$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/643af3b0-6aa0-31cc-934e-1c1ec4ea17bb.roa File: 643af3b0-6aa0-31cc-934e-1c1ec4ea17bb.roa (raw, json) Hash identifier: YPCWbQ5IPJcqtDwWoW9sik8dbBKWL4aSzQjI4aVUZgU= Subject key identifier: 7C:9E:A8:8A:4B:CE:18:14:D8:7C:96:60:54:5E:82:7B:60:D6:84:74 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB414D316D13133581F280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/643af3b0-6aa0-31cc-934e-1c1ec4ea17bb.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 199.249.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:41:4d:31:6d:13:13:35:81:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=6ca876d0-8348-499b-b2b9-3d1548cf4cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:15:23:88:25:f9:b5:86:2f:eb:86:f8:24: ff:ac:56:98:a7:0f:76:3b:67:27:04:c7:84:85:df: 71:19:19:e3:5f:ed:3a:40:37:b9:72:4e:86:f3:5c: e4:10:3c:c2:58:a5:d5:61:b2:08:71:58:1d:8b:12: 09:6c:ff:26:8d:b5:9f:f0:bf:3b:a3:e1:d1:7b:d7: 58:6f:a7:e0:b2:b9:4f:50:1e:45:0a:6e:3f:48:6c: 04:34:cd:a6:9a:cb:62:02:f1:7d:51:82:74:c1:8c: ea:16:77:af:b1:d5:8a:e7:be:6f:a4:8e:47:1e:ee: 8b:a3:a5:2f:2f:13:31:7f:bb:14:23:64:c6:c1:d7: 0b:86:65:33:3e:fc:ae:d1:64:95:b2:2d:80:82:8d: b2:34:da:69:10:a5:e0:bf:bc:47:36:fe:1a:a6:91: 9e:8b:f1:40:cf:8b:0d:2d:e5:fc:0d:0b:2a:1c:d1: d1:b7:56:d9:ff:45:c2:84:9c:41:a4:72:d6:eb:9e: 43:23:42:08:bc:22:e7:14:9e:f0:61:b3:d1:44:ce: 9e:19:aa:0b:6e:40:f6:ce:88:83:35:b8:ab:4d:26: 2f:ee:ac:70:9a:9f:9c:10:15:3f:cf:b6:47:eb:55: 10:71:c8:d1:c1:73:ea:15:84:49:f0:56:39:71:80: 4b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9E:A8:8A:4B:CE:18:14:D8:7C:96:60:54:5E:82:7B:60:D6:84:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/643af3b0-6aa0-31cc-934e-1c1ec4ea17bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ed:6c:f0:9a:2e:8c:05:64:44:e9:aa:2f:b8:f3:9a:34:e4: 26:02:b9:00:a9:8a:7a:83:fc:01:06:76:35:8b:1a:e8:49:c3: bb:81:ff:2b:90:64:6d:7b:5f:8b:da:48:42:1e:0c:c8:39:a0: 53:ac:b4:45:6e:2c:72:b9:4b:a2:70:63:33:e3:17:1b:87:d8: 03:ef:61:fe:fb:b7:9c:96:4f:3e:7c:f2:69:60:06:3f:94:b1: a8:12:77:30:0d:00:e7:40:90:04:47:ab:15:74:91:d3:fd:08: 5d:06:2a:89:1c:be:fd:84:a7:8f:7d:19:5d:89:44:85:bc:76: 76:d7:49:15:12:2a:b0:7c:03:a8:c6:2d:d7:3a:63:cc:97:f3: 2b:8b:b1:fa:91:66:b5:8c:cd:72:30:6e:ac:ff:e2:2a:70:8e: c1:1f:43:49:38:60:89:81:99:c7:35:ab:73:d4:49:ea:54:d3: c2:bd:16:67:d1:89:d4:b9:28:d5:c0:6f:e7:40:1e:06:24:76: 66:03:99:79:bf:a7:b3:9b:74:d8:96:02:fd:a1:c1:81:49:14: 8b:0f:39:cf:ee:d7:f7:7b:69:67:f7:0c:2c:c3:15:49:ad:9f: fa:19:73:3b:10:fb:95:1f:ec:29:af:6e:69:0a:bb:a8:3d:dd: 25:1e:76:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0FNMW0TEzWB8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk NmNhODc2ZDAtODM0OC00OTliLWIyYjktM2QxNTQ4Y2Y0Y2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcIVI4gl+bWGL+uG+CT/rFaYpw92O2cnBMeE hd9xGRnjX+06QDe5ck6G81zkEDzCWKXVYbIIcVgdixIJbP8mjbWf8L87o+HRe9dY b6fgsrlPUB5FCm4/SGwENM2mmstiAvF9UYJ0wYzqFnevsdWK575vpI5HHu6Lo6Uv LxMxf7sUI2TGwdcLhmUzPvyu0WSVsi2Ago2yNNppEKXgv7xHNv4appGei/FAz4sN LeX8DQsqHNHRt1bZ/0XChJxBpHLW655DI0IIvCLnFJ7wYbPRRM6eGaoLbkD2zoiD NbirTSYv7qxwmp+cEBU/z7ZH61UQccjRwXPqFYRJ8FY5cYBLsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyeqIpLzhgU2HyWYFRegntg1oR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjQzYWYzYjAtNmFhMC0z MWNjLTkzNGUtMWMxZWM0ZWExN2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArtbPCaLowFZETpqi+485o05CYCuQCpinqD/AEGdjWLGuhJw7uB/yuQ ZG17X4vaSEIeDMg5oFOstEVuLHK5S6JwYzPjFxuH2APvYf77t5yWTz588mlgBj+U sagSdzANAOdAkARHqxV0kdP9CF0GKokcvv2Ep499GV2JRIW8dnbXSRUSKrB8A6jG Ldc6Y8yX8yuLsfqRZrWMzXIwbqz/4ipwjsEfQ0k4YImBmcc1q3PUSepU08K9FmfR idS5KNXAb+dAHgYkdmYDmXm/p7ObdNiWAv2hwYFJFIsPOc/u1/d7aWf3DCzDFUmt n/oZczsQ+5Uf7CmvbmkKu6g93SUedmA= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:52 2025 by rpki-client