$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6155041b-ceab-322f-83f5-59df4b81aaba.roa File: 6155041b-ceab-322f-83f5-59df4b81aaba.roa (raw, json) Hash identifier: 4RI5pC58TMD39Vh0hv/Upxs3YTIO61vrgi87QC2hP9I= Subject key identifier: 66:D0:10:24:49:A0:EC:C7:59:36:BE:E1:D5:25:90:A0:7E:1F:8F:17 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBDD2716C6F8F7B76E4EC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6155041b-ceab-322f-83f5-59df4b81aaba.roa Signing time: Thu 24 Apr 2025 11:17:29 +0000 ROA not before: Thu 24 Apr 2025 11:17:29 +0000 ROA not after: Wed 23 Jul 2025 11:17:29 +0000 asID: 12041 IP address blocks: 199.182.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:dd:27:16:c6:f8:f7:b7:6e:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:29 2025 GMT Not After : Jul 23 11:17:29 2025 GMT Subject: CN=70e3a979-e73e-4f03-9b3f-780f09298894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:98:d6:70:dc:02:10:75:9e:bb:d6:b1:34: 1c:f9:b7:fc:83:5d:23:a4:e2:bb:6d:a0:40:85:77: 66:d6:9e:ff:c3:55:30:f1:92:4e:11:81:cf:17:7d: 82:a1:36:58:3b:8f:79:4d:13:9e:3d:99:1a:9c:8c: e9:31:0e:1c:8d:98:31:ac:73:41:1a:c9:74:14:f3: 20:a1:70:12:74:8a:06:84:0b:33:32:58:90:26:a1: 44:31:da:d1:d3:c6:74:a9:db:3c:38:f7:9c:a7:b1: b7:b4:7b:b3:9d:f3:9e:3f:e3:bc:5d:7a:f4:f3:59: 58:a2:35:4f:ee:30:71:14:cf:63:6a:8e:17:af:af: d3:87:0a:fe:20:70:e9:e3:49:52:75:bb:1e:00:bf: 66:3e:0b:35:bf:9c:d8:6b:24:22:7f:ba:b0:83:21: 2f:e4:ad:87:f3:c9:be:b2:52:63:bc:10:ae:42:17: 3f:c0:48:9b:af:ed:28:3f:d5:89:d3:f5:68:cc:83: 5c:4d:a6:d3:44:20:07:52:77:16:06:a4:a8:13:a4: e7:54:ae:87:0f:84:fb:00:dc:37:9b:c3:97:f9:b1: bf:c5:96:a4:e0:95:2b:aa:13:65:a0:22:17:41:a5: 9b:28:81:fa:0b:85:98:2a:20:13:5a:6f:c8:47:1b: 3f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D0:10:24:49:A0:EC:C7:59:36:BE:E1:D5:25:90:A0:7E:1F:8F:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6155041b-ceab-322f-83f5-59df4b81aaba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:09:fa:3c:d9:9a:00:b7:19:14:40:bd:9c:ec:4c:6c:74:93: 64:41:bb:80:e0:46:4b:39:50:95:ab:17:ee:ab:37:cc:43:ba: 4b:2d:67:f2:e7:ca:e4:2c:f9:1a:c3:6a:81:8f:04:01:43:bd: bf:12:fd:bf:32:ef:b4:dd:14:86:ae:f2:c0:f1:7b:2a:33:59: 46:ba:e2:fe:63:34:36:7a:cd:5a:96:3d:fa:9e:26:ea:5e:f5: 60:71:cf:6a:0c:fc:2b:d5:55:39:f5:ae:72:2c:db:8b:c4:c9: ef:9e:9e:47:76:d2:49:f8:d2:58:8b:55:77:33:c7:8d:e0:04: ab:21:5a:39:b5:56:e6:c9:32:e2:d3:95:04:b1:01:da:44:1b: 11:0b:19:a7:0c:4a:d7:4d:4d:72:27:31:03:db:eb:1d:c3:94: 5b:1c:8a:77:35:6c:73:8f:45:39:34:12:93:bd:18:01:34:1c: 62:2a:53:9e:0a:21:ee:e7:c2:b2:b4:cf:37:07:9d:1a:24:b5: b3:38:73:8a:ee:eb:7d:32:46:ba:83:c4:50:e1:d3:e5:57:9a: 43:4c:fd:e7:5a:12:a2:de:62:bd:be:69:74:7d:cb:f4:fc:3d: 98:8a:a7:c1:14:e8:11:50:63:81:16:66:3f:4f:c5:d6:e0:55: 15:73:f0:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu90nFsb497duTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcyOVoXDTI1MDcyMzExMTcyOVowLzEtMCsGA1UEAxMk NzBlM2E5NzktZTczZS00ZjAzLTliM2YtNzgwZjA5Mjk4ODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtaY1nDcAhB1nrvWsTQc+bf8g10jpOK7baBA hXdm1p7/w1Uw8ZJOEYHPF32CoTZYO495TROePZkanIzpMQ4cjZgxrHNBGsl0FPMg oXASdIoGhAszMliQJqFEMdrR08Z0qds8OPecp7G3tHuznfOeP+O8XXr081lYojVP 7jBxFM9jao4Xr6/Thwr+IHDp40lSdbseAL9mPgs1v5zYayQif7qwgyEv5K2H88m+ slJjvBCuQhc/wEibr+0oP9WJ0/VozINcTabTRCAHUncWBqSoE6TnVK6HD4T7ANw3 m8OX+bG/xZak4JUrqhNloCIXQaWbKIH6C4WYKiATWm/IRxs/AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbQECRJoOzHWTa+4dUlkKB+H48XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjE1NTA0MWItY2VhYi0z MjJmLTgzZjUtNTlkZjRiODFhYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMJ+jzZmgC3GRRAvZzsTGx0k2RBu4DgRks5UJWrF+6rN8xDukstZ/Ln yuQs+RrDaoGPBAFDvb8S/b8y77TdFIau8sDxeyozWUa64v5jNDZ6zVqWPfqeJupe 9WBxz2oM/CvVVTn1rnIs24vEye+enkd20kn40liLVXczx43gBKshWjm1VubJMuLT lQSxAdpEGxELGacMStdNTXInMQPb6x3DlFscinc1bHOPRTk0EpO9GAE0HGIqU54K Ie7nwrK0zzcHnRoktbM4c4ru630yRrqDxFDh0+VXmkNM/edaEqLeYr2+aXR9y/T8 PZiKp8EU6BFQY4EWZj9PxdbgVRVz8JE= -----END CERTIFICATE-----Generated at Tue Apr 29 21:36:58 2025 by rpki-client