$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/479c6b81-9fb1-36e5-9283-f8b4c4f0fb22.roa File: 479c6b81-9fb1-36e5-9283-f8b4c4f0fb22.roa (raw, json) Hash identifier: lP4ej4B7YW+9AIbQ2iav3PKUpT6eohUFToax2dppGKE= Subject key identifier: BA:C7:E7:72:B7:D4:FF:56:4E:70:BA:6A:EB:02:73:83:E4:91:51:1E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1AB67F992CBD440C818FE00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/479c6b81-9fb1-36e5-9283-f8b4c4f0fb22.roa Signing time: Thu 24 Apr 2025 10:44:20 +0000 ROA not before: Thu 24 Apr 2025 10:44:20 +0000 ROA not after: Wed 23 Jul 2025 10:44:20 +0000 asID: 13714 IP address blocks: 192.149.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ab:67:f9:92:cb:d4:40:c8:18:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 10:44:20 2025 GMT Not After : Jul 23 10:44:20 2025 GMT Subject: CN=3599ebd8-d0a0-473a-8f8b-fd17b9cae07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ab:9d:e9:41:5b:eb:9e:50:68:0d:fc:79:d8: fb:2e:c6:b5:c0:a3:2b:a3:bd:a4:eb:dd:d9:24:4f: fb:0b:43:32:da:09:dc:de:ac:cc:27:8a:c6:09:0b: 60:f8:7a:de:c0:51:3f:64:97:46:70:56:f6:35:73: 8e:4d:77:2d:51:07:39:da:8d:e4:ed:b2:e7:83:31: 21:aa:86:e0:79:b9:c3:e4:20:ca:92:7e:d8:0b:57: b0:fb:0e:2a:09:5c:f5:29:47:ff:c6:91:b9:75:af: 47:c5:61:39:82:ec:55:52:70:34:f9:34:c7:6e:81: e6:1b:50:1d:d3:1a:10:a0:c4:4c:be:ca:a5:5a:ec: 68:7d:b2:b1:73:32:a0:32:8e:18:ca:e9:a4:ff:25: ce:25:8a:e4:ea:8d:3c:ff:6c:02:8c:8a:7f:68:3c: 2b:af:5f:50:2b:f1:c5:ba:77:31:0a:5c:cf:d1:fe: eb:31:de:d2:34:80:99:48:1d:24:ad:5e:f6:30:0e: 63:d7:d7:4f:62:69:bd:e8:d6:65:5e:ed:b2:7d:17: 6d:20:82:d5:30:4e:c1:f0:7d:db:06:99:b0:2d:4f: 2d:7c:be:1f:0b:49:cf:46:9b:c9:df:2f:b0:bc:e7: 57:2c:2b:38:74:2f:ce:74:b3:87:8b:35:5e:48:3a: 7d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C7:E7:72:B7:D4:FF:56:4E:70:BA:6A:EB:02:73:83:E4:91:51:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/479c6b81-9fb1-36e5-9283-f8b4c4f0fb22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 192.149.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ca:94:ca:9e:bb:9e:fe:fa:07:6a:d2:f6:4a:68:f1:d8:f9: 86:b9:b5:d1:73:b1:3d:2e:aa:89:44:cf:92:d2:87:67:0b:80: e5:c0:da:36:91:9f:9d:2e:74:f6:ff:b4:d4:57:3c:0d:b1:30: c9:06:ac:7e:b3:22:92:2a:1d:64:df:65:13:1e:14:8c:9e:14: 8d:60:50:b7:d2:8b:05:5c:10:fe:ee:bf:0e:d4:93:68:23:33: b1:48:1e:2b:bd:4a:2a:c9:5d:82:0c:70:47:ee:76:11:d7:23: 54:f3:ad:e8:15:80:80:09:2e:c4:79:39:c1:54:b3:cb:13:d3: 10:24:c7:2d:64:42:75:de:e0:ff:69:35:21:9e:b0:f9:60:00: 0a:2e:02:6f:b9:29:ad:7f:22:19:7c:71:5f:63:06:f3:22:14: d9:17:85:86:10:64:5f:cc:76:98:fd:fa:ba:35:dc:d1:7a:3d: 1f:ef:a6:12:e1:17:54:f9:15:30:15:08:78:4b:84:eb:26:c5: 45:16:0b:a1:95:13:c2:dd:ad:91:4f:37:ec:45:9f:d0:b9:d2: 8b:31:88:dc:a2:4b:d9:06:98:9b:08:ea:97:7c:19:da:42:f9: ed:0c:51:3c:80:7e:17:b3:2b:5e:33:0f:ba:11:f5:c3:1b:8a: 69:e4:6a:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhq2f5ksvUQMgY/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDEwNDQyMFoXDTI1MDcyMzEwNDQyMFowLzEtMCsGA1UEAxMk MzU5OWViZDgtZDBhMC00NzNhLThmOGItZmQxN2I5Y2FlMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqud6UFb655QaA38edj7Lsa1wKMro72k693Z JE/7C0My2gnc3qzMJ4rGCQtg+HrewFE/ZJdGcFb2NXOOTXctUQc52o3k7bLngzEh qobgebnD5CDKkn7YC1ew+w4qCVz1KUf/xpG5da9HxWE5guxVUnA0+TTHboHmG1Ad 0xoQoMRMvsqlWuxofbKxczKgMo4Yyumk/yXOJYrk6o08/2wCjIp/aDwrr19QK/HF uncxClzP0f7rMd7SNICZSB0krV72MA5j19dPYmm96NZlXu2yfRdtIILVME7B8H3b BpmwLU8tfL4fC0nPRpvJ3y+wvOdXLCs4dC/OdLOHizVeSDp9BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrH53K31P9WTnC6ausCc4PkkVEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDc5YzZiODEtOWZiMS0z NmU1LTkyODMtZjhiNGM0ZjBmYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJU/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbKlMqeu57++gdq0vZKaPHY+Ya5tdFzsT0uqolEz5LSh2cLgOXA2jaR n50udPb/tNRXPA2xMMkGrH6zIpIqHWTfZRMeFIyeFI1gULfSiwVcEP7uvw7Uk2gj M7FIHiu9SirJXYIMcEfudhHXI1TzregVgIAJLsR5OcFUs8sT0xAkxy1kQnXe4P9p NSGesPlgAAouAm+5Ka1/Ihl8cV9jBvMiFNkXhYYQZF/Mdpj9+ro13NF6PR/vphLh F1T5FTAVCHhLhOsmxUUWC6GVE8LdrZFPN+xFn9C50osxiNyiS9kGmJsI6pd8GdpC +e0MUTyAfhezK14zD7oR9cMbimnkauE= -----END CERTIFICATE-----Generated at Wed Apr 30 01:35:37 2025 by rpki-client