$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2797cec6-dd1c-359f-be1a-51bf1f83dbe9.roa File: 2797cec6-dd1c-359f-be1a-51bf1f83dbe9.roa (raw, json) Hash identifier: uAvTELTK6CaHuA/ePNeLjw9sRnFfrCaFxaB6sxl0gVs= Subject key identifier: FA:64:FA:C6:91:FB:35:DD:9F:42:DB:61:E0:83:B3:0E:9C:A7:96:3D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBA4B92EA3890772706100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2797cec6-dd1c-359f-be1a-51bf1f83dbe9.roa Signing time: Thu 24 Apr 2025 11:17:03 +0000 ROA not before: Thu 24 Apr 2025 11:17:03 +0000 ROA not after: Wed 23 Jul 2025 11:17:03 +0000 asID: 12041 IP address blocks: 199.115.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:a4:b9:2e:a3:89:07:72:70:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:03 2025 GMT Not After : Jul 23 11:17:03 2025 GMT Subject: CN=e51b8107-2ccc-4ca6-841f-133b45476fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:94:27:85:5f:be:2c:d8:01:fa:ff:8b:78: 40:c2:a2:73:80:16:01:a5:50:35:8e:97:f1:b7:fd: 8c:73:95:d0:10:8d:09:05:21:e6:8a:a3:35:b5:89: a6:20:1f:b0:cf:db:48:a7:91:4d:3e:52:ce:2b:be: 81:49:c9:4b:1f:7e:ac:88:2d:00:8b:a1:57:9d:db: 01:bd:31:d4:cd:d5:d1:2e:9a:c0:55:ea:76:1b:e6: 94:57:81:5d:5c:2c:93:a7:31:41:cd:6c:4f:50:68: 21:3e:18:4b:58:77:24:57:43:9e:07:22:e6:0f:2b: 27:c4:9f:02:f2:59:54:b5:fc:88:22:79:85:c8:c2: 07:58:19:b1:cf:83:32:00:59:04:93:07:a1:e0:9a: 57:d1:a5:b0:c5:82:1f:f2:31:52:cf:d5:3f:d8:75: fb:28:39:ad:bf:d5:63:2c:04:36:73:00:67:e0:1e: 23:ae:f7:f7:1c:10:f9:c7:7f:aa:77:2b:d9:65:31: c2:d4:e3:6e:c4:7b:a3:07:e7:0a:92:b3:c6:7d:84: da:01:c5:93:48:70:ea:c3:f2:9d:c9:94:d3:c3:05: e8:43:5a:20:7a:ca:b0:4b:59:04:53:59:79:7a:a3: 4d:15:59:d6:54:78:20:b1:16:7d:db:02:29:ab:4d: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:64:FA:C6:91:FB:35:DD:9F:42:DB:61:E0:83:B3:0E:9C:A7:96:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2797cec6-dd1c-359f-be1a-51bf1f83dbe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:95:b9:44:df:dc:e7:dc:20:bf:a8:d8:01:39:b6:25:e4:70: ff:14:6d:27:26:da:57:bc:af:dd:93:cf:ab:44:d3:72:bb:f3: 2c:b6:79:fc:8d:54:cc:90:96:cd:5f:86:a0:1d:b6:13:58:2e: 9a:97:b2:b9:7f:e6:c6:75:cc:73:5f:58:8d:b2:47:f3:10:d4: 4b:e9:92:96:6f:a7:89:2b:4c:a6:32:2e:47:31:a0:cc:7c:30: b6:d8:24:cb:fd:f2:16:13:79:9b:74:e6:0e:f5:53:64:5c:c4: 4e:bb:71:61:39:ca:c2:b2:d9:ec:f3:36:28:d6:7d:95:b3:e4: 3f:41:f8:32:28:2f:73:9b:2b:b4:58:45:bb:87:df:f2:c2:10: 8e:f2:3f:9a:b0:0b:a0:6c:03:c4:ac:8e:4a:39:72:38:27:54: c0:59:bb:c9:28:42:01:cb:68:e9:ff:0c:83:bf:76:12:5c:2b: 68:10:72:36:7e:b5:dd:a4:60:52:af:b9:e2:80:a3:a7:83:78: 52:6f:ee:a8:9c:cd:77:92:63:d1:ef:35:10:61:e9:56:64:c8: c9:87:40:ea:69:38:bc:56:5b:4f:2e:8f:d1:b5:dd:a8:c4:cf: c7:fa:e3:47:f8:87:23:70:09:25:18:73:8a:4d:dd:0c:cb:b4: ad:91:b3:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu6S5LqOJB3JwYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcwM1oXDTI1MDcyMzExMTcwM1owLzEtMCsGA1UEAxMk ZTUxYjgxMDctMmNjYy00Y2E2LTg0MWYtMTMzYjQ1NDc2ZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp6UJ4VfvizYAfr/i3hAwqJzgBYBpVA1jpfx t/2Mc5XQEI0JBSHmiqM1tYmmIB+wz9tIp5FNPlLOK76BSclLH36siC0Ai6FXndsB vTHUzdXRLprAVep2G+aUV4FdXCyTpzFBzWxPUGghPhhLWHckV0OeByLmDysnxJ8C 8llUtfyIInmFyMIHWBmxz4MyAFkEkweh4JpX0aWwxYIf8jFSz9U/2HX7KDmtv9Vj LAQ2cwBn4B4jrvf3HBD5x3+qdyvZZTHC1ONuxHujB+cKkrPGfYTaAcWTSHDqw/Kd yZTTwwXoQ1ogesqwS1kEU1l5eqNNFVnWVHggsRZ92wIpq00COQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpk+saR+zXdn0LbYeCDsw6cp5Y9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjc5N2NlYzYtZGQxYy0z NTlmLWJlMWEtNTFiZjFmODNkYmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOVuUTf3OfcIL+o2AE5tiXkcP8UbScm2le8r92Tz6tE03K78yy2efyN VMyQls1fhqAdthNYLpqXsrl/5sZ1zHNfWI2yR/MQ1EvpkpZvp4krTKYyLkcxoMx8 MLbYJMv98hYTeZt05g71U2RcxE67cWE5ysKy2ezzNijWfZWz5D9B+DIoL3ObK7RY RbuH3/LCEI7yP5qwC6BsA8Ssjko5cjgnVMBZu8koQgHLaOn/DIO/dhJcK2gQcjZ+ td2kYFKvueKAo6eDeFJv7qiczXeSY9HvNRBh6VZkyMmHQOppOLxWW08uj9G13ajE z8f640f4hyNwCSUYc4pN3QzLtK2Rs9g= -----END CERTIFICATE-----Generated at Tue Apr 29 22:16:58 2025 by rpki-client