$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa File: 598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa (raw, json) Hash identifier: 5b7KLC3H4PZZb6kc/bl+DrxZ8DeUL00G4MEQ6Xrjc4c= Subject key identifier: 4F:89:50:73:49:9D:DB:C6:B4:45:C5:29:E1:CE:B4:DA:6D:EB:4E:E4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC1302E0632DB71A374E28 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa Signing time: Thu 24 Apr 2025 11:17:55 +0000 ROA not before: Thu 24 Apr 2025 11:17:55 +0000 ROA not after: Wed 23 Jul 2025 11:17:55 +0000 asID: 12041 IP address blocks: 199.253.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:13:02:e0:63:2d:b7:1a:37:4e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:55 2025 GMT Not After : Jul 23 11:17:55 2025 GMT Subject: CN=bec5a0ac-a4b0-4729-a2f2-db691fecaa72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a6:92:bc:27:c9:74:05:0b:e0:1a:f9:ae:ce: b9:bc:0d:1c:67:2a:4a:bb:66:5e:3e:c2:74:db:3d: e4:94:ef:88:37:4b:f7:ba:f1:69:22:d1:c8:c5:3b: 08:e1:21:93:22:d0:52:2b:75:86:19:7e:c8:3b:c1: 98:40:1d:15:8f:46:9f:71:4b:27:d2:29:61:2d:8d: df:53:d0:7c:fd:14:ba:bc:e9:ae:26:b9:fd:73:18: fc:84:0d:02:92:5c:80:8a:77:18:42:2f:0f:d4:8f: 19:67:b9:9b:2b:c7:61:f3:32:87:e3:94:68:e6:b9: 08:c9:e9:a2:a9:37:94:f1:57:13:60:22:9b:c3:87: 74:8a:d3:25:4e:45:4b:33:66:13:ae:e0:c1:da:ce: 2f:dc:16:8b:e6:43:45:b3:29:4c:30:d8:ef:4d:63: 60:eb:bb:1e:2c:5c:91:1c:16:41:b4:0e:50:a9:54: a3:37:fe:52:c6:52:fe:5e:7c:d7:31:67:25:41:2a: 66:e3:ba:c3:9d:71:ef:40:19:09:dc:75:35:92:41: 53:f2:79:d5:3c:c1:d2:e4:94:ef:d3:c1:54:b7:1b: b5:ea:3b:60:c7:8e:55:78:53:30:74:25:b8:04:71: e0:ea:6c:e0:25:4b:8d:cc:63:66:6f:b5:7a:f7:65: d8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:89:50:73:49:9D:DB:C6:B4:45:C5:29:E1:CE:B4:DA:6D:EB:4E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/598fdd3a-4ef4-39ce-842a-077b672a0b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:9c:61:0e:ab:3c:fd:4e:ac:60:a5:e6:ce:e0:39:de:ed:d7: c5:d2:ff:79:ac:41:2e:8e:bc:be:0a:96:a5:cf:9a:df:33:95: 09:56:0b:b8:f9:f1:74:28:fe:9f:ab:d4:74:5f:3c:97:b9:18: bd:42:f5:ee:6b:ad:92:bd:f2:0f:d2:ce:8e:bd:10:ec:a1:5e: 05:75:b6:f6:86:53:ba:ff:89:7b:d3:de:40:be:b7:7d:5f:ad: b4:ad:af:22:23:83:b2:2b:09:10:14:52:20:ff:3b:5f:6f:1f: ef:41:b6:b8:6d:d8:8b:f7:3b:e0:17:ce:8c:86:2f:48:6e:ce: 45:a5:50:0d:ea:4f:82:88:96:49:14:06:02:d6:25:29:2f:a9: e5:19:81:cb:05:af:8f:fe:dd:e6:61:13:d5:e4:cb:b5:e4:c9: 36:6e:f3:a6:85:35:12:c4:64:5c:21:11:19:cb:4e:e2:d6:6c: 3d:e9:be:ac:06:c1:22:7f:b7:15:b3:4d:6c:3b:c2:ce:c8:88: 36:cd:3e:50:3f:e4:44:e9:91:28:61:30:ca:67:bf:73:c9:81: 80:e3:bd:65:e8:b7:a1:47:23:76:bb:73:6c:77:d9:eb:2a:cf: 18:d2:90:1c:25:5c:9f:20:6d:06:74:e0:5d:a1:85:d6:85:22: 19:84:8e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvBMC4GMttxo3TigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc1NVoXDTI1MDcyMzExMTc1NVowLzEtMCsGA1UEAxMk YmVjNWEwYWMtYTRiMC00NzI5LWEyZjItZGI2OTFmZWNhYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KaSvCfJdAUL4Br5rs65vA0cZypKu2ZePsJ0 2z3klO+IN0v3uvFpItHIxTsI4SGTItBSK3WGGX7IO8GYQB0Vj0afcUsn0ilhLY3f U9B8/RS6vOmuJrn9cxj8hA0CklyAincYQi8P1I8ZZ7mbK8dh8zKH45Ro5rkIyemi qTeU8VcTYCKbw4d0itMlTkVLM2YTruDB2s4v3BaL5kNFsylMMNjvTWNg67seLFyR HBZBtA5QqVSjN/5SxlL+XnzXMWclQSpm47rDnXHvQBkJ3HU1kkFT8nnVPMHS5JTv 08FUtxu16jtgx45VeFMwdCW4BHHg6mzgJUuNzGNmb7V692XYMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+JUHNJndvGtEXFKeHOtNpt607kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTk4ZmRkM2EtNGVmNC0z OWNlLTg0MmEtMDc3YjY3MmEwYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGcYQ6rPP1OrGCl5s7gOd7t18XS/3msQS6OvL4KlqXPmt8zlQlWC7j5 8XQo/p+r1HRfPJe5GL1C9e5rrZK98g/Szo69EOyhXgV1tvaGU7r/iXvT3kC+t31f rbStryIjg7IrCRAUUiD/O19vH+9Btrht2Iv3O+AXzoyGL0huzkWlUA3qT4KIlkkU BgLWJSkvqeUZgcsFr4/+3eZhE9Xky7XkyTZu86aFNRLEZFwhERnLTuLWbD3pvqwG wSJ/txWzTWw7ws7IiDbNPlA/5ETpkShhMMpnv3PJgYDjvWXot6FHI3a7c2x32esq zxjSkBwlXJ8gbQZ04F2hhdaFIhmEjkc= -----END CERTIFICATE-----Generated at Sat May 10 10:21:32 2025 by rpki-client