$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/75b2986f-9dcb-3f3d-b9f6-9608617d7be0.roa File: 75b2986f-9dcb-3f3d-b9f6-9608617d7be0.roa (raw, json) Hash identifier: T/Gw10Cr/9CeUN16h9t3c8cYAW/J1o/CdzN09iG2j18= Subject key identifier: 06:CF:2F:09:E5:55:DE:4A:02:B1:F8:11:A0:39:84:26:13:CF:1E:4C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A212F57502EE4EC77988E000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/75b2986f-9dcb-3f3d-b9f6-9608617d7be0.roa Signing time: Thu 24 Apr 2025 14:12:59 +0000 ROA not before: Thu 24 Apr 2025 14:12:59 +0000 ROA not after: Wed 23 Jul 2025 14:12:59 +0000 asID: 207266 IP address blocks: 199.249.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:f5:75:02:ee:4e:c7:79:88:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:12:59 2025 GMT Not After : Jul 23 14:12:59 2025 GMT Subject: CN=e84ae4cc-53e4-46b5-aae7-3478522fae91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:44:e9:fb:17:3e:e3:c4:21:69:fc:b0:c6: 75:f1:5f:60:eb:36:67:e0:e2:83:1e:91:d3:d6:85: 88:ba:b2:9f:7e:c5:34:54:85:b7:36:b6:c2:36:11: 71:92:78:8a:82:2b:e9:c7:16:c7:f2:09:48:c8:a6: 5f:43:01:5c:81:55:ff:22:f6:bc:ae:3a:fc:f4:25: 8a:ef:6d:31:ea:31:8b:bf:2b:0e:e5:10:44:fe:40: 26:7e:17:65:d9:87:42:76:2f:3a:43:eb:1a:45:74: f4:b7:86:61:73:06:a3:e5:a0:90:61:23:6f:37:9e: f7:5f:95:39:d8:64:cd:73:b7:db:4d:18:de:04:bf: 9d:dc:40:34:25:59:59:70:b3:e1:97:ec:34:80:75: 6b:3c:9b:54:b7:ed:09:8b:09:1d:94:77:05:0b:ca: f7:11:00:37:1f:80:9e:f8:86:dd:e4:08:70:dc:68: 74:0c:44:45:21:ed:f9:8d:ec:92:04:8e:70:4a:8d: 78:69:3d:81:c0:4a:0b:c9:0e:16:17:20:f5:5a:d3: 59:6c:27:d9:28:1c:50:a9:72:23:94:e0:a3:16:a8: 77:64:08:f7:b0:a0:8b:6c:c1:4b:58:8a:48:31:72: ea:f2:35:da:2d:bd:62:54:5c:1d:b4:3e:51:ab:0a: d3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CF:2F:09:E5:55:DE:4A:02:B1:F8:11:A0:39:84:26:13:CF:1E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/75b2986f-9dcb-3f3d-b9f6-9608617d7be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9f:0f:4d:55:80:d0:41:47:d3:b1:cd:a0:14:31:e3:f4:ed: 9d:3b:a9:52:6c:a9:4b:69:47:a6:5a:cb:7a:09:6d:63:fe:76: a9:29:aa:48:93:70:bc:1e:19:94:e9:69:e7:4f:c3:79:e9:ef: 5f:45:bc:ca:ab:d0:44:f6:0e:5e:62:79:b2:22:be:f5:45:4f: d7:2b:ec:9b:0d:30:4d:29:51:50:ba:76:0c:cd:d9:2d:7c:5a: ef:5b:ed:9b:4f:c5:d4:5f:c6:da:99:4d:ba:20:11:3c:50:19: 92:30:39:46:aa:63:b6:13:6f:1d:90:8c:c0:a5:97:89:b7:b1: 5a:ae:ed:23:67:e5:6c:8b:25:0a:37:62:82:88:e3:28:98:8d: b3:10:85:ce:98:66:a7:11:80:7c:0f:5f:ad:35:38:b3:a9:e9: 7d:9f:6b:48:4c:3a:bb:4e:c5:b1:5a:d0:7f:e1:2a:95:fa:fa: f5:9d:1c:14:30:33:6c:60:22:b3:db:8b:a5:66:a5:de:30:a0: 8e:2a:18:d2:e8:ca:61:86:a0:ee:4b:a7:d7:fd:c2:bd:87:81: e1:31:47:41:17:63:d0:63:77:76:79:4a:8b:95:81:3b:6f:cc: 31:79:a9:b8:d8:1a:9a:c9:42:be:89:47:63:0a:56:9d:c7:7b: 5f:cf:28:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEvV1Au5Ox3mI4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTI1OVoXDTI1MDcyMzE0MTI1OVowLzEtMCsGA1UEAxMk ZTg0YWU0Y2MtNTNlNC00NmI1LWFhZTctMzQ3ODUyMmZhZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDZE6fsXPuPEIWn8sMZ18V9g6zZn4OKDHpHT 1oWIurKffsU0VIW3NrbCNhFxkniKgivpxxbH8glIyKZfQwFcgVX/Iva8rjr89CWK 720x6jGLvysO5RBE/kAmfhdl2YdCdi86Q+saRXT0t4Zhcwaj5aCQYSNvN573X5U5 2GTNc7fbTRjeBL+d3EA0JVlZcLPhl+w0gHVrPJtUt+0JiwkdlHcFC8r3EQA3H4Ce +Ibd5Ahw3Gh0DERFIe35jeySBI5wSo14aT2BwEoLyQ4WFyD1WtNZbCfZKBxQqXIj lOCjFqh3ZAj3sKCLbMFLWIpIMXLq8jXaLb1iVFwdtD5RqwrTaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbPLwnlVd5KArH4EaA5hCYTzx5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzViMjk4NmYtOWRjYi0z ZjNkLWI5ZjYtOTYwODYxN2Q3YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmfD01VgNBBR9OxzaAUMeP07Z07qVJsqUtpR6Zay3oJbWP+dqkpqkiT cLweGZTpaedPw3np719FvMqr0ET2Dl5iebIivvVFT9cr7JsNME0pUVC6dgzN2S18 Wu9b7ZtPxdRfxtqZTbogETxQGZIwOUaqY7YTbx2QjMCll4m3sVqu7SNn5WyLJQo3 YoKI4yiYjbMQhc6YZqcRgHwPX601OLOp6X2fa0hMOrtOxbFa0H/hKpX6+vWdHBQw M2xgIrPbi6Vmpd4woI4qGNLoymGGoO5Lp9f9wr2HgeExR0EXY9Bjd3Z5SouVgTtv zDF5qbjYGprJQr6JR2MKVp3He1/PKDQ= -----END CERTIFICATE-----Generated at Sun Jun 15 22:40:02 2025 by rpki-client