$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa File: b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa (raw, json) Hash identifier: leZG5c1lf6zyHNw/p2qYrkigAgewfl6LVqBY6UisGq4= Subject key identifier: 39:65:60:53:E2:C4:BC:F3:AF:38:39:47:0B:04:39:40:47:9D:4B:9B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584B6202277ECAE01B8F5FF7BD40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 12041 IP address blocks: 199.254.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:27:7e:ca:e0:1b:8f:5f:f7:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=237f0d42-d4c5-41ba-be71-bb58d0f9f557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ae:2e:64:15:87:ef:a2:a6:b3:a4:83:01:23: 51:f2:eb:a3:e9:0d:a4:cc:35:5d:74:65:68:6c:a7: f8:24:8a:18:d9:bf:39:51:91:12:e6:e3:78:50:52: 59:41:ed:0f:a7:e1:b2:fa:e8:86:e2:5d:c3:58:e5: 44:37:c7:12:a2:d4:74:53:74:41:8f:58:de:94:fd: 52:2b:fb:87:4a:12:57:f9:42:28:64:83:c8:2f:a9: 9f:2e:fd:f4:b4:8f:d3:45:9a:fa:6d:e0:c7:ec:2a: aa:7f:2c:27:14:4d:70:f6:47:83:2c:69:7b:e9:ed: 3e:61:81:74:fb:65:6b:fb:f1:c9:2d:bc:02:57:51: 98:3d:49:ba:76:92:55:38:2c:15:cc:cb:32:25:71: 8a:73:7a:71:03:1e:fd:d8:eb:dd:53:18:d2:7d:67: b0:d6:87:f5:03:96:ee:35:be:68:60:16:4f:f5:f3: a8:55:1d:9a:48:68:1b:3d:41:04:8c:8a:f4:80:02: c5:c4:ba:8d:d0:5a:92:c8:de:e4:64:50:5b:cf:db: 2b:ee:cc:9b:7b:ae:9f:6b:94:ef:1e:7d:8c:e5:c2: 8e:72:7f:30:98:eb:57:e7:1f:e8:02:6e:77:c0:b0: 92:7b:97:d4:ce:c1:17:be:07:40:e0:21:56:fb:97: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:60:53:E2:C4:BC:F3:AF:38:39:47:0B:04:39:40:47:9D:4B:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:7a:cc:60:06:8e:49:f7:9d:b6:0f:81:b4:ce:c8:48:1d:b5: a5:07:9d:29:c6:78:7a:36:aa:f9:bd:64:e3:e1:0c:7b:ad:00: a1:45:8e:f6:5a:b4:04:55:e9:4b:a3:12:b7:92:a9:bb:42:9d: 5a:95:fe:7b:f6:2e:e0:94:82:5e:7e:c7:13:c0:0b:9b:52:65: 88:b0:a0:e1:a9:d9:3d:bb:e0:49:2a:1a:b4:7e:01:0e:c2:84: 56:a0:4a:bd:47:d1:93:22:e9:d9:91:d0:90:77:5e:65:4e:d9: 14:04:0c:42:d5:46:ec:a2:a6:15:f8:17:87:1b:4c:84:4c:80: 44:00:aa:27:22:ca:db:68:21:27:b7:ec:76:66:b4:9f:88:d0: da:1a:46:75:92:f7:44:8c:52:e4:4c:f0:74:63:69:79:a7:9e: 09:44:14:45:e7:7b:bb:af:40:51:82:ca:42:e2:61:ef:4c:9a: c6:aa:30:ec:d9:cf:07:e1:6c:0c:a7:d9:c0:38:30:96:27:1f: 4f:54:4b:55:67:04:32:be:ab:d8:87:fe:59:5d:b2:4a:bc:3e: 27:f6:a3:fa:24:e4:a3:0a:ec:fc:f3:b5:9e:aa:20:0e:ed:68: f1:9f:64:92:25:59:db:b0:63:e1:b8:27:a1:12:3f:38:4a:2e: fa:13:28:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAid+yuAbj1/3vUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MjM3ZjBkNDItZDRjNS00MWJhLWJlNzEtYmI1OGQwZjlmNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia4uZBWH76Kms6SDASNR8uuj6Q2kzDVddGVo bKf4JIoY2b85UZES5uN4UFJZQe0Pp+Gy+uiG4l3DWOVEN8cSotR0U3RBj1jelP1S K/uHShJX+UIoZIPIL6mfLv30tI/TRZr6beDH7CqqfywnFE1w9keDLGl76e0+YYF0 +2Vr+/HJLbwCV1GYPUm6dpJVOCwVzMsyJXGKc3pxAx792OvdUxjSfWew1of1A5bu Nb5oYBZP9fOoVR2aSGgbPUEEjIr0gALFxLqN0FqSyN7kZFBbz9sr7sybe66fa5Tv Hn2M5cKOcn8wmOtX5x/oAm53wLCSe5fUzsEXvgdA4CFW+5eA6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDllYFPixLzzrzg5RwsEOUBHnUubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjRkYTIwN2EtNTA4OS0z ZTVhLWIwZWEtZTliZjU0YmY2YzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/48MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd6zGAGjkn3nbYPgbTOyEgdtaUHnSnGeHo2qvm9ZOPhDHutAKFFjvZa tARV6UujEreSqbtCnVqV/nv2LuCUgl5+xxPAC5tSZYiwoOGp2T274EkqGrR+AQ7C hFagSr1H0ZMi6dmR0JB3XmVO2RQEDELVRuyiphX4F4cbTIRMgEQAqiciyttoISe3 7HZmtJ+I0NoaRnWS90SMUuRM8HRjaXmnnglEFEXne7uvQFGCykLiYe9MmsaqMOzZ zwfhbAyn2cA4MJYnH09US1VnBDK+q9iH/lldskq8Pif2o/ok5KMK7PzztZ6qIA7t aPGfZJIlWduwY+G4J6ESPzhKLvoTKPs= -----END CERTIFICATE-----Generated at Fri Oct 10 23:58:37 2025 by rpki-client