$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa File: 536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa (raw, json) Hash identifier: GUYwX5oKuSMb3r4UhfheZZJuZJx+tAOajGVLrUwtcRg= Subject key identifier: EB:39:68:CA:56:6D:85:2B:87:E4:3A:97:E3:55:EB:0A:33:4B:17:AC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6201D7C30CC132D7D3849E00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.253.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d7:c3:0c:c1:32:d7:d3:84:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d56fb26d-eb13-4b03-9bbb-bacbb1b54439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:10:0a:95:47:c8:f4:45:68:b0:f7:8e:e1: 18:e5:ec:ec:54:9d:fd:bc:0b:dd:a5:e0:d5:6e:6f: 30:34:ea:c3:f6:f4:99:2f:7b:42:44:c7:31:57:0b: 2c:76:ac:c3:7f:8a:c1:da:f4:af:b4:3f:ba:b5:9e: cc:ea:6f:ee:bc:8c:54:9f:fa:08:1b:51:5d:d5:e9: aa:0d:4e:8f:dc:df:2e:f3:50:33:10:0e:79:7e:23: c6:af:3a:6e:08:4b:f9:49:4e:72:68:86:f4:f2:0b: 8f:21:7a:ab:3d:1f:6d:79:b2:8f:4d:23:01:93:87: 04:f0:fe:f8:fb:7f:6e:d2:b2:f1:a5:82:eb:49:f9: 6d:ee:26:49:9f:d5:d1:e1:60:03:32:1e:c5:a6:2c: 0a:e6:92:bb:3e:1f:9e:0d:e4:ad:d1:a5:8d:ab:f2: 4d:15:fb:59:cd:32:85:99:cf:94:90:59:3b:96:40: a9:71:b8:41:00:13:0e:79:7c:46:12:1a:f4:56:f8: f8:85:33:28:b0:20:e3:3a:ee:ae:03:73:ca:08:68: 62:99:a0:01:ef:54:c4:a3:91:78:1b:01:da:bf:ab: cf:e4:e2:87:6b:18:f8:45:26:7f:96:a6:15:e5:aa: e1:8a:f8:fa:36:cc:d1:a2:86:b3:9b:42:cd:3f:85: a0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:39:68:CA:56:6D:85:2B:87:E4:3A:97:E3:55:EB:0A:33:4B:17:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/536f65fc-5cc0-30b3-a1f6-84de7c771b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:10:b3:08:b0:9e:20:e5:77:a1:56:b9:0d:87:7e:a0:4e:54: 07:fd:5a:10:b6:a1:1c:d6:8f:78:bd:74:69:f0:b8:75:83:e8: 70:ee:ad:15:63:92:79:dc:83:d5:27:1c:2d:ef:ad:4d:57:f3: d8:57:12:59:a8:f1:09:0d:73:2b:06:44:2c:c5:91:e5:b9:1f: 3f:04:6b:fb:b9:41:5c:c9:c5:46:0e:b9:bd:2a:15:c0:ef:63: 9f:eb:07:3d:bd:c9:78:43:2b:72:2c:d9:d9:5a:9d:87:5c:1c: c7:05:a3:74:1c:1d:d8:56:7e:51:a9:12:21:b5:47:15:96:e8: 50:18:d3:74:59:64:b6:da:f9:3e:ba:72:dd:b1:69:41:12:53: c0:84:9f:fe:67:83:35:3a:87:dd:df:be:fd:f4:7d:17:9e:bf: 52:0b:7f:57:bb:75:4b:70:4a:61:1d:a6:df:6f:6d:6a:99:82: 45:dc:de:69:32:71:78:6a:0e:59:72:ab:db:71:dc:fb:4c:2a: 1c:be:c2:91:38:de:a6:2a:97:df:f0:ba:56:f1:e9:4f:9f:31: e7:53:b8:e7:70:e0:cb:f0:fa:79:a6:9b:fb:1c:17:dc:6c:e0: b3:9c:14:b0:5e:22:16:cd:02:a5:43:a5:19:a7:90:a7:84:c9: de:1c:10:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdfDDMEy19OEngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDU2ZmIyNmQtZWIxMy00YjAzLTliYmItYmFjYmIxYjU0NDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc0QCpVHyPRFaLD3juEY5ezsVJ39vAvdpeDV bm8wNOrD9vSZL3tCRMcxVwssdqzDf4rB2vSvtD+6tZ7M6m/uvIxUn/oIG1Fd1emq DU6P3N8u81AzEA55fiPGrzpuCEv5SU5yaIb08guPIXqrPR9tebKPTSMBk4cE8P74 +39u0rLxpYLrSflt7iZJn9XR4WADMh7FpiwK5pK7Ph+eDeSt0aWNq/JNFftZzTKF mc+UkFk7lkCpcbhBABMOeXxGEhr0Vvj4hTMosCDjOu6uA3PKCGhimaAB71TEo5F4 GwHav6vP5OKHaxj4RSZ/lqYV5arhivj6NszRooazm0LNP4WgowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOs5aMpWbYUrh+Q6l+NV6wozSxesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTM2ZjY1ZmMtNWNjMC0z MGIzLWExZjYtODRkZTdjNzcxYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsQswiwniDld6FWuQ2HfqBOVAf9WhC2oRzWj3i9dGnwuHWD6HDurRVj knncg9UnHC3vrU1X89hXElmo8QkNcysGRCzFkeW5Hz8Ea/u5QVzJxUYOub0qFcDv Y5/rBz29yXhDK3Is2dlanYdcHMcFo3QcHdhWflGpEiG1RxWW6FAY03RZZLba+T66 ct2xaUESU8CEn/5ngzU6h93fvv30fReev1ILf1e7dUtwSmEdpt9vbWqZgkXc3mky cXhqDllyq9tx3PtMKhy+wpE43qYql9/wulbx6U+fMedTuOdw4Mvw+nmmm/scF9xs 4LOcFLBeIhbNAqVDpRmnkKeEyd4cEG0= -----END CERTIFICATE-----Generated at Fri Oct 10 19:55:03 2025 by rpki-client