$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa File: 3b03f92f-103e-3d7e-abfa-c7431f00a281.roa (raw, json) Hash identifier: V+sOfwHpNy/F2GSWa0gfATrWCmhlGykteowD9vj/hzE= Subject key identifier: 83:8A:FD:65:06:B7:AC:D8:72:A1:38:D6:AF:91:DC:4F:4D:6A:D8:DA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBFE48D6C0C31F5FEF8A80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa Signing time: Thu 24 Apr 2025 11:17:45 +0000 ROA not before: Thu 24 Apr 2025 11:17:45 +0000 ROA not after: Wed 23 Jul 2025 11:17:45 +0000 asID: 12041 IP address blocks: 199.249.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:fe:48:d6:c0:c3:1f:5f:ef:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:45 2025 GMT Not After : Jul 23 11:17:45 2025 GMT Subject: CN=b30026b9-512f-436f-bc9c-818da8672ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:97:85:c3:22:60:ce:d3:da:d3:20:a8:4c: 3b:77:c8:91:24:49:ae:79:f8:08:1b:09:6d:c4:df: b6:1c:db:27:1e:e3:84:a1:b5:36:25:c0:eb:3d:dd: a4:2f:59:38:43:39:5e:4e:0d:82:1b:27:3c:75:dd: d7:08:88:d3:61:c2:03:e7:47:f6:fc:6f:26:d6:af: 21:0d:72:f2:9f:bf:84:a5:09:08:6b:74:eb:85:89: 84:96:7f:60:1c:6a:85:d2:15:86:d8:b1:ff:cc:4c: c7:07:fd:59:70:50:dc:7e:97:29:c3:cb:7d:a0:ef: 79:a9:b3:85:d0:31:35:a6:80:9f:f1:74:e1:ae:24: f0:87:d1:f3:e3:8d:cf:f0:2b:07:78:65:50:07:21: 14:a6:1c:3c:6e:a5:c2:6b:70:a5:eb:30:72:c3:e7: 53:ca:be:6b:77:99:fe:41:25:97:77:f7:a4:bb:00: 6b:e3:1a:ae:74:69:1f:6f:17:02:ac:db:c2:7b:17: 9c:e8:b1:c7:f0:30:ea:b1:d1:3d:e1:9c:a7:d9:65: a4:cd:70:17:51:e0:12:0a:b7:86:42:30:3a:71:27: 60:09:55:a3:ac:59:a8:46:28:a2:26:cb:b9:69:8a: 54:0f:6d:80:32:c1:8a:c6:c9:f1:a5:30:aa:02:c4: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8A:FD:65:06:B7:AC:D8:72:A1:38:D6:AF:91:DC:4F:4D:6A:D8:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3b03f92f-103e-3d7e-abfa-c7431f00a281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0b:ca:55:2c:67:2f:80:c6:b4:43:ef:56:06:8a:d4:20:08: 07:dc:ac:ba:31:45:b4:c3:25:29:6d:9b:f7:fd:af:12:8b:6c: 2b:d2:45:4d:08:57:cc:41:58:87:66:96:e0:1d:79:c8:57:cc: 7b:75:11:75:22:35:47:c8:73:e9:11:e2:b4:80:5e:46:4c:56: 79:10:4b:9c:5c:e3:40:ea:72:46:3d:b1:a0:9e:e9:fe:21:45: 6e:df:25:0b:e5:61:a3:d9:7a:64:a5:76:7c:60:bb:8a:22:14: 78:b1:57:f9:64:c7:c5:d6:3f:ec:17:d0:4d:1b:a5:a4:a0:d6: e4:91:2e:0e:02:4a:95:e6:85:08:45:db:ce:50:d9:fe:9b:8d: d7:68:15:fd:e2:24:2a:2b:85:7d:e3:42:25:df:9d:7f:2c:f5: 39:e2:66:d8:dd:f2:6d:9b:0d:6f:9e:b6:d7:62:a3:cf:11:60: ad:a1:cb:c5:bd:de:de:f7:f4:1f:41:17:6b:69:02:c4:bf:d4: 2a:f7:77:4e:3a:d1:8f:99:52:98:27:4a:52:da:c1:15:28:38: c7:1c:90:dc:a8:fb:9f:04:8d:35:16:91:cc:ab:30:03:bb:7c: 8f:53:81:ea:c4:d5:a6:f8:60:77:77:9e:6a:73:2f:82:e2:ff: 86:d5:ce:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu/5I1sDDH1/vioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc0NVoXDTI1MDcyMzExMTc0NVowLzEtMCsGA1UEAxMk YjMwMDI2YjktNTEyZi00MzZmLWJjOWMtODE4ZGE4NjcyZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssuXhcMiYM7T2tMgqEw7d8iRJEmuefgIGwlt xN+2HNsnHuOEobU2JcDrPd2kL1k4QzleTg2CGyc8dd3XCIjTYcID50f2/G8m1q8h DXLyn7+EpQkIa3TrhYmEln9gHGqF0hWG2LH/zEzHB/1ZcFDcfpcpw8t9oO95qbOF 0DE1poCf8XThriTwh9Hz443P8CsHeGVQByEUphw8bqXCa3Cl6zByw+dTyr5rd5n+ QSWXd/ekuwBr4xqudGkfbxcCrNvCexec6LHH8DDqsdE94Zyn2WWkzXAXUeASCreG QjA6cSdgCVWjrFmoRiiiJsu5aYpUD22AMsGKxsnxpTCqAsSpvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOK/WUGt6zYcqE41q+R3E9NatjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2IwM2Y5MmYtMTAzZS0z ZDdlLWFiZmEtYzc0MzFmMDBhMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkLylUsZy+AxrRD71YGitQgCAfcrLoxRbTDJSltm/f9rxKLbCvSRU0I V8xBWIdmluAdechXzHt1EXUiNUfIc+kR4rSAXkZMVnkQS5xc40DqckY9saCe6f4h RW7fJQvlYaPZemSldnxgu4oiFHixV/lkx8XWP+wX0E0bpaSg1uSRLg4CSpXmhQhF 285Q2f6bjddoFf3iJCorhX3jQiXfnX8s9TniZtjd8m2bDW+ettdio88RYK2hy8W9 3t739B9BF2tpAsS/1Cr3d0460Y+ZUpgnSlLawRUoOMcckNyo+58EjTUWkcyrMAO7 fI9TgerE1ab4YHd3nmpzL4Li/4bVzoI= -----END CERTIFICATE-----Generated at Tue Apr 29 12:48:48 2025 by rpki-client