$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/15e89007-2909-3b83-bf5b-e2e746813134.roa File: 15e89007-2909-3b83-bf5b-e2e746813134.roa (raw, json) Hash identifier: bsY0Nw7uG/PYIhUaSFZ70Y99svTAjsY/Oo/Q5ZFgVAc= Subject key identifier: CA:70:77:AD:32:56:E1:25:C8:7B:F9:15:DE:B8:E0:FD:15:53:E3:A3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBDBA04089109B77C39F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/15e89007-2909-3b83-bf5b-e2e746813134.roa Signing time: Thu 24 Apr 2025 11:17:29 +0000 ROA not before: Thu 24 Apr 2025 11:17:29 +0000 ROA not after: Wed 23 Jul 2025 11:17:29 +0000 asID: 12041 IP address blocks: 199.182.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:db:a0:40:89:10:9b:77:c3:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:29 2025 GMT Not After : Jul 23 11:17:29 2025 GMT Subject: CN=03b118e2-6e1a-4d51-8b64-0a95ab8706eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:34:ea:a4:eb:04:ba:71:1f:b2:1f:89:48:6e: 04:d1:38:77:0f:34:7e:e3:89:bb:40:dd:28:11:c2: 1a:8e:2c:fc:25:1c:e3:aa:e2:aa:79:ab:bb:c1:4e: 0c:0f:4c:ac:27:7c:2d:7a:ae:c0:8a:e4:8d:2e:ea: ef:09:88:1e:91:88:91:f7:f7:f0:e0:24:36:40:a4: c1:78:9f:95:df:04:ad:ba:3d:94:30:37:aa:84:f8: 7b:6b:3f:80:e0:2f:40:ce:5e:09:1a:a0:a2:8e:92: e4:88:bf:b7:b0:5d:95:24:cd:8a:a3:c7:13:6d:17: 23:60:84:dc:de:9d:9b:45:d3:57:11:80:4e:59:46: e8:c1:41:75:8e:c9:44:4c:52:50:ce:71:61:7f:c5: f9:69:05:0b:e7:b9:e7:5f:d2:af:4e:e6:3a:21:f3: 24:e8:63:1f:2f:63:6b:63:98:fc:18:35:d2:ac:6c: a6:27:99:01:d1:71:6a:a3:b4:88:4e:dd:a9:ce:ba: b9:36:db:42:27:94:d2:36:49:f3:73:72:59:64:54: b5:32:15:81:00:17:ea:a7:de:dc:35:1e:86:08:f8: 05:fe:28:f6:99:ed:4d:2b:60:1f:b4:31:61:a3:37: aa:25:86:e5:13:14:2d:85:92:a2:5a:2f:19:47:6c: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:70:77:AD:32:56:E1:25:C8:7B:F9:15:DE:B8:E0:FD:15:53:E3:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/15e89007-2909-3b83-bf5b-e2e746813134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:cd:8e:b4:b4:10:4b:5f:a3:e4:69:ea:ad:7e:22:2d:5e:6b: b1:24:bf:69:bd:28:57:2e:12:dc:c6:3b:7b:3b:28:8b:2b:1c: 16:4a:fb:41:a3:57:b4:38:9a:bf:c2:a0:f9:51:f7:76:8f:0d: 58:d7:31:07:de:d4:fb:6b:cb:7d:63:c5:3d:aa:5d:75:c9:75: bc:1b:22:18:b5:f0:c3:f0:80:09:ec:d5:14:ed:1b:fb:00:05: 6b:27:7b:29:14:5f:b4:c1:83:84:fe:c1:3f:ae:91:43:93:c8: 42:00:8e:a4:ed:f2:63:f8:69:0f:5c:09:0a:20:07:db:af:6c: 46:75:4a:95:d2:0c:6a:d4:78:7c:25:e9:07:11:cc:e8:c0:4d: 2b:7c:49:dd:42:dc:12:17:ad:99:e2:ae:8d:bd:f0:90:74:75: f1:34:16:55:78:4b:5a:f1:dc:5b:e3:b0:15:36:c0:0a:11:e3: 1b:ca:7f:c4:a0:fd:44:ae:67:0d:aa:1b:1a:ed:aa:e4:7f:aa: ff:ee:98:04:9f:d0:af:1c:9a:a1:8b:55:e8:bb:60:cf:fd:7c: 9b:05:7d:3a:50:50:6e:78:61:29:2d:39:85:63:78:a5:cd:46: c4:09:a0:4b:8f:b5:2f:15:c4:df:58:01:d4:97:9c:d1:4b:aa: b4:ac:f1:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu9ugQIkQm3fDn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcyOVoXDTI1MDcyMzExMTcyOVowLzEtMCsGA1UEAxMk MDNiMTE4ZTItNmUxYS00ZDUxLThiNjQtMGE5NWFiODcwNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTTqpOsEunEfsh+JSG4E0Th3DzR+44m7QN0o EcIajiz8JRzjquKqeau7wU4MD0ysJ3wteq7AiuSNLurvCYgekYiR9/fw4CQ2QKTB eJ+V3wStuj2UMDeqhPh7az+A4C9Azl4JGqCijpLkiL+3sF2VJM2Ko8cTbRcjYITc 3p2bRdNXEYBOWUbowUF1jslETFJQznFhf8X5aQUL57nnX9KvTuY6IfMk6GMfL2Nr Y5j8GDXSrGymJ5kB0XFqo7SITt2pzrq5NttCJ5TSNknzc3JZZFS1MhWBABfqp97c NR6GCPgF/ij2me1NK2AftDFhozeqJYblExQthZKiWi8ZR2wh5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpwd60yVuElyHv5Fd644P0VU+OjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTVlODkwMDctMjkwOS0z YjgzLWJmNWItZTJlNzQ2ODEzMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7NjrS0EEtfo+Rp6q1+Ii1ea7Ekv2m9KFcuEtzGO3s7KIsrHBZK+0Gj V7Q4mr/CoPlR93aPDVjXMQfe1Ptry31jxT2qXXXJdbwbIhi18MPwgAns1RTtG/sA BWsneykUX7TBg4T+wT+ukUOTyEIAjqTt8mP4aQ9cCQogB9uvbEZ1SpXSDGrUeHwl 6QcRzOjATSt8Sd1C3BIXrZniro298JB0dfE0FlV4S1rx3FvjsBU2wAoR4xvKf8Sg /USuZw2qGxrtquR/qv/umASf0K8cmqGLVei7YM/9fJsFfTpQUG54YSktOYVjeKXN RsQJoEuPtS8VxN9YAdSXnNFLqrSs8ZQ= -----END CERTIFICATE-----Generated at Tue Apr 29 15:01:15 2025 by rpki-client