$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a4a1de8-4d28-3ee1-a16d-1e87d636802b.roa File: 6a4a1de8-4d28-3ee1-a16d-1e87d636802b.roa (raw, json) Hash identifier: dWLxjKJy4g9iuohY6Y6v9pRfqt2/DHVezftYyHL5TIk= Subject key identifier: 70:9F:AB:B4:89:9D:E6:E1:92:77:A1:2D:97:6C:F7:11:0C:B7:81:F6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461F97E117C355BCD428C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a4a1de8-4d28-3ee1-a16d-1e87d636802b.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.7.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1f:97:e1:17:c3:55:bc:d4:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=fa96c737-0f1d-4688-abaf-6180830133de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8c:78:6a:de:13:cc:8f:d8:de:c5:d3:fa:87: c3:c1:94:a4:60:1f:6e:23:17:7a:03:a8:2d:49:53: 90:5a:a6:67:31:5e:d3:00:a4:08:e1:81:ff:6e:4d: 09:7b:c2:8e:aa:31:d6:65:b2:05:ac:25:fc:06:e9: 92:c2:e3:f2:18:3e:a7:b6:67:1c:e8:65:9e:74:00: 3a:16:eb:01:ab:f9:64:3d:4e:42:60:13:30:a4:36: 38:a6:1c:f5:01:8d:9e:89:57:09:6f:57:b5:09:98: 7e:36:d9:86:0f:20:0a:4c:fc:c6:9c:2d:97:31:01: 52:0e:6a:1d:6c:35:d1:ac:29:c5:a8:7d:5d:34:f6: 1b:d2:59:94:b8:ba:bf:ca:be:a2:16:e3:c3:9b:1a: eb:d7:a2:6c:24:01:7e:35:05:19:cd:8e:0e:6b:4f: ee:93:ef:c4:5c:a0:c6:47:6c:87:a5:a4:24:1e:8b: 6e:cf:9a:e6:dc:c4:40:29:5e:08:69:bc:c4:ad:92: a2:20:03:e9:84:77:3c:66:7f:1d:70:b0:28:d2:f7: c4:3d:a6:bd:b9:3f:b9:ee:58:7f:35:67:99:79:fc: ac:bc:1a:7c:cf:ba:bc:2a:5e:22:26:9e:f3:33:8d: 28:89:70:39:46:9e:b1:d4:ff:97:2a:ee:93:f8:94: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9F:AB:B4:89:9D:E6:E1:92:77:A1:2D:97:6C:F7:11:0C:B7:81:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a4a1de8-4d28-3ee1-a16d-1e87d636802b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.7.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:9f:b0:16:d9:af:23:ea:be:93:d8:71:16:5a:21:24:08:e3: c8:7b:ac:fa:15:4c:b4:2e:e4:01:db:c9:4f:30:6b:77:55:6d: ef:0b:c3:36:9f:8c:55:3d:de:61:cd:33:44:11:12:70:e4:c5: 49:52:8a:96:f1:36:25:7e:64:12:be:11:0d:19:c8:40:04:cb: bd:04:88:de:fa:95:09:e7:b1:8d:8c:79:ff:5d:2f:96:64:51: b1:c6:ee:ae:38:b8:99:4c:9a:0f:99:cd:d2:23:43:15:91:ed: 47:4b:07:4e:8c:e3:bc:2f:3d:e5:f3:b6:2c:47:c7:84:c0:60: b1:24:1d:03:dd:d4:e5:66:80:05:d5:a8:2b:24:3c:df:d3:4c: bf:7e:b4:41:fa:65:7e:9c:1f:14:49:5c:5c:f6:5f:4d:76:b2: 81:fb:14:eb:fc:51:b5:96:1b:28:35:93:af:a1:7a:5f:f6:0d: d5:e1:cb:ab:4e:b3:ec:03:11:74:07:31:04:1c:8e:79:a6:c6: b9:a6:cd:00:40:f5:0a:06:82:5a:ac:40:bd:3e:38:cc:2c:c1: a7:a7:b9:eb:66:13:2e:56:81:70:b6:7b:44:99:13:4e:f6:02: aa:2f:ed:0f:00:96:d3:b4:5d:58:a8:51:4b:0b:ba:e2:e3:b5: 19:a4:98:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh+X4RfDVbzUKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZmE5NmM3MzctMGYxZC00Njg4LWFiYWYtNjE4MDgzMDEzM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYx4at4TzI/Y3sXT+ofDwZSkYB9uIxd6A6gt SVOQWqZnMV7TAKQI4YH/bk0Je8KOqjHWZbIFrCX8BumSwuPyGD6ntmcc6GWedAA6 FusBq/lkPU5CYBMwpDY4phz1AY2eiVcJb1e1CZh+NtmGDyAKTPzGnC2XMQFSDmod bDXRrCnFqH1dNPYb0lmUuLq/yr6iFuPDmxrr16JsJAF+NQUZzY4Oa0/uk+/EXKDG R2yHpaQkHotuz5rm3MRAKV4IabzErZKiIAPphHc8Zn8dcLAo0vfEPaa9uT+57lh/ NWeZefysvBp8z7q8Kl4iJp7zM40oiXA5Rp6x1P+XKu6T+JTqowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCfq7SJnebhknehLZds9xEMt4H2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmE0YTFkZTgtNGQyOC0z ZWUxLWExNmQtMWU4N2Q2MzY4MDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSfsBbZryPqvpPYcRZaISQI48h7rPoVTLQu5AHbyU8wa3dVbe8Lwzaf jFU93mHNM0QREnDkxUlSipbxNiV+ZBK+EQ0ZyEAEy70EiN76lQnnsY2Mef9dL5Zk UbHG7q44uJlMmg+ZzdIjQxWR7UdLB06M47wvPeXztixHx4TAYLEkHQPd1OVmgAXV qCskPN/TTL9+tEH6ZX6cHxRJXFz2X012soH7FOv8UbWWGyg1k6+hel/2DdXhy6tO s+wDEXQHMQQcjnmmxrmmzQBA9QoGglqsQL0+OMwswaenuetmEy5WgXC2e0SZE072 Aqov7Q8AltO0XVioUUsLuuLjtRmkmGY= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:17 2025 by rpki-client