$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46c5202a-9d84-3a1d-8956-f6014181cec4.roa File: 46c5202a-9d84-3a1d-8956-f6014181cec4.roa (raw, json) Hash identifier: RL59XUkWXCA93BQgUysmNtv28HObNcc/sZkCkVjLhps= Subject key identifier: 40:5C:2F:28:EC:97:71:39:D5:D8:93:E6:19:34:F3:D8:E5:46:51:4A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBF9D8911BA1A47D9B42C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46c5202a-9d84-3a1d-8956-f6014181cec4.roa Signing time: Thu 24 Apr 2025 11:17:43 +0000 ROA not before: Thu 24 Apr 2025 11:17:43 +0000 ROA not after: Wed 23 Jul 2025 11:17:43 +0000 asID: 12041 IP address blocks: 199.249.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:f9:d8:91:1b:a1:a4:7d:9b:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:43 2025 GMT Not After : Jul 23 11:17:43 2025 GMT Subject: CN=10d2e44d-2525-4135-9545-4f0b31c99f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bb:cc:0b:a3:5c:6a:b9:9f:ce:e4:3d:66:e5: c6:3f:3a:ce:c1:af:61:2c:2d:ab:b6:56:67:a8:5f: 96:b6:8d:43:f2:64:92:fd:2d:da:c8:fb:08:7e:10: 1b:8b:f5:d5:d2:05:0a:46:cc:b1:40:a0:60:dc:83: 51:2e:c0:51:27:36:29:fa:95:2e:8e:cc:92:a9:b3: 98:ac:af:fb:32:d3:59:a5:4f:a5:6c:75:0d:e4:7b: 72:55:b7:76:a1:ca:24:6c:26:e1:e4:e2:60:e7:6d: 6a:60:8e:e6:56:0a:0e:b6:dc:a7:38:77:93:2a:69: 04:7c:35:5f:ae:5c:43:6c:4c:d1:e5:c7:75:60:c2: e4:1f:f9:23:3f:c4:61:ba:15:c3:6e:b7:84:04:9c: cf:90:ff:67:58:57:c4:3a:04:3e:1f:67:08:50:ab: 93:65:68:24:1d:8c:c1:68:1b:25:87:7a:f6:7d:9f: 45:f3:19:1d:bb:70:89:ce:af:4d:d1:c6:ba:c4:8c: ef:b6:3f:7c:e7:4d:3c:6e:38:f7:31:6d:c9:86:2e: 69:5b:fe:d1:51:94:7f:5a:af:e8:1b:3d:ec:79:9c: 7a:3d:77:7c:84:4d:de:48:a9:b0:92:80:af:d3:ce: 7e:f3:27:cd:0c:8b:79:25:2d:8f:bd:1c:fe:21:40: fe:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5C:2F:28:EC:97:71:39:D5:D8:93:E6:19:34:F3:D8:E5:46:51:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/46c5202a-9d84-3a1d-8956-f6014181cec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:37:87:7b:cf:f1:29:f7:e4:fa:84:58:17:c4:a0:16:56:a3: 96:6e:f1:d4:3b:74:1b:25:9a:7b:12:2b:fd:e5:38:ef:b2:1b: d7:e4:16:39:75:f2:bb:bf:b4:84:93:c3:5b:46:cb:22:4b:02: be:7b:ad:ea:f9:8e:26:a0:37:bd:1f:16:3d:d7:4c:f9:e5:1a: 22:e9:7d:02:06:00:77:53:b8:1b:07:22:e7:6b:77:0d:b1:86: 3b:42:b7:22:69:3c:64:36:2e:9e:cd:d8:56:90:08:94:a7:00: 7e:7e:d5:f2:47:3c:74:b9:b0:39:e6:8d:f6:40:94:79:37:36: a9:b4:e3:7b:cf:44:f9:ac:50:a2:31:4d:93:4c:df:bc:c1:43: 74:00:3c:15:28:c5:46:04:3e:b7:4c:be:32:f6:fb:93:02:63: a4:67:fc:ec:93:5d:fb:17:78:56:a1:b5:ec:0f:b3:69:1d:6e: c7:62:a4:11:33:63:55:e8:be:ac:3d:9b:c4:f0:22:cb:2c:10: 1a:1c:b3:d8:6d:8a:c5:09:da:c5:a2:09:ec:1e:cd:e3:bb:6f: 72:ac:17:40:0f:07:f7:61:18:2e:3a:93:82:18:e0:44:7e:c5: 45:09:86:1b:12:76:fb:56:f7:17:77:9f:e0:69:35:17:17:d2: 5e:98:5f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu/nYkRuhpH2bQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc0M1oXDTI1MDcyMzExMTc0M1owLzEtMCsGA1UEAxMk MTBkMmU0NGQtMjUyNS00MTM1LTk1NDUtNGYwYjMxYzk5ZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LvMC6NcarmfzuQ9ZuXGPzrOwa9hLC2rtlZn qF+Wto1D8mSS/S3ayPsIfhAbi/XV0gUKRsyxQKBg3INRLsBRJzYp+pUujsySqbOY rK/7MtNZpU+lbHUN5HtyVbd2ocokbCbh5OJg521qYI7mVgoOttynOHeTKmkEfDVf rlxDbEzR5cd1YMLkH/kjP8RhuhXDbreEBJzPkP9nWFfEOgQ+H2cIUKuTZWgkHYzB aBslh3r2fZ9F8xkdu3CJzq9N0ca6xIzvtj985008bjj3MW3Jhi5pW/7RUZR/Wq/o Gz3seZx6PXd8hE3eSKmwkoCv085+8yfNDIt5JS2PvRz+IUD+owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBcLyjsl3E51diT5hk089jlRlFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDZjNTIwMmEtOWQ4NC0z YTFkLTg5NTYtZjYwMTQxODFjZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI3h3vP8Sn35PqEWBfEoBZWo5Zu8dQ7dBslmnsSK/3lOO+yG9fkFjl1 8ru/tISTw1tGyyJLAr57rer5jiagN70fFj3XTPnlGiLpfQIGAHdTuBsHIudrdw2x hjtCtyJpPGQ2Lp7N2FaQCJSnAH5+1fJHPHS5sDnmjfZAlHk3Nqm043vPRPmsUKIx TZNM37zBQ3QAPBUoxUYEPrdMvjL2+5MCY6Rn/OyTXfsXeFahtewPs2kdbsdipBEz Y1Xovqw9m8TwIsssEBocs9htisUJ2sWiCewezeO7b3KsF0APB/dhGC46k4IY4ER+ xUUJhhsSdvtW9xd3n+BpNRcX0l6YXyg= -----END CERTIFICATE-----Generated at Tue Apr 29 12:11:24 2025 by rpki-client