$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/897185d8-5f4a-3d75-99dd-cce85f68eeb7.roa File: 897185d8-5f4a-3d75-99dd-cce85f68eeb7.roa (raw, json) Hash identifier: AJ/Bcxe1vHPLPwQ2rkUgYZKpWPFyWLqAbnpsTsNPoZc= Subject key identifier: 88:7D:7F:1B:00:71:64:4C:16:5C:CB:BD:66:37:E4:12:B9:97:A9:20 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A814625C0DFE73C58FD65D180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/897185d8-5f4a-3d75-99dd-cce85f68eeb7.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 199.254.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:25:c0:df:e7:3c:58:fd:65:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=2d2e17f2-4b2a-4ce7-8905-bfbea839ff85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:69:8f:72:38:c6:42:66:74:07:db:cd:ee: b0:85:f4:52:ca:9b:db:ba:9e:9b:a0:91:6d:91:9a: c6:c0:83:35:a4:4b:cf:0c:67:cb:68:03:02:7f:33: a8:47:49:94:69:66:29:c1:17:6d:01:55:26:bb:25: fc:c8:0e:65:e2:07:97:8a:8c:ad:1d:8d:c9:ce:44: eb:8b:ac:83:d6:53:58:91:f3:8f:64:8a:f4:a6:b0: 6f:ba:33:a9:f9:d2:07:40:63:cb:b3:7c:65:0b:83: 5c:12:e1:df:ae:9d:ba:b1:a1:3b:7b:12:62:94:b5: 9a:b4:b8:bb:b7:3b:6c:65:6b:4a:57:37:29:34:f7: 01:43:62:eb:4d:8c:3d:ab:74:96:3d:0e:cc:9f:0e: 73:27:bc:bc:99:c2:d4:19:a4:b1:ed:73:e0:d6:c3: d2:fe:6e:3e:ac:ee:b4:0f:bd:45:7f:ef:ad:d7:fd: df:c6:9d:8d:fc:a2:6b:e2:d0:67:ef:3f:6f:e1:40: 21:75:8d:0a:8f:70:1e:5f:4c:29:30:0d:a9:02:3f: 02:da:68:e8:bc:9a:26:fc:3d:1d:a8:ba:f2:0c:78: 35:31:15:a4:cd:5d:8e:67:c3:39:29:f2:ee:1e:22: b1:60:d9:f9:99:c4:95:12:08:9a:de:1a:a7:66:db: af:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7D:7F:1B:00:71:64:4C:16:5C:CB:BD:66:37:E4:12:B9:97:A9:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/897185d8-5f4a-3d75-99dd-cce85f68eeb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:62:c1:c6:a6:90:04:19:4a:09:e0:b4:da:c6:23:ac:f8:4b: f5:16:37:28:f8:03:14:66:e9:e7:fb:4c:85:69:14:3b:42:80: 4e:58:82:c0:63:1e:5b:87:a8:55:bd:7a:3a:e8:cf:ca:73:7c: a4:69:2d:5c:7a:23:65:cf:f0:5a:00:71:62:77:e1:80:27:21: 49:35:62:95:0b:f3:f6:32:ca:70:af:ee:b9:fe:f1:c4:7a:e9: a0:a7:23:9a:3c:ba:8f:55:a8:53:2a:3c:3e:d6:bd:ca:2d:87: 05:95:96:9b:2d:15:9d:3d:74:5f:18:cd:88:22:29:6e:94:ca: 57:62:f3:be:32:dd:91:55:08:8b:23:e9:9f:47:aa:6e:e5:5a: 74:df:2b:41:35:ea:9e:65:ef:ff:e0:a0:e8:f6:00:91:be:59: 0a:60:a7:8f:ca:de:1c:ca:80:38:f1:ac:5c:f3:87:b4:4d:05: cc:af:6b:c2:88:19:09:9d:19:80:84:19:59:f2:dd:ce:f1:94: 34:84:30:29:48:1d:61:bb:fa:e0:08:d3:95:01:71:37:8d:e0: 6c:d4:42:ff:1a:d2:00:15:ea:ee:0c:5e:50:cb:ed:e9:cd:65: a4:91:92:cb:a8:fa:4d:13:26:2e:82:d6:48:49:41:08:c4:b6: 6d:f6:c7:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRiXA3+c8WP1l0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MmQyZTE3ZjItNGIyYS00Y2U3LTg5MDUtYmZiZWE4MzlmZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvxpj3I4xkJmdAfbze6whfRSypvbup6boJFt kZrGwIM1pEvPDGfLaAMCfzOoR0mUaWYpwRdtAVUmuyX8yA5l4geXioytHY3JzkTr i6yD1lNYkfOPZIr0prBvujOp+dIHQGPLs3xlC4NcEuHfrp26saE7exJilLWatLi7 tztsZWtKVzcpNPcBQ2LrTYw9q3SWPQ7Mnw5zJ7y8mcLUGaSx7XPg1sPS/m4+rO60 D71Ff++t1/3fxp2N/KJr4tBn7z9v4UAhdY0Kj3AeX0wpMA2pAj8C2mjovJom/D0d qLryDHg1MRWkzV2OZ8M5KfLuHiKxYNn5mcSVEgia3hqnZtuvQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh9fxsAcWRMFlzLvWY35BK5l6kgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODk3MTg1ZDgtNWY0YS0z ZDc1LTk5ZGQtY2NlODVmNjhlZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/49MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5iwcamkAQZSgngtNrGI6z4S/UWNyj4AxRm6ef7TIVpFDtCgE5YgsBj HluHqFW9ejroz8pzfKRpLVx6I2XP8FoAcWJ34YAnIUk1YpUL8/YyynCv7rn+8cR6 6aCnI5o8uo9VqFMqPD7WvcothwWVlpstFZ09dF8YzYgiKW6Uyldi874y3ZFVCIsj 6Z9Hqm7lWnTfK0E16p5l7//goOj2AJG+WQpgp4/K3hzKgDjxrFzzh7RNBcyva8KI GQmdGYCEGVny3c7xlDSEMClIHWG7+uAI05UBcTeN4GzUQv8a0gAV6u4MXlDL7enN ZaSRksuo+k0TJi6C1khJQQjEtm32x9E= -----END CERTIFICATE-----Generated at Thu Aug 7 01:08:03 2025 by rpki-client