$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa File: 2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa (raw, json) Hash identifier: FZ6+1ImooE1TIIHhqvsEFGkpVIlpTHcKJLCmszQD3Uc= Subject key identifier: D1:3E:47:81:CD:EA:7F:0D:13:12:F7:C2:3B:A4:14:B7:0E:2A:B9:6D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2131B231E7132881283E450 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa Signing time: Thu 24 Apr 2025 14:13:16 +0000 ROA not before: Thu 24 Apr 2025 14:13:16 +0000 ROA not after: Wed 23 Jul 2025 14:13:16 +0000 asID: 207266 IP address blocks: 199.249.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:13:1b:23:1e:71:32:88:12:83:e4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:13:16 2025 GMT Not After : Jul 23 14:13:16 2025 GMT Subject: CN=88e39482-c715-482b-83be-cc4d61113e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:8b:ba:fd:f9:b1:a1:6f:bb:f8:4b:9c:f8: df:da:ad:25:cd:c0:09:35:fd:37:d4:b0:d3:fe:b3: c7:88:3e:bd:0d:d7:ae:60:5c:25:af:34:a6:02:73: eb:7f:b5:73:bb:8c:ba:a3:cd:67:e5:31:94:7a:c1: 01:44:3c:27:dc:93:2a:b2:78:5b:b8:c3:f5:0e:50: 9b:7a:0e:bf:94:36:00:9b:f2:d1:72:14:5d:f4:de: 79:6d:cf:7a:40:22:a9:f3:2f:02:4f:28:bb:a4:fb: 6b:15:24:6f:1f:59:91:b1:e2:6d:a7:ec:4f:b4:05: be:66:ff:3e:15:cd:d4:61:21:64:a6:07:85:06:d7: 6a:31:0f:52:7f:6a:8b:4d:d3:80:90:57:c0:89:7a: b7:7c:c6:f9:80:52:c1:39:2e:8e:63:8a:ee:fe:17: a1:ba:7a:bb:8a:ae:84:c4:4a:b0:5f:4c:1d:9f:17: 2e:f4:ed:7f:a9:a0:ff:78:34:66:2e:09:9c:71:10: 1e:f0:6b:f7:aa:ad:63:59:75:a6:a7:2e:f3:5d:f4: 0b:21:39:1c:45:01:ad:70:0c:c9:7b:62:41:ac:74: 51:9e:53:31:6a:1c:21:f4:41:64:1b:d6:65:80:14: c0:64:cf:5b:47:90:83:fb:4e:41:69:0e:51:5b:2c: 34:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3E:47:81:CD:EA:7F:0D:13:12:F7:C2:3B:A4:14:B7:0E:2A:B9:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:12:ac:c9:56:6f:ee:19:06:0b:99:29:fe:24:2a:51:b5:ce: 8a:94:39:3a:d2:07:cc:0e:2a:8f:84:d5:ec:5f:80:a5:05:4e: f0:ee:7f:ff:52:1f:a5:36:ed:a6:bf:90:9f:e7:0d:21:cb:12: af:67:0a:df:bf:df:d2:6f:16:ad:17:57:e0:fb:57:06:6e:aa: 03:07:ea:e9:66:d5:47:a9:e5:9f:cc:55:a7:5c:20:30:44:cd: d7:87:4d:1c:99:ca:58:c7:e2:8c:01:14:1e:db:d9:50:fe:85: a1:5f:c4:71:21:24:56:41:cd:26:ff:df:4d:6b:b8:6f:14:55: 5c:ea:0f:6c:8e:3a:fc:90:fd:74:db:9e:69:48:cb:3e:a3:a8: 60:28:7e:7e:38:38:72:d8:58:fb:48:05:03:55:32:f0:56:c7: d2:2b:47:f5:59:26:73:4d:f9:cd:5d:e6:23:63:a2:3c:60:c1: 6a:cf:1e:6b:f0:06:09:34:48:3a:fd:ce:a2:39:33:68:01:61: e7:e1:c2:88:4c:ba:f1:18:38:4a:11:a8:03:27:95:64:81:cb: 86:92:09:be:9c:76:58:81:4d:a7:98:bf:24:76:cf:08:7c:e6: 04:54:f3:30:15:0f:41:e1:ee:b2:d5:d2:2d:51:f7:6e:43:30: 17:1e:eb:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiExsjHnEyiBKD5FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTMxNloXDTI1MDcyMzE0MTMxNlowLzEtMCsGA1UEAxMk ODhlMzk0ODItYzcxNS00ODJiLTgzYmUtY2M0ZDYxMTEzZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfSLuv35saFvu/hLnPjf2q0lzcAJNf031LDT /rPHiD69DdeuYFwlrzSmAnPrf7Vzu4y6o81n5TGUesEBRDwn3JMqsnhbuMP1DlCb eg6/lDYAm/LRchRd9N55bc96QCKp8y8CTyi7pPtrFSRvH1mRseJtp+xPtAW+Zv8+ Fc3UYSFkpgeFBtdqMQ9Sf2qLTdOAkFfAiXq3fMb5gFLBOS6OY4ru/hehunq7iq6E xEqwX0wdnxcu9O1/qaD/eDRmLgmccRAe8Gv3qq1jWXWmpy7zXfQLITkcRQGtcAzJ e2JBrHRRnlMxahwh9EFkG9ZlgBTAZM9bR5CD+05BaQ5RWyw0DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE+R4HN6n8NExL3wjukFLcOKrltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjIzMWI4ZWMtOWM0Yy0z ZmIwLTg4NmUtZjNlOGMxZjllNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8SrMlWb+4ZBguZKf4kKlG1zoqUOTrSB8wOKo+E1exfgKUFTvDuf/9S H6U27aa/kJ/nDSHLEq9nCt+/39JvFq0XV+D7VwZuqgMH6ulm1Uep5Z/MVadcIDBE zdeHTRyZyljH4owBFB7b2VD+haFfxHEhJFZBzSb/301ruG8UVVzqD2yOOvyQ/XTb nmlIyz6jqGAofn44OHLYWPtIBQNVMvBWx9IrR/VZJnNN+c1d5iNjojxgwWrPHmvw Bgk0SDr9zqI5M2gBYefhwohMuvEYOEoRqAMnlWSBy4aSCb6cdliBTaeYvyR2zwh8 5gRU8zAVD0Hh7rLV0i1R925DMBce65w= -----END CERTIFICATE-----Generated at Tue Apr 29 22:22:35 2025 by rpki-client