$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd07f2b-e974-3619-90f4-a6d8fc2f5c7e.roa File: 3cd07f2b-e974-3619-90f4-a6d8fc2f5c7e.roa (raw, json) Hash identifier: gq9up+Z7aRdQTI7paItKsjkUapmS7EWi7prhHA8XI/U= Subject key identifier: 68:6D:41:42:A0:25:53:14:85:4F:EB:E6:34:29:05:76:E8:EF:B8:14 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBEEDA8881EB9ACDBF8600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd07f2b-e974-3619-90f4-a6d8fc2f5c7e.roa Signing time: Thu 24 Apr 2025 11:17:38 +0000 ROA not before: Thu 24 Apr 2025 11:17:38 +0000 ROA not after: Wed 23 Jul 2025 11:17:38 +0000 asID: 12041 IP address blocks: 199.182.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:ee:da:88:81:eb:9a:cd:bf:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:38 2025 GMT Not After : Jul 23 11:17:38 2025 GMT Subject: CN=2fbd0913-dd35-4c45-a17e-c0934477bb25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:74:bf:03:7b:3f:e3:1d:a9:c8:6a:5f:6a:83: 1e:e0:98:8b:51:21:45:4b:15:f6:67:b4:f8:fd:8e: a2:d3:19:f7:70:2b:95:6a:d0:3c:30:8f:f5:bb:19: 07:08:21:c6:3c:e3:f3:c1:3f:c4:a4:ac:d9:b6:b1: 96:4d:91:8c:5e:f2:40:fe:3f:05:c5:7f:65:e2:c0: f3:cb:7d:54:14:25:07:d8:38:15:6b:26:a1:37:b5: 06:35:c6:7a:22:46:22:cc:b1:f8:0c:9c:f5:c3:cb: 2c:c5:97:3f:71:69:00:0c:c5:a1:4c:6c:9f:a2:b9: 47:ef:e9:bd:d2:22:3e:7d:e1:c3:79:04:82:d8:91: 27:e2:d8:43:0a:20:8c:07:f9:44:0b:39:01:d4:72: f7:a4:97:fc:43:4a:7a:75:0d:a0:7b:a4:96:42:da: 38:01:8c:3b:61:67:69:02:7d:54:cd:03:2a:44:aa: fa:33:d9:ab:ef:33:9c:6d:83:5e:96:8b:e4:fc:ce: 5c:b6:ae:8f:fb:65:42:6b:ec:4c:21:20:4e:b3:af: c8:96:74:a3:cb:90:c7:ad:ad:37:f3:76:57:66:14: 8a:24:f4:67:40:3b:95:ff:28:24:42:cc:9a:6b:7e: 55:1d:95:3d:2d:6a:a2:96:32:a3:c8:8e:b8:13:7e: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6D:41:42:A0:25:53:14:85:4F:EB:E6:34:29:05:76:E8:EF:B8:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cd07f2b-e974-3619-90f4-a6d8fc2f5c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fa:17:4c:99:46:3c:9c:f7:11:e4:fd:a8:61:c4:0c:7f:ae: 14:63:f5:02:b6:a5:e4:46:e0:5c:3f:d2:ea:de:32:4d:a6:e2: 9d:79:8f:ed:c3:aa:13:6e:b4:21:fb:8c:5d:5e:e0:df:4e:c9: 75:35:68:39:02:58:84:83:99:5a:cc:23:a8:4d:62:58:ec:54: 44:b4:d5:f3:24:d3:05:a4:83:73:02:00:48:c9:be:a6:04:cf: 52:9c:1d:63:a7:7c:99:ee:a5:05:34:ed:6f:11:40:e4:f3:7c: da:db:b5:3d:39:a8:25:ed:b8:ab:2a:36:ee:ad:78:97:2d:ec: af:08:e4:31:f0:0e:2c:fc:5e:11:01:62:6b:13:57:7a:fa:6e: 4b:51:c7:78:92:5e:92:5a:9a:b1:63:f5:a2:1d:fa:5a:bf:e0: 86:e8:55:b6:ef:ec:62:46:76:b3:4a:02:ad:ea:35:5f:f2:0d: 5a:ba:e7:ae:6e:1e:33:1a:9b:f6:7d:bc:83:1f:4e:e5:b6:f0: 29:88:8b:3a:b9:4a:aa:be:ce:07:cd:85:71:e7:89:7a:72:94: 2a:5f:96:c0:4a:2c:3d:6f:b3:10:63:88:3f:63:56:58:0a:f4: 0d:75:aa:98:d2:63:a1:b2:e9:f5:81:92:17:42:95:8c:0a:f5: 59:45:a2:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu+7aiIHrms2/hgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTczOFoXDTI1MDcyMzExMTczOFowLzEtMCsGA1UEAxMk MmZiZDA5MTMtZGQzNS00YzQ1LWExN2UtYzA5MzQ0NzdiYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XS/A3s/4x2pyGpfaoMe4JiLUSFFSxX2Z7T4 /Y6i0xn3cCuVatA8MI/1uxkHCCHGPOPzwT/EpKzZtrGWTZGMXvJA/j8FxX9l4sDz y31UFCUH2DgVayahN7UGNcZ6IkYizLH4DJz1w8ssxZc/cWkADMWhTGyforlH7+m9 0iI+feHDeQSC2JEn4thDCiCMB/lECzkB1HL3pJf8Q0p6dQ2ge6SWQto4AYw7YWdp An1UzQMqRKr6M9mr7zOcbYNelovk/M5ctq6P+2VCa+xMISBOs6/IlnSjy5DHra03 83ZXZhSKJPRnQDuV/ygkQsyaa35VHZU9LWqiljKjyI64E34AWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhtQUKgJVMUhU/r5jQpBXbo77gUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2NkMDdmMmItZTk3NC0z NjE5LTkwZjQtYTZkOGZjMmY1YzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr6F0yZRjyc9xHk/ahhxAx/rhRj9QK2peRG4Fw/0ureMk2m4p15j+3D qhNutCH7jF1e4N9OyXU1aDkCWISDmVrMI6hNYljsVES01fMk0wWkg3MCAEjJvqYE z1KcHWOnfJnupQU07W8RQOTzfNrbtT05qCXtuKsqNu6teJct7K8I5DHwDiz8XhEB YmsTV3r6bktRx3iSXpJamrFj9aId+lq/4IboVbbv7GJGdrNKAq3qNV/yDVq6565u HjMam/Z9vIMfTuW28CmIizq5Sqq+zgfNhXHniXpylCpflsBKLD1vsxBjiD9jVlgK 9A11qpjSY6Gy6fWBkhdClYwK9VlFoiI= -----END CERTIFICATE-----Generated at Tue Apr 29 12:03:24 2025 by rpki-client