$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/731a5484-61f8-3cd5-95d6-d6fce05f8e9a.roa File: 731a5484-61f8-3cd5-95d6-d6fce05f8e9a.roa (raw, json) Hash identifier: Bw3z2KDWlazmhB1Woij9wNK8Udgp5+rg1PrSXxNycM0= Subject key identifier: 93:98:73:43:0E:03:79:F0:54:75:CE:8D:A9:B1:02:DD:7E:CF:E1:8E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A212B5C5D752907F4A48A040 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/731a5484-61f8-3cd5-95d6-d6fce05f8e9a.roa Signing time: Thu 24 Apr 2025 14:12:29 +0000 ROA not before: Thu 24 Apr 2025 14:12:29 +0000 ROA not after: Wed 23 Jul 2025 14:12:29 +0000 asID: 207266 IP address blocks: 199.115.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:b5:c5:d7:52:90:7f:4a:48:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:12:29 2025 GMT Not After : Jul 23 14:12:29 2025 GMT Subject: CN=5b50ac08-81e0-44c2-92ea-48c8105c95f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:22:df:1a:2d:03:2a:83:41:73:44:95:28:27: cc:68:e7:97:77:5b:46:33:34:2d:1a:66:49:71:06: 0b:56:f9:01:f7:78:b7:3e:eb:0b:46:c3:11:60:ca: b6:ed:78:41:46:01:e1:32:3d:04:a8:f6:f6:e5:ff: 29:31:93:b5:8a:bb:00:88:41:ab:03:d4:9d:a7:10: 64:8f:9c:40:4a:bd:f6:05:52:3a:f1:69:ab:eb:0a: 45:4a:ca:36:96:fa:6e:02:f6:04:cc:52:50:42:12: e8:77:91:c0:6d:ba:75:de:43:84:14:21:8e:d4:ff: e4:e9:88:5f:3a:46:b0:19:75:b6:0a:67:66:4b:f8: 6b:2f:5c:a1:ba:ea:67:65:27:5a:42:76:f0:4d:8e: 5a:39:bd:b1:56:f6:25:0c:18:79:eb:36:67:55:ff: 98:92:16:27:62:fe:9c:da:2f:65:4a:68:11:85:c3: 5f:d1:55:82:46:40:b8:f1:f6:72:c1:06:73:e6:4e: 02:90:01:79:b3:a1:8f:cd:0b:25:92:f6:4c:62:cb: b3:61:d6:64:cd:8a:6d:26:ee:2b:36:9f:44:43:b9: e8:97:5f:2a:f6:56:f0:6c:ec:d6:04:b9:62:49:a6: 9d:6b:b2:69:1b:8f:37:b0:c0:e9:78:c7:b2:21:d1: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:98:73:43:0E:03:79:F0:54:75:CE:8D:A9:B1:02:DD:7E:CF:E1:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/731a5484-61f8-3cd5-95d6-d6fce05f8e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:96:f1:63:07:ff:84:1a:31:1d:83:94:60:31:eb:47:21:c7: dd:60:65:d0:cc:f5:12:97:42:4d:34:6e:1e:1e:b2:12:fe:bb: 43:82:1c:6e:47:43:ff:f5:ba:27:20:f0:32:08:ef:10:93:f2: ba:16:95:43:5d:e9:99:2d:23:5a:9e:22:23:ab:a3:0a:b9:51: d7:62:53:8f:0e:21:ba:9d:51:e6:f7:c8:98:96:a4:31:e3:bb: a2:16:96:b2:66:44:95:0e:53:f7:41:56:05:d7:ce:b7:1d:e9: 8e:20:0b:cf:b8:27:8f:ad:9f:96:df:43:b3:cc:2b:3d:e0:58: 82:d1:ee:75:d8:9e:b3:ad:a4:83:da:5b:33:73:a8:07:02:d6: 7e:ae:ab:c8:4e:c5:48:10:93:9f:46:b6:69:b3:85:30:42:df: 2f:1c:fe:33:a3:28:79:04:15:03:81:6d:a6:f7:5f:6a:79:f1: 42:be:8f:b9:0a:78:55:73:4e:19:de:6a:45:f6:3e:45:5a:2a: 8c:db:80:ce:87:98:6a:da:02:c2:a4:b9:10:ea:ab:a7:e9:27: d3:e8:49:84:c1:d1:6c:a3:e5:dc:52:19:41:f7:08:09:cb:e8: 4d:cd:d1:4e:74:66:73:84:13:4b:e7:fd:be:84:f7:43:6f:48: 13:9a:7c:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiErXF11KQf0pIoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTIyOVoXDTI1MDcyMzE0MTIyOVowLzEtMCsGA1UEAxMk NWI1MGFjMDgtODFlMC00NGMyLTkyZWEtNDhjODEwNWM5NWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyLfGi0DKoNBc0SVKCfMaOeXd1tGMzQtGmZJ cQYLVvkB93i3PusLRsMRYMq27XhBRgHhMj0EqPb25f8pMZO1irsAiEGrA9SdpxBk j5xASr32BVI68Wmr6wpFSso2lvpuAvYEzFJQQhLod5HAbbp13kOEFCGO1P/k6Yhf OkawGXW2CmdmS/hrL1yhuupnZSdaQnbwTY5aOb2xVvYlDBh56zZnVf+YkhYnYv6c 2i9lSmgRhcNf0VWCRkC48fZywQZz5k4CkAF5s6GPzQslkvZMYsuzYdZkzYptJu4r Np9EQ7nol18q9lbwbOzWBLliSaada7JpG483sMDpeMeyIdHmkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOYc0MOA3nwVHXOjamxAt1+z+GOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzMxYTU0ODQtNjFmOC0z Y2Q1LTk1ZDYtZDZmY2UwNWY4ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKW8WMH/4QaMR2DlGAx60chx91gZdDM9RKXQk00bh4eshL+u0OCHG5H Q//1uicg8DII7xCT8roWlUNd6ZktI1qeIiOrowq5UddiU48OIbqdUeb3yJiWpDHj u6IWlrJmRJUOU/dBVgXXzrcd6Y4gC8+4J4+tn5bfQ7PMKz3gWILR7nXYnrOtpIPa WzNzqAcC1n6uq8hOxUgQk59GtmmzhTBC3y8c/jOjKHkEFQOBbab3X2p58UK+j7kK eFVzThneakX2PkVaKozbgM6HmGraAsKkuRDqq6fpJ9PoSYTB0Wyj5dxSGUH3CAnL 6E3N0U50ZnOEE0vn/b6E90NvSBOafE4= -----END CERTIFICATE-----Generated at Wed Apr 30 01:35:18 2025 by rpki-client