0:86:87:d9:9f:04:10:14: 21:5a:d6:44:12:2a:21:cb:63:57:27:49:40:5c:a3: d0:2f:2f:f5:a6:c6:30:4f:1f:1d:26:98:97:54:d7: d2:bf:33:04:d2:3f:a5:c7:3c:60:14:4b:92:70:81: c9:39:71:c9:c8:f2:36:2e:3a:6c:21:11:90:74:8c: 39:04:5c:77:1f:40:a5:05:93:4f:62:8e:34:fd:9c: 4f:bf:ca:ac:38:77:2b:c3:04:3b:c2:72:71:b0:bd: f2:69:c4:9f:e1:7a:2c:99:4f:7e:27:85:db:e5:2a: e8:84:44:db:0a:eb:28:2d:0e:35:e9:6c:c2:02:cf: 94:12:44:de:41:83:36:f1:b5:f4:b2:9b:53:d9:4d: 49:29:e2:30:f2:4b:63:f7:d7:f8:fa:fb:c6:b3:62: a5:e9:e7:30:ea:47:65:25:10:1e:1c:0a:15:b6:bd: 8f:a9:e0:a6:ad:35:a7:bf:ac:0e:b6:7a:32:7f:25: c9:59:4a:92:aa:90:4f:c3:87:aa:1a:74:3f:67:a2: 05:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3B:17:E8:72:59:61:5B:DF:60:EF:10:0C:61:76:CD:C1:A7:2D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8d:4b:32:5c:6a:6b:f9:f2:f7:95:44:18:67:93:19:a1:70: 14:80:a4:b7:80:8f:d5:ce:57:aa:a6:fb:7c:10:ad:b3:62:61: a6:9f:21:dd:df:4e:82:1e:a7:c5:15:60:16:48:8d:f6:12:29: 64:51:9d:18:6b:39:89:2c:c0:bc:25:e9:1b:bb:6e:ac:0f:d0: 9f:bf:93:84:5a:32:94:1e:14:39:18:f7:cf:6e:bf:a0:59:5a: 63:e8:7c:54:92:c6:15:e5:69:4c:70:6d:f8:94:a4:05:e7:b1: 72:54:b5:54:e9:45:09:44:a0:c2:a0:89:a4:bd:96:8e:47:d9: ba:e2:be:ae:df:c8:f5:de:ce:7c:77:62:de:b6:8e:7b:0e:39: 24:c6:c7:1e:f3:e3:57:fa:7a:50:36:de:0c:3f:b8:d9:cc:47: aa:22:f8:23:dd:d3:a3:14:95:37:85:9a:83:b2:b8:f2:f0:d6: 75:99:4d:a6:8d:93:1d:3c:66:87:1b:60:f5:b2:80:2f:d1:1c: ef:00:66:25:35:2b:50:3e:4f:b7:0a:c9:51:ab:9f:31:f3:c5: 20:29:4c:68:2d:8f:07:d4:70:7e:73:4b:e7:91:e4:05:a7:1e: b0:cf:c6:89:d8:53:6b:cd:6f:1d:c3:e5:05:2e:82:0f:ef:f0: 8e:6e:dc:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnLRPnHsdFyNqtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDhiZDBlZTUtOTlkZi00NDhhLWFlN2EtZjA3MzRjODRiNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpo2SlyzEFwfSn83ZphJFPGu3d9ZNArDU7QL xbXHIVERo/22TKbPajhFtndfsXQSgUa88IaH2Z8EEBQhWtZEEiohy2NXJ0lAXKPQ Ly/1psYwTx8dJpiXVNfSvzME0j+lxzxgFEuScIHJOXHJyPI2LjpsIRGQdIw5BFx3 H0ClBZNPYo40/ZxPv8qsOHcrwwQ7wnJxsL3yacSf4XosmU9+J4Xb5SrohETbCuso LQ416WzCAs+UEkTeQYM28bX0sptT2U1JKeIw8ktj99f4+vvGs2Kl6ecw6kdlJRAe HAoVtr2PqeCmrTWnv6wOtnoyfyXJWUqSqpBPw4eqGnQ/Z6IFqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDI7F+hyWWFb32DvEAxhds3Bpy34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTk4ZmRkM2EtNGVmNC0z OWNlLTg0MmEtMDc3YjY3MmEwYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6NSzJcamv58veVRBhnkxmhcBSApLeAj9XOV6qm+3wQrbNiYaafId3f ToIep8UVYBZIjfYSKWRRnRhrOYkswLwl6Ru7bqwP0J+/k4RaMpQeFDkY989uv6BZ WmPofFSSxhXlaUxwbfiUpAXnsXJUtVTpRQlEoMKgiaS9lo5H2brivq7fyPXeznx3 Yt62jnsOOSTGxx7z41f6elA23gw/uNnMR6oi+CPd06MUlTeFmoOyuPLw1nWZTaaN kx08ZocbYPWygC/RHO8AZiU1K1A+T7cKyVGrnzHzxSApTGgtjwfUcH5zS+eR5AWn HrDPxonYU2vNbx3D5QUugg/v8I5u3Aw= -----END CERTIFICATE-----Generated at Wed Jul 29 06:55:27 2026 by rpki-client