$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2f7b0405-983e-36f9-a1b5-ad8768f28047.roa File: 2f7b0405-983e-36f9-a1b5-ad8768f28047.roa (raw, json) Hash identifier: P1HaP2mEOpv8HP1QhfbS2lqHiu7vjpjYuQ2YzJS/WZo= Subject key identifier: 59:59:D2:3B:6B:7F:A1:AB:5A:BA:58:D5:EB:82:26:D7:36:68:31:7F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBE71DB5158C0B86773D80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2f7b0405-983e-36f9-a1b5-ad8768f28047.roa Signing time: Thu 24 Apr 2025 11:17:34 +0000 ROA not before: Thu 24 Apr 2025 11:17:34 +0000 ROA not after: Wed 23 Jul 2025 11:17:34 +0000 asID: 12041 IP address blocks: 199.182.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:e7:1d:b5:15:8c:0b:86:77:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:34 2025 GMT Not After : Jul 23 11:17:34 2025 GMT Subject: CN=0e92d49f-b4fb-4807-a28e-1d4455c23d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:16:65:95:79:15:e8:65:ac:89:4c:6a:a2: 5d:a7:01:f3:2c:a4:04:dd:46:3d:9e:8f:92:54:72: 15:25:0d:51:b0:cc:40:32:b5:1e:52:94:9a:31:01: 91:8d:08:56:97:8f:e6:9e:d1:61:a2:48:7e:cf:34: 86:6e:57:bf:f2:d5:f1:50:2c:6b:ef:29:64:90:2d: da:1b:a2:cd:a4:cb:ba:e2:10:03:21:3b:be:c1:43: 09:94:45:2c:4b:c1:8c:51:c3:2e:be:60:7e:33:ff: 83:85:3d:1d:5e:a2:56:9e:1d:ad:c7:7a:a0:fb:2f: 89:7d:bb:45:92:87:c5:91:51:83:1f:d1:55:10:60: e0:13:99:39:5e:7e:07:db:b3:6b:e2:9e:c0:5c:db: f7:7d:c1:35:28:54:d9:f7:17:70:0e:98:c8:e0:39: f8:5a:6b:25:07:e3:cb:2b:e4:70:c9:13:99:58:77: 4a:f0:77:1f:94:b2:2e:ce:8f:02:34:0a:4c:1a:5d: aa:86:59:55:dd:d5:b8:bf:66:ea:bc:db:b8:60:89: 21:a7:c6:8d:74:4a:27:e3:3f:b3:17:18:4a:8d:a5: 13:55:a0:71:7f:70:0e:34:11:73:1d:8b:f7:08:eb: ad:15:e1:65:87:f1:9e:be:58:8d:3c:a0:07:53:69: 9a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:59:D2:3B:6B:7F:A1:AB:5A:BA:58:D5:EB:82:26:D7:36:68:31:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2f7b0405-983e-36f9-a1b5-ad8768f28047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7e:22:fd:c5:d8:d5:ab:f3:73:14:bd:65:a0:1c:40:14:dc: 45:15:09:4b:82:9e:eb:5a:25:35:45:c4:c3:c6:f7:22:f3:09: f1:d8:9e:78:ed:95:18:47:50:aa:cd:53:6b:18:bb:d8:55:e0: d9:ad:e4:31:32:bf:3f:b0:dd:ce:23:3d:20:58:28:3d:38:b6: ee:43:f6:72:f9:aa:1e:b1:03:16:d0:60:c3:4b:06:ce:1f:e1: f9:3f:5b:3d:66:27:75:3d:65:13:3b:fc:72:39:8c:d5:4d:09: 43:18:6a:6e:de:13:4a:a4:cb:09:18:27:8f:c5:db:89:be:46: b6:52:ae:45:84:a3:51:cc:2f:9e:17:9c:b3:0f:c1:cc:8d:d4: c4:89:8d:12:6a:74:f4:ef:cd:80:9e:e2:7f:1b:ab:df:6d:4f: 5e:cf:de:87:77:f5:85:09:0a:88:02:17:c0:53:3f:5b:d1:a7: 64:8c:ca:73:10:a0:c8:ba:2a:26:a6:6b:0a:fc:bf:83:b6:ea: f0:fe:df:9f:c4:67:6a:ce:ef:e4:35:b3:fb:dc:a1:01:42:81: 01:dc:d0:d9:fe:2c:8e:c5:16:f3:37:ea:4a:30:6f:e0:6e:7d: 1a:43:6c:fd:d2:2e:e9:e5:11:10:ba:0c:c6:9b:91:28:c0:f5: 9e:03:77:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu+cdtRWMC4Z3PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTczNFoXDTI1MDcyMzExMTczNFowLzEtMCsGA1UEAxMk MGU5MmQ0OWYtYjRmYi00ODA3LWEyOGUtMWQ0NDU1YzIzZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoocWZZV5FehlrIlMaqJdpwHzLKQE3UY9no+S VHIVJQ1RsMxAMrUeUpSaMQGRjQhWl4/mntFhokh+zzSGble/8tXxUCxr7ylkkC3a G6LNpMu64hADITu+wUMJlEUsS8GMUcMuvmB+M/+DhT0dXqJWnh2tx3qg+y+JfbtF kofFkVGDH9FVEGDgE5k5Xn4H27Nr4p7AXNv3fcE1KFTZ9xdwDpjI4Dn4WmslB+PL K+RwyROZWHdK8HcflLIuzo8CNApMGl2qhllV3dW4v2bqvNu4YIkhp8aNdEon4z+z FxhKjaUTVaBxf3AONBFzHYv3COutFeFlh/GevliNPKAHU2maBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlZ0jtrf6GrWrpY1euCJtc2aDF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmY3YjA0MDUtOTgzZS0z NmY5LWExYjUtYWQ4NzY4ZjI4MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV+Iv3F2NWr83MUvWWgHEAU3EUVCUuCnutaJTVFxMPG9yLzCfHYnnjt lRhHUKrNU2sYu9hV4Nmt5DEyvz+w3c4jPSBYKD04tu5D9nL5qh6xAxbQYMNLBs4f 4fk/Wz1mJ3U9ZRM7/HI5jNVNCUMYam7eE0qkywkYJ4/F24m+RrZSrkWEo1HML54X nLMPwcyN1MSJjRJqdPTvzYCe4n8bq99tT17P3od39YUJCogCF8BTP1vRp2SMynMQ oMi6Kiamawr8v4O26vD+35/EZ2rO7+Q1s/vcoQFCgQHc0Nn+LI7FFvM36kowb+Bu fRpDbP3SLunlERC6DMabkSjA9Z4DdwQ= -----END CERTIFICATE-----Generated at Tue Apr 29 23:27:44 2025 by rpki-client