$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0dc505b5-ebe6-3e64-9df1-ea1e2a7dad76.roa File: 0dc505b5-ebe6-3e64-9df1-ea1e2a7dad76.roa (raw, json) Hash identifier: I5w6isE0fjZ0QkFSdMQgbPGPeWD2QBxEQHmLYZLzKow= Subject key identifier: 99:51:0F:E0:1C:C0:1F:B8:E8:2A:79:7E:5D:80:F2:F0:12:19:5D:1D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC359312E7DF97C4690140 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0dc505b5-ebe6-3e64-9df1-ea1e2a7dad76.roa Signing time: Thu 24 Apr 2025 11:18:11 +0000 ROA not before: Thu 24 Apr 2025 11:18:11 +0000 ROA not after: Wed 23 Jul 2025 11:18:11 +0000 asID: 12041 IP address blocks: 199.254.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:35:93:12:e7:df:97:c4:69:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:18:11 2025 GMT Not After : Jul 23 11:18:11 2025 GMT Subject: CN=334e17c1-2ca4-4dbd-9402-0a407fd41e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:f6:df:6e:46:47:f8:f4:27:4b:93:41:5b: fb:e4:70:ae:7c:91:56:a7:26:e0:29:5f:6b:6e:ce: 85:90:7b:a7:02:a6:a3:fe:e1:85:d9:af:1b:3b:1f: d0:57:44:fd:d4:44:38:79:a7:f3:59:59:9e:c1:6b: c1:c9:86:66:8c:6a:1c:02:cd:7e:a7:a4:c6:b0:3e: 65:64:86:29:ff:88:5d:b7:aa:7c:5f:fd:46:fe:55: 28:e2:17:c9:b0:a4:02:b7:87:f6:e8:e9:3d:a5:f4: 0f:75:ab:18:a7:bf:52:ea:e6:8c:e9:ff:47:ef:a0: 93:89:51:19:60:51:59:f3:91:50:09:9e:9f:fa:60: bd:41:da:e7:03:fb:cc:b5:65:c0:63:de:5d:fa:9a: 37:b2:5c:03:e7:80:07:72:cb:81:77:4c:16:f8:cb: 65:aa:1f:35:85:6e:dd:e3:b9:ef:77:4a:e0:81:24: fb:d1:84:50:82:15:ea:63:7b:bf:1a:a5:01:15:c4: e9:dd:16:ef:1d:29:5d:04:34:24:ea:9b:02:ec:95: 5e:4d:66:75:88:67:a0:98:71:6b:a2:23:63:d9:58: 21:cc:77:02:28:08:86:cb:15:2f:50:a7:bf:56:01: ea:cc:ea:8b:05:d3:53:cd:fc:53:d6:87:3e:b6:c0: 8b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:51:0F:E0:1C:C0:1F:B8:E8:2A:79:7E:5D:80:F2:F0:12:19:5D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0dc505b5-ebe6-3e64-9df1-ea1e2a7dad76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:88:b8:6e:09:7c:04:42:1b:57:35:58:32:b2:2f:9e:a6:69: 28:14:9c:53:fd:9a:99:33:12:03:ee:52:e7:71:d6:22:01:d7: a3:c6:0d:a9:ef:4c:4d:db:d1:93:02:7a:cd:06:b4:96:99:4e: 0e:42:38:00:5c:a9:59:57:17:2b:cc:58:ce:59:59:e2:61:01: 10:4c:78:35:40:e9:53:2d:e1:5b:f5:ea:c9:ec:56:1e:b0:de: 6e:9b:30:4b:ee:6c:f6:ab:ec:52:a3:5a:eb:e8:1f:e4:a2:2d: 77:6b:b7:b1:75:f1:9e:9e:26:6d:26:36:a6:71:d1:be:84:f4: fa:a8:02:6f:e2:1b:7a:d1:6d:f3:b7:af:e7:b7:5d:48:53:25: 43:da:8e:a1:72:31:e2:26:d9:fc:1d:fd:ac:17:82:b1:55:0e: 7c:da:87:ed:41:1a:3e:c2:af:6c:81:09:84:13:3d:a2:6f:8b: d6:86:6d:5f:2c:38:42:58:c2:0d:85:85:df:36:3e:93:2a:11: ef:fb:51:2d:cb:d7:68:6f:96:d4:eb:15:1d:df:07:dc:16:fb: a1:d8:1f:54:7a:d5:fa:56:6b:d9:da:bf:0a:71:5b:69:11:2c: 9e:0f:95:b0:e1:87:bf:b3:15:c1:d4:52:c9:14:d1:af:9d:46: 21:c8:e3:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvDWTEuffl8RpAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTgxMVoXDTI1MDcyMzExMTgxMVowLzEtMCsGA1UEAxMk MzM0ZTE3YzEtMmNhNC00ZGJkLTk0MDItMGE0MDdmZDQxZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ72325GR/j0J0uTQVv75HCufJFWpybgKV9r bs6FkHunAqaj/uGF2a8bOx/QV0T91EQ4eafzWVmewWvByYZmjGocAs1+p6TGsD5l ZIYp/4hdt6p8X/1G/lUo4hfJsKQCt4f26Ok9pfQPdasYp79S6uaM6f9H76CTiVEZ YFFZ85FQCZ6f+mC9QdrnA/vMtWXAY95d+po3slwD54AHcsuBd0wW+Mtlqh81hW7d 47nvd0rggST70YRQghXqY3u/GqUBFcTp3RbvHSldBDQk6psC7JVeTWZ1iGegmHFr oiNj2VghzHcCKAiGyxUvUKe/VgHqzOqLBdNTzfxT1oc+tsCLhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlRD+AcwB+46Cp5fl2A8vASGV0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMGRjNTA1YjUtZWJlNi0z ZTY0LTlkZjEtZWExZTJhN2RhZDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaIuG4JfARCG1c1WDKyL56maSgUnFP9mpkzEgPuUudx1iIB16PGDanv TE3b0ZMCes0GtJaZTg5COABcqVlXFyvMWM5ZWeJhARBMeDVA6VMt4Vv16snsVh6w 3m6bMEvubPar7FKjWuvoH+SiLXdrt7F18Z6eJm0mNqZx0b6E9PqoAm/iG3rRbfO3 r+e3XUhTJUPajqFyMeIm2fwd/awXgrFVDnzah+1BGj7Cr2yBCYQTPaJvi9aGbV8s OEJYwg2Fhd82PpMqEe/7US3L12hvltTrFR3fB9wW+6HYH1R61fpWa9navwpxW2kR LJ4PlbDhh7+zFcHUUskU0a+dRiHI4zw= -----END CERTIFICATE-----Generated at Tue Apr 29 19:47:59 2025 by rpki-client