$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/15d028db-5174-349a-b470-03b869893a33.roa File: 15d028db-5174-349a-b470-03b869893a33.roa (raw, json) Hash identifier: 5Uiuqd8KvTk9EHj4ORJHh91a+Pmk5PQDQEn4AXvJOls= Subject key identifier: 3D:AB:13:F9:1B:76:11:C9:39:D1:F4:16:14:3B:24:72:80:AB:66:8E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBBBDD4B96DFD408974A80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/15d028db-5174-349a-b470-03b869893a33.roa Signing time: Thu 24 Apr 2025 11:17:14 +0000 ROA not before: Thu 24 Apr 2025 11:17:14 +0000 ROA not after: Wed 23 Jul 2025 11:17:14 +0000 asID: 12041 IP address blocks: 199.182.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:bb:dd:4b:96:df:d4:08:97:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:14 2025 GMT Not After : Jul 23 11:17:14 2025 GMT Subject: CN=8cac52d8-6510-421e-b41e-25cf81054b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:65:7b:73:fe:44:1e:02:e2:ea:30:dd:db:de: 0d:40:84:ee:ed:0d:fb:c1:f0:73:5b:75:e1:c2:d7: 92:23:d5:be:d0:27:ac:f8:c3:b1:b7:b3:51:9b:ee: 09:0f:ce:ce:f0:04:06:c6:90:1e:1d:3a:53:ba:c7: 17:56:81:47:a1:bf:13:a3:c6:d1:a9:2a:45:5e:a3: b0:a2:f1:8f:a2:d6:6d:61:2b:36:94:62:96:f5:90: 6c:63:c8:49:a9:e5:49:73:87:37:e2:77:a7:ad:ff: 52:3d:87:4c:fb:69:d6:a9:c5:de:03:0c:ec:dc:56: cf:b9:0c:f0:db:0f:e9:e1:b1:90:30:6a:cd:e3:47: 1e:a8:d5:65:04:be:2d:53:ef:62:35:59:e4:86:fe: 0b:41:34:cb:e1:5b:0a:2a:70:f5:00:30:8e:82:26: b1:77:48:d2:51:95:b7:a9:43:de:1e:b8:58:0c:7a: f1:2c:0d:c1:4c:a8:3b:0a:19:46:32:58:04:42:3a: 7e:c8:9e:84:f3:d1:d7:e5:6c:46:07:62:2c:ce:f8: d6:28:c8:3b:42:8d:ec:0f:c3:56:4d:fa:ad:66:72: 6c:d3:0f:e0:79:ec:19:f2:d5:0e:b0:2f:44:3c:d4: 47:1d:47:37:f4:12:1b:21:a5:ab:5f:be:e7:f5:55: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AB:13:F9:1B:76:11:C9:39:D1:F4:16:14:3B:24:72:80:AB:66:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/15d028db-5174-349a-b470-03b869893a33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:af:64:58:b2:a0:c7:c0:aa:6b:9a:ef:23:c7:94:8b:c8:a4: db:65:70:3e:16:e0:1d:5c:7b:02:3b:2b:37:4d:4d:42:fb:51: c1:39:13:71:5e:66:83:9e:8a:46:fa:b2:9d:12:3f:55:d5:d4: 39:78:0d:d1:38:85:7d:7e:d8:80:6a:ae:b6:8b:f8:cc:4e:02: ef:16:47:25:63:21:99:2d:b2:9b:a6:df:be:ea:cf:5d:ce:d1: f5:64:37:d8:aa:c6:4f:30:54:44:25:50:7e:08:5e:fa:6a:bb: 5c:d6:af:53:68:a0:a5:70:7e:2d:5a:98:36:71:1c:d0:19:26: 82:5b:94:5b:0a:52:f3:d7:28:5a:87:27:fd:8f:23:d4:d5:29: 80:7f:99:dd:44:ec:52:84:ee:3b:90:cd:cf:76:05:ea:9e:67: 28:8e:2a:e2:71:77:ca:dd:f1:23:62:2e:be:2a:69:53:83:b0: b8:44:f4:e0:41:33:4b:77:64:45:f2:ae:6c:82:6b:7d:8e:27: 3b:d7:91:48:1f:ea:5e:bb:4d:3c:ba:67:2a:e7:13:11:f8:92: 79:42:cd:de:b1:e7:65:85:d7:06:10:b0:77:4e:80:da:15:d2: 2e:85:88:1f:51:85:98:d8:e9:29:33:e7:dd:3f:1f:a1:33:6a: 59:df:af:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu7vdS5bf1AiXSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcxNFoXDTI1MDcyMzExMTcxNFowLzEtMCsGA1UEAxMk OGNhYzUyZDgtNjUxMC00MjFlLWI0MWUtMjVjZjgxMDU0YjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2V7c/5EHgLi6jDd294NQITu7Q37wfBzW3Xh wteSI9W+0Ces+MOxt7NRm+4JD87O8AQGxpAeHTpTuscXVoFHob8To8bRqSpFXqOw ovGPotZtYSs2lGKW9ZBsY8hJqeVJc4c34nenrf9SPYdM+2nWqcXeAwzs3FbPuQzw 2w/p4bGQMGrN40ceqNVlBL4tU+9iNVnkhv4LQTTL4VsKKnD1ADCOgiaxd0jSUZW3 qUPeHrhYDHrxLA3BTKg7ChlGMlgEQjp+yJ6E89HX5WxGB2IszvjWKMg7Qo3sD8NW TfqtZnJs0w/geewZ8tUOsC9EPNRHHUc39BIbIaWrX77n9VVxyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2rE/kbdhHJOdH0FhQ7JHKAq2aOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTVkMDI4ZGItNTE3NC0z NDlhLWI0NzAtMDNiODY5ODkzYTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqvZFiyoMfAqmua7yPHlIvIpNtlcD4W4B1cewI7KzdNTUL7UcE5E3Fe ZoOeikb6sp0SP1XV1Dl4DdE4hX1+2IBqrraL+MxOAu8WRyVjIZktspum377qz13O 0fVkN9iqxk8wVEQlUH4IXvpqu1zWr1NooKVwfi1amDZxHNAZJoJblFsKUvPXKFqH J/2PI9TVKYB/md1E7FKE7juQzc92BeqeZyiOKuJxd8rd8SNiLr4qaVODsLhE9OBB M0t3ZEXyrmyCa32OJzvXkUgf6l67TTy6ZyrnExH4knlCzd6x52WF1wYQsHdOgNoV 0i6FiB9RhZjY6Skz590/H6Ezalnfr34= -----END CERTIFICATE-----Generated at Tue Apr 29 19:08:22 2025 by rpki-client