$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61b21e5d-7c0a-38ba-baeb-2eb0d710a02c.roa File: 61b21e5d-7c0a-38ba-baeb-2eb0d710a02c.roa (raw, json) Hash identifier: 5AFZGnd2i/fJl+X6iBKCzEXcqYT557I8ps59zPQI+AU= Subject key identifier: C8:F1:4C:D9:0A:EF:97:6D:E9:D6:2D:CF:1C:6C:21:E3:67:BC:E0:4B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A213213CE94DA4702BBA7378 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61b21e5d-7c0a-38ba-baeb-2eb0d710a02c.roa Signing time: Thu 24 Apr 2025 14:13:19 +0000 ROA not before: Thu 24 Apr 2025 14:13:19 +0000 ROA not after: Wed 23 Jul 2025 14:13:19 +0000 asID: 207266 IP address blocks: 199.249.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:13:21:3c:e9:4d:a4:70:2b:ba:73:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:13:19 2025 GMT Not After : Jul 23 14:13:19 2025 GMT Subject: CN=6194d2d8-96a6-4ef2-9ccd-07879a82466c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:31:e7:9f:f3:85:56:2d:ae:01:74:a6:cc:01: 1b:d7:2d:ab:b8:1c:c2:fe:28:99:35:db:53:cd:dc: 9a:a7:ef:8a:b6:93:44:ae:c7:8c:0b:c8:25:a5:34: 51:c1:c0:e2:d7:ea:bd:c5:72:f0:6c:93:a0:50:d0: 5c:ec:ef:4d:2e:5c:4b:22:b9:72:bb:f7:ea:1d:ec: 29:2e:e5:09:10:cb:eb:3a:94:68:92:24:f9:1a:8d: 70:3c:81:5b:a1:4b:a2:cb:f4:6c:c2:be:0c:64:64: 97:b7:fa:aa:a1:ad:f6:01:b5:a0:35:b0:29:28:bb: df:17:ec:14:91:65:61:39:8e:3d:34:6d:d8:65:18: 40:ef:d6:25:58:2f:e6:e2:14:6c:41:08:2d:d0:8c: d3:68:3e:14:8f:1b:15:e0:e9:2f:fa:cf:0f:1d:e7: a2:6f:15:a0:80:ae:c4:28:22:ae:5d:dc:a5:e7:29: c7:84:b4:cc:ee:0e:70:d2:49:5b:bb:17:6d:d0:0c: c0:ff:42:66:f4:e6:54:20:38:6d:01:bc:8e:aa:12: 38:f2:a9:42:7c:ff:ff:56:b7:a3:4d:7f:1a:fe:76: 26:e8:21:b3:4e:1b:74:26:54:8f:dd:26:1b:07:fe: 1a:cc:80:e6:a4:11:3c:81:a4:25:eb:04:95:4a:b1: 7e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F1:4C:D9:0A:EF:97:6D:E9:D6:2D:CF:1C:6C:21:E3:67:BC:E0:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/61b21e5d-7c0a-38ba-baeb-2eb0d710a02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:af:77:45:47:8b:5f:f6:20:8a:27:78:7e:88:ea:23:fe:b6: 1c:3e:0e:68:de:b3:19:f0:8c:92:5e:95:87:ca:4b:c4:2d:ac: c0:cf:09:63:ec:09:ad:54:8b:05:e4:ba:2b:8a:41:43:1d:bf: 58:6d:f2:bb:e3:12:1f:66:4e:37:87:7f:1a:02:b5:da:92:5e: ef:ee:df:de:e6:ac:c5:da:a6:3e:8f:36:6d:94:74:c0:c2:ca: 6f:ca:ab:9c:af:28:4d:db:07:d3:19:b4:a9:c1:60:f7:5e:b1: 59:66:f0:db:5b:79:f5:4e:de:0c:94:02:4d:45:0c:37:3e:85: 8a:df:0f:73:78:40:26:46:20:cf:2c:93:74:e4:8a:ed:5e:85: ec:f7:f6:56:ab:15:87:5a:90:92:fe:ae:7c:be:67:55:ba:02: a4:5d:8e:e9:21:d8:50:6b:03:dc:87:a6:aa:f6:d0:f9:2a:50: 09:7b:02:4c:4e:31:c0:b7:1d:ac:0c:9e:65:6c:ed:98:73:93: 58:d1:ac:f1:7e:78:f5:68:e1:a1:c1:d3:11:7a:a6:1e:6b:7c: a7:99:51:ff:4c:a9:42:11:b4:98:be:85:af:c2:95:00:2a:d3: 15:2d:db:aa:28:4d:a7:d0:11:d8:fc:a1:cd:7c:f6:46:80:16: 5f:63:fb:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEyE86U2kcCu6c3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTMxOVoXDTI1MDcyMzE0MTMxOVowLzEtMCsGA1UEAxMk NjE5NGQyZDgtOTZhNi00ZWYyLTljY2QtMDc4NzlhODI0NjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDHnn/OFVi2uAXSmzAEb1y2ruBzC/iiZNdtT zdyap++KtpNErseMC8glpTRRwcDi1+q9xXLwbJOgUNBc7O9NLlxLIrlyu/fqHewp LuUJEMvrOpRokiT5Go1wPIFboUuiy/Rswr4MZGSXt/qqoa32AbWgNbApKLvfF+wU kWVhOY49NG3YZRhA79YlWC/m4hRsQQgt0IzTaD4UjxsV4Okv+s8PHeeibxWggK7E KCKuXdyl5ynHhLTM7g5w0klbuxdt0AzA/0Jm9OZUIDhtAbyOqhI48qlCfP//Vrej TX8a/nYm6CGzTht0JlSP3SYbB/4azIDmpBE8gaQl6wSVSrF+LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjxTNkK75dt6dYtzxxsIeNnvOBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjFiMjFlNWQtN2MwYS0z OGJhLWJhZWItMmViMGQ3MTBhMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFevd0VHi1/2IIoneH6I6iP+thw+DmjesxnwjJJelYfKS8QtrMDPCWPs Ca1UiwXkuiuKQUMdv1ht8rvjEh9mTjeHfxoCtdqSXu/u397mrMXapj6PNm2UdMDC ym/Kq5yvKE3bB9MZtKnBYPdesVlm8NtbefVO3gyUAk1FDDc+hYrfD3N4QCZGIM8s k3Tkiu1ehez39larFYdakJL+rny+Z1W6AqRdjukh2FBrA9yHpqr20PkqUAl7AkxO McC3HawMnmVs7Zhzk1jRrPF+ePVo4aHB0xF6ph5rfKeZUf9MqUIRtJi+ha/ClQAq 0xUt26ooTafQEdj8oc189kaAFl9j+54= -----END CERTIFICATE-----Generated at Tue Apr 29 21:07:10 2025 by rpki-client