$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/66e67b5e-fe8d-3f66-a577-083b330037fb.roa File: 66e67b5e-fe8d-3f66-a577-083b330037fb.roa (raw, json) Hash identifier: gxl92tK7u27F1u1hJSQSsjWP43xNT1gphFrXySnbJgg= Subject key identifier: 8E:69:CF:C2:4B:D4:CF:60:75:3F:70:1D:2E:E0:4D:2A:42:04:B2:DC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A212E0FE1E00F40805167A40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/66e67b5e-fe8d-3f66-a577-083b330037fb.roa Signing time: Thu 24 Apr 2025 14:12:49 +0000 ROA not before: Thu 24 Apr 2025 14:12:49 +0000 ROA not after: Wed 23 Jul 2025 14:12:49 +0000 asID: 207266 IP address blocks: 199.249.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:e0:fe:1e:00:f4:08:05:16:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:12:49 2025 GMT Not After : Jul 23 14:12:49 2025 GMT Subject: CN=35ec5f88-f8be-42b8-8077-38a37c570e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:87:90:50:89:df:ca:1d:50:91:58:1c:10:c0: bc:fd:bf:80:f1:f7:ff:5f:fe:48:2c:31:e5:17:ef: c3:fe:92:9e:c2:d4:55:db:09:1d:6c:ff:f1:f7:7d: 23:76:57:50:c9:a9:2f:63:93:2d:e5:c6:14:74:dc: 51:a7:44:ad:60:34:42:8e:22:2d:4f:13:2b:01:d4: e4:e5:4b:ed:f1:8b:35:58:05:f1:c3:3d:a7:4c:6b: 31:f9:7a:cd:c9:20:3d:89:58:73:88:5c:86:81:70: 11:1d:31:80:fc:c6:2b:ed:f8:21:f5:f0:21:c4:d9: d4:db:59:37:9f:e6:97:0d:8b:c1:0e:c1:f4:7d:bc: 6b:68:f3:f5:83:d5:dd:d0:65:a7:bd:52:de:60:38: aa:79:ab:26:cc:de:11:0a:37:1c:a8:f0:7e:8d:3a: 32:0c:c8:1b:71:44:9e:d1:d3:c5:e0:21:f4:e5:fa: e7:92:f4:41:c2:14:1b:ac:d6:06:d5:06:29:bf:7c: 6f:10:ea:ad:3f:d2:80:18:d2:20:de:4a:95:5f:b5: df:82:e0:e8:e3:b1:5c:64:82:ca:25:ff:f4:91:54: 13:19:91:aa:76:f7:42:c8:b5:91:4c:6e:9c:16:73: 42:59:6a:c4:08:78:32:24:00:73:a0:93:76:80:d2: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:69:CF:C2:4B:D4:CF:60:75:3F:70:1D:2E:E0:4D:2A:42:04:B2:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/66e67b5e-fe8d-3f66-a577-083b330037fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e0:d1:f9:ea:78:ce:88:f0:a3:a1:cf:76:22:76:1f:4a:99: bc:35:39:b8:da:48:08:9a:31:01:dc:b9:e3:ff:56:50:ee:73: 4b:b4:4b:55:b7:f0:ca:98:28:07:95:d8:44:44:aa:dc:e5:24: 20:6e:e7:0a:11:b9:1e:93:6f:8a:6e:be:6b:0c:89:4c:e6:6d: 15:a7:b5:27:3b:56:7c:00:40:ee:14:f0:8e:89:ab:95:d9:7b: fa:36:88:9b:5c:10:35:49:e1:59:33:66:35:d0:0a:b0:49:2c: 16:04:ab:31:5c:cb:7d:55:24:fd:e8:a3:30:a0:64:c1:d2:33: 41:da:bf:9f:b7:65:df:03:25:9f:e5:15:52:62:53:1f:15:d6: 20:fc:7b:ae:4b:17:ee:91:33:29:19:b0:1f:b9:16:64:fc:cf: 7f:79:31:96:6a:ec:58:5e:a2:af:6d:02:ff:e7:82:ee:6c:15: 33:c0:39:66:c5:fa:ae:a9:0c:14:7a:82:93:51:cf:02:6b:c7: de:11:e6:5d:ea:f5:c7:a9:a4:10:cc:01:36:27:17:51:3c:c4: e5:30:75:4f:b3:2c:59:c3:3f:40:29:4a:de:30:24:76:b3:0d: fd:00:d1:5b:de:37:9e:84:30:18:48:0b:33:de:49:4f:a4:e4: fd:05:ed:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEuD+HgD0CAUWekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTI0OVoXDTI1MDcyMzE0MTI0OVowLzEtMCsGA1UEAxMk MzVlYzVmODgtZjhiZS00MmI4LTgwNzctMzhhMzdjNTcwZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIeQUInfyh1QkVgcEMC8/b+A8ff/X/5ILDHl F+/D/pKewtRV2wkdbP/x930jdldQyakvY5Mt5cYUdNxRp0StYDRCjiItTxMrAdTk 5Uvt8Ys1WAXxwz2nTGsx+XrNySA9iVhziFyGgXARHTGA/MYr7fgh9fAhxNnU21k3 n+aXDYvBDsH0fbxraPP1g9Xd0GWnvVLeYDiqeasmzN4RCjccqPB+jToyDMgbcUSe 0dPF4CH05frnkvRBwhQbrNYG1QYpv3xvEOqtP9KAGNIg3kqVX7XfguDo47FcZILK Jf/0kVQTGZGqdvdCyLWRTG6cFnNCWWrECHgyJABzoJN2gNKrcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5pz8JL1M9gdT9wHS7gTSpCBLLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjZlNjdiNWUtZmU4ZC0z ZjY2LWE1NzctMDgzYjMzMDAzN2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHg0fnqeM6I8KOhz3Yidh9Kmbw1ObjaSAiaMQHcueP/VlDuc0u0S1W3 8MqYKAeV2EREqtzlJCBu5woRuR6Tb4puvmsMiUzmbRWntSc7VnwAQO4U8I6Jq5XZ e/o2iJtcEDVJ4VkzZjXQCrBJLBYEqzFcy31VJP3oozCgZMHSM0Hav5+3Zd8DJZ/l FVJiUx8V1iD8e65LF+6RMykZsB+5FmT8z395MZZq7Fheoq9tAv/ngu5sFTPAOWbF +q6pDBR6gpNRzwJrx94R5l3q9ceppBDMATYnF1E8xOUwdU+zLFnDP0ApSt4wJHaz Df0A0VveN56EMBhICzPeSU+k5P0F7Yc= -----END CERTIFICATE-----Generated at Tue Apr 29 22:22:46 2025 by rpki-client