$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/497fed05-f30a-3532-96a3-e283e59854ba.roa File: 497fed05-f30a-3532-96a3-e283e59854ba.roa (raw, json) Hash identifier: tjXFXj1NYVfUbKxsVlMminy+eEv+UQdZ08K/U1EfADI= Subject key identifier: CF:66:DF:42:3C:2A:A9:3E:5C:47:4A:33:78:F7:46:F1:2D:01:1C:FF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBCC997E0FC491E4DFB940 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/497fed05-f30a-3532-96a3-e283e59854ba.roa Signing time: Thu 24 Apr 2025 11:17:22 +0000 ROA not before: Thu 24 Apr 2025 11:17:22 +0000 ROA not after: Wed 23 Jul 2025 11:17:22 +0000 asID: 12041 IP address blocks: 199.182.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:cc:99:7e:0f:c4:91:e4:df:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:22 2025 GMT Not After : Jul 23 11:17:22 2025 GMT Subject: CN=48215a8c-78f2-408d-aa21-65985c3a5810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:e8:62:7b:c9:f5:44:e3:ba:64:b4:ab:fb: 84:68:b1:0a:22:0c:bb:04:4f:df:96:02:33:29:d9: a0:80:cd:0d:eb:98:24:77:79:70:32:6a:6d:2f:3d: 90:10:f9:bd:ac:58:67:dc:01:af:48:d1:28:e7:3c: 31:66:39:05:f1:b8:23:63:91:46:76:84:0b:e8:da: 16:42:43:9a:6b:96:a5:54:1c:d0:38:b6:25:78:63: 46:70:8d:d8:61:5f:e0:50:0e:1c:37:fb:44:99:d6: a4:fa:e0:6b:ad:3f:b3:22:d1:9b:95:8c:0a:f2:00: 4b:58:d6:cd:19:d7:c6:a7:42:5d:4c:49:04:43:a9: 1a:ca:00:12:47:5e:ae:63:b1:b5:c8:b8:62:af:ea: 1e:af:1b:a5:00:e4:33:d9:7e:51:ae:b8:b9:c0:fa: c8:cc:e7:31:db:af:97:19:ca:ec:a1:79:2d:e8:87: 1c:5a:4f:f9:49:b9:2a:1f:4f:d2:ca:3e:21:72:bd: f9:53:7c:35:69:fc:9b:29:6d:e2:7a:34:3e:1e:0e: 92:75:cb:be:73:a7:fa:89:74:dd:58:29:c2:7f:b1: cb:7f:a9:91:4b:43:7a:d0:b9:c8:1b:c7:48:05:90: f8:ba:21:a5:34:05:32:b4:d0:89:14:97:91:57:9b: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:66:DF:42:3C:2A:A9:3E:5C:47:4A:33:78:F7:46:F1:2D:01:1C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/497fed05-f30a-3532-96a3-e283e59854ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:83:e6:34:30:a5:c3:3a:99:bf:3a:47:09:aa:5a:3b:36:f3: ec:1a:b2:f2:a7:f5:2f:2f:46:5d:42:76:4d:be:8d:e4:75:4d: 0a:6c:fc:7d:ae:03:cf:ab:01:cd:4d:62:78:49:9e:c7:43:61: 29:d8:15:c2:ae:6e:2c:3f:f2:03:a7:b3:6c:32:cc:f5:f4:70: 15:4d:b4:8a:04:54:f6:2c:e4:06:75:cd:f3:cb:5f:ec:27:c9: 5a:7f:24:0d:43:59:a3:1e:e6:30:ab:3c:de:bb:c8:dd:22:bf: 62:34:63:d0:7f:56:64:7e:a5:41:65:71:e4:e7:17:1b:43:f8: d1:cc:b9:df:b9:93:02:37:20:14:14:6b:01:5a:83:37:90:b4: 33:65:f2:bb:99:54:a1:e8:87:fd:4e:95:1a:9e:82:85:d6:ad: cd:40:d6:70:f7:27:ad:ce:0c:48:90:a2:cc:a7:32:c1:a6:7b: 12:a1:de:e4:fb:5e:13:fd:83:00:1f:dd:e4:bc:f5:6d:a8:3f: e9:51:b8:94:87:5d:fa:ed:91:ba:75:ef:1e:35:53:35:cb:77: 51:83:aa:a2:78:19:72:17:63:f3:d7:59:07:e3:ff:c0:ec:80: a8:d4:01:84:4d:df:92:b6:1c:ad:d5:81:60:f6:14:6e:9f:d4: 37:11:38:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu8yZfg/EkeTfuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcyMloXDTI1MDcyMzExMTcyMlowLzEtMCsGA1UEAxMk NDgyMTVhOGMtNzhmMi00MDhkLWFhMjEtNjU5ODVjM2E1ODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOjoYnvJ9UTjumS0q/uEaLEKIgy7BE/flgIz KdmggM0N65gkd3lwMmptLz2QEPm9rFhn3AGvSNEo5zwxZjkF8bgjY5FGdoQL6NoW QkOaa5alVBzQOLYleGNGcI3YYV/gUA4cN/tEmdak+uBrrT+zItGblYwK8gBLWNbN GdfGp0JdTEkEQ6kaygASR16uY7G1yLhir+oerxulAOQz2X5Rrri5wPrIzOcx26+X GcrsoXkt6IccWk/5SbkqH0/Syj4hcr35U3w1afybKW3iejQ+Hg6Sdcu+c6f6iXTd WCnCf7HLf6mRS0N60LnIG8dIBZD4uiGlNAUytNCJFJeRV5tDnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9m30I8Kqk+XEdKM3j3RvEtARz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDk3ZmVkMDUtZjMwYS0z NTMyLTk2YTMtZTI4M2U1OTg1NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+D5jQwpcM6mb86RwmqWjs28+wasvKn9S8vRl1Cdk2+jeR1TQps/H2u A8+rAc1NYnhJnsdDYSnYFcKubiw/8gOns2wyzPX0cBVNtIoEVPYs5AZ1zfPLX+wn yVp/JA1DWaMe5jCrPN67yN0iv2I0Y9B/VmR+pUFlceTnFxtD+NHMud+5kwI3IBQU awFagzeQtDNl8ruZVKHoh/1OlRqegoXWrc1A1nD3J63ODEiQosynMsGmexKh3uT7 XhP9gwAf3eS89W2oP+lRuJSHXfrtkbp17x41UzXLd1GDqqJ4GXIXY/PXWQfj/8Ds gKjUAYRN35K2HK3VgWD2FG6f1DcRODg= -----END CERTIFICATE-----Generated at Tue Apr 29 13:07:56 2025 by rpki-client