$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30c2f097-4d67-3f5a-9eb2-6df118c161fb.roa File: 30c2f097-4d67-3f5a-9eb2-6df118c161fb.roa (raw, json) Hash identifier: UaS8kHSNwe8JBfWSOvTc4pLsE3W50HW2bwN9z9gOBDo= Subject key identifier: 1D:03:08:3E:56:76:69:4E:88:40:FA:35:10:8D:65:3C:16:16:D5:89 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC206131FDC1993F6B6980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30c2f097-4d67-3f5a-9eb2-6df118c161fb.roa Signing time: Thu 24 Apr 2025 11:18:01 +0000 ROA not before: Thu 24 Apr 2025 11:18:01 +0000 ROA not after: Wed 23 Jul 2025 11:18:01 +0000 asID: 12041 IP address blocks: 199.254.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:20:61:31:fd:c1:99:3f:6b:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:18:01 2025 GMT Not After : Jul 23 11:18:01 2025 GMT Subject: CN=d46f8392-b761-489d-9cbd-d375ff59a6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:35:0f:97:b4:b2:bf:11:0c:18:31:8a:67: da:2a:7f:05:a7:4b:36:49:1d:9e:e9:fc:6a:a2:d3: 27:fe:55:10:f0:4d:76:3d:ba:6c:eb:fa:86:5c:67: 0b:4f:24:23:fb:f8:4f:f7:77:2f:3c:5c:fb:56:06: 9a:dc:54:82:f9:3d:8b:76:1a:0e:c4:43:ee:4a:b5: cc:1a:60:bd:29:b6:4b:c2:51:13:7d:66:67:2e:f0: e5:9c:35:83:f5:f4:f8:cf:e3:19:3f:27:35:d4:a8: 01:74:f4:0d:57:4d:80:07:e0:99:1f:67:9b:20:22: bd:d5:27:a0:37:76:0c:76:32:5a:de:31:e7:e8:91: 1e:fc:36:b5:b7:92:9b:fd:64:cc:42:b3:59:88:ac: 9e:5f:a2:d4:13:eb:96:74:20:e4:a6:7a:80:e2:cc: 01:0a:25:15:0a:05:51:41:7d:1b:eb:56:29:b3:01: 30:61:c5:44:63:21:1e:1e:14:31:ea:f2:60:66:9c: 20:10:46:72:b0:74:db:87:26:77:dd:46:38:de:3a: b5:f0:df:a0:26:c8:d2:78:88:60:71:6e:65:4d:c9: 04:b0:d9:5a:c1:79:a6:9d:96:59:91:9f:e3:26:08: f9:27:e7:e8:f9:23:9a:32:59:4b:da:c0:ee:a3:5c: 4f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:03:08:3E:56:76:69:4E:88:40:FA:35:10:8D:65:3C:16:16:D5:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/30c2f097-4d67-3f5a-9eb2-6df118c161fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ed:d0:1e:e3:db:ef:af:7e:7e:8b:96:db:89:48:44:18:9c: c0:a8:50:e6:7d:14:c0:f3:8b:a2:83:68:69:7c:fe:39:97:eb: 06:c0:09:95:ac:36:b5:3f:cb:00:24:0c:33:c2:bb:8e:a2:20: 9b:80:30:2e:77:ba:d2:bb:9c:3b:c5:10:23:33:d6:ba:16:96: bc:fb:e9:b7:f3:a3:b8:ce:aa:dc:31:4a:38:17:35:9f:67:52: 80:a0:fb:a8:2e:31:9c:4a:48:89:e4:a0:7e:d5:e1:a5:33:03: 15:88:dd:29:5f:f2:b1:a6:fe:45:19:c5:f6:fb:64:17:9c:04: 4d:63:27:02:96:17:17:84:92:69:bb:ee:62:b5:24:13:91:b0: ed:f9:cd:b8:1a:40:46:76:c0:b7:14:c7:e1:be:6a:66:4c:d0: 8f:b4:96:a5:8d:f4:e6:2d:de:b3:6b:b2:43:20:2a:24:c3:f1: 4d:c1:70:20:cf:62:3a:aa:65:3a:da:e2:7c:d7:b4:47:4c:64: dd:c1:4b:1e:18:81:d4:b4:5d:f5:6f:4b:d0:61:ba:61:9b:65: a2:9e:e4:85:49:3d:8f:6e:9a:ba:b7:e5:03:5d:b7:8d:9e:10: 83:97:2e:21:5c:7f:c4:87:6c:74:b6:0d:90:b9:bd:b3:a5:a5: 06:eb:d1:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvCBhMf3BmT9raYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTgwMVoXDTI1MDcyMzExMTgwMVowLzEtMCsGA1UEAxMk ZDQ2ZjgzOTItYjc2MS00ODlkLTljYmQtZDM3NWZmNTlhNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKA1D5e0sr8RDBgximfaKn8Fp0s2SR2e6fxq otMn/lUQ8E12Pbps6/qGXGcLTyQj+/hP93cvPFz7Vgaa3FSC+T2LdhoOxEPuSrXM GmC9KbZLwlETfWZnLvDlnDWD9fT4z+MZPyc11KgBdPQNV02AB+CZH2ebICK91Seg N3YMdjJa3jHn6JEe/Da1t5Kb/WTMQrNZiKyeX6LUE+uWdCDkpnqA4swBCiUVCgVR QX0b61YpswEwYcVEYyEeHhQx6vJgZpwgEEZysHTbhyZ33UY43jq18N+gJsjSeIhg cW5lTckEsNlawXmmnZZZkZ/jJgj5J+fo+SOaMllL2sDuo1xPqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0DCD5WdmlOiED6NRCNZTwWFtWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzBjMmYwOTctNGQ2Ny0z ZjVhLTllYjItNmRmMTE4YzE2MWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErt0B7j2++vfn6LltuJSEQYnMCoUOZ9FMDzi6KDaGl8/jmX6wbACZWs NrU/ywAkDDPCu46iIJuAMC53utK7nDvFECMz1roWlrz76bfzo7jOqtwxSjgXNZ9n UoCg+6guMZxKSInkoH7V4aUzAxWI3Slf8rGm/kUZxfb7ZBecBE1jJwKWFxeEkmm7 7mK1JBORsO35zbgaQEZ2wLcUx+G+amZM0I+0lqWN9OYt3rNrskMgKiTD8U3BcCDP YjqqZTra4nzXtEdMZN3BSx4YgdS0XfVvS9BhumGbZaKe5IVJPY9umrq35QNdt42e EIOXLiFcf8SHbHS2DZC5vbOlpQbr0XE= -----END CERTIFICATE-----Generated at Tue Apr 29 12:57:22 2025 by rpki-client