$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa File: 598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa (raw, json) Hash identifier: gS+TWojuoIlaGBAoVKUQoeTRuDkv9LQoEaKUseEHdGE= Subject key identifier: 0A:C3:CC:EE:99:79:53:78:B0:71:09:BF:5D:84:CC:EA:C5:21:30:75 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202370098C51FB719F30340 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.253.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:37:00:98:c5:1f:b7:19:f3:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=6c18864f-d3a9-4417-8d09-407fb08ab03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bd:ca:15:a2:de:89:4d:ba:00:ca:c2:cf:52: 2f:af:94:f0:08:c3:d2:41:00:fa:de:9a:a5:ce:69: cd:a6:99:45:64:77:c7:85:e6:81:40:8a:4e:d2:2b: 8b:86:47:93:90:3b:75:46:2d:c3:ea:07:15:a5:38: 26:d7:10:c1:b7:2e:fa:eb:5d:26:d1:e8:9e:13:1a: da:3e:0a:0e:08:16:c1:3f:6b:a7:5a:82:ef:90:45: 28:bc:20:a8:cf:01:84:ca:92:e5:98:a7:c8:68:21: 30:f2:78:38:92:bf:49:05:ab:d9:24:c8:38:7a:a6: 96:ea:99:5f:3a:45:66:c3:43:f3:76:e8:a0:d2:5b: 16:3f:07:71:08:3e:44:0f:73:47:95:36:2f:cc:ba: 38:ca:5a:c8:94:7e:1a:bd:5a:e8:02:3c:42:41:49: 5a:9e:07:c1:14:51:1e:dc:af:0c:0f:14:7f:1e:c3: e0:35:df:b1:52:c2:eb:07:96:57:1c:61:98:60:98: bc:1f:85:c9:dd:15:1b:df:9c:41:a3:d4:59:90:64: de:41:eb:ec:e0:ef:1e:9d:41:c0:59:a1:c8:55:a2: 30:f0:19:77:93:5b:c3:3b:4a:1e:f5:77:66:fe:70: d2:44:a0:b7:12:22:44:c1:cd:dd:37:e1:c3:77:35: 0f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C3:CC:EE:99:79:53:78:B0:71:09:BF:5D:84:CC:EA:C5:21:30:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c4:06:19:f7:b7:04:d2:f8:d9:66:2a:26:04:69:b0:29:bd: a8:6e:86:b7:d4:5a:5c:9d:a9:8c:a8:90:b7:d8:16:92:90:46: 0a:ea:48:ea:de:25:b3:ce:5a:d2:7d:5d:d3:c5:35:5e:3b:aa: f4:63:fa:3e:a6:91:e9:c1:77:42:45:4c:a7:fe:aa:40:6e:c2: b4:b9:ab:d0:55:77:d5:c0:d6:fe:31:86:ad:70:4a:f7:f9:19: 4c:00:90:a3:db:40:c3:0c:f7:6b:56:25:fb:6a:fa:36:f9:0f: 04:c6:e7:fd:e6:04:e1:5c:67:ea:d2:a2:b9:df:2b:b8:92:8a: b1:40:4b:10:32:df:42:62:36:8a:eb:fd:9e:95:3b:b5:d8:59: 57:21:65:8e:d0:cd:09:d4:a9:e7:01:60:7d:a0:6b:13:ad:2e: 0d:c4:27:29:b4:c5:65:8e:d4:fd:5d:be:f4:cf:dd:cd:94:1e: 09:d3:45:d9:06:39:56:d4:d3:a0:17:e7:39:b2:f3:4e:3d:d4: 04:9e:0e:aa:4f:76:23:24:50:3b:32:23:9c:83:bf:0e:bc:77: d8:0f:01:36:92:80:5e:96:1e:91:c4:a2:f1:7b:3e:2c:b0:23: ab:2c:fe:b9:e3:a0:3a:d1:2d:ff:1f:79:28:a1:e2:7b:a4:c2: 2a:9d:d0:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjcAmMUftxnzA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NmMxODg2NGYtZDNhOS00NDE3LThkMDktNDA3ZmIwOGFiMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL3KFaLeiU26AMrCz1Ivr5TwCMPSQQD63pql zmnNpplFZHfHheaBQIpO0iuLhkeTkDt1Ri3D6gcVpTgm1xDBty76610m0eieExra PgoOCBbBP2unWoLvkEUovCCozwGEypLlmKfIaCEw8ng4kr9JBavZJMg4eqaW6plf OkVmw0Pzduig0lsWPwdxCD5ED3NHlTYvzLo4ylrIlH4avVroAjxCQUlangfBFFEe 3K8MDxR/HsPgNd+xUsLrB5ZXHGGYYJi8H4XJ3RUb35xBo9RZkGTeQevs4O8enUHA WaHIVaIw8Bl3k1vDO0oe9Xdm/nDSRKC3EiJEwc3dN+HDdzUP9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArDzO6ZeVN4sHEJv12EzOrFITB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTk4ZmRkM2EtNGVmNC0z OWNlLTg0MmEtMDc3YjY3MmEwYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjEBhn3twTS+NlmKiYEabApvahuhrfUWlydqYyokLfYFpKQRgrqSOre JbPOWtJ9XdPFNV47qvRj+j6mkenBd0JFTKf+qkBuwrS5q9BVd9XA1v4xhq1wSvf5 GUwAkKPbQMMM92tWJftq+jb5DwTG5/3mBOFcZ+rSornfK7iSirFASxAy30JiNorr /Z6VO7XYWVchZY7QzQnUqecBYH2gaxOtLg3EJym0xWWO1P1dvvTP3c2UHgnTRdkG OVbU06AX5zmy80491ASeDqpPdiMkUDsyI5yDvw68d9gPATaSgF6WHpHEovF7Piyw I6ss/rnjoDrRLf8feSih4nukwiqd0P8= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:13 2025 by rpki-client