$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa File: 7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa (raw, json) Hash identifier: RPK4kp5FHXbsST4avZWHtI6gyw1Bh/xkaGbnQlETLwY= Subject key identifier: 69:A0:70:01:9D:42:89:13:A4:12:AE:E1:56:F5:71:11:E7:94:7D:3E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC1BCFE51DA3B293B65080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa Signing time: Thu 24 Apr 2025 11:17:59 +0000 ROA not before: Thu 24 Apr 2025 11:17:59 +0000 ROA not after: Wed 23 Jul 2025 11:17:59 +0000 asID: 12041 IP address blocks: 199.254.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:1b:cf:e5:1d:a3:b2:93:b6:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:59 2025 GMT Not After : Jul 23 11:17:59 2025 GMT Subject: CN=b2f0f5cc-e0c6-4da0-b949-6549eb3bd1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:8f:6a:62:92:ec:7c:69:0a:ec:ae:f9:6a: cb:fd:23:f8:a9:1b:40:68:06:42:95:ea:91:02:88: 76:18:1e:80:1b:a7:3c:c7:d0:73:bf:32:3d:ab:02: ab:c8:36:76:4b:a0:ce:c4:04:ca:8c:92:52:69:25: 29:d7:bc:21:38:a2:4c:a8:2c:d6:7b:96:84:36:77: ed:24:b9:f6:eb:c9:82:cd:e9:99:ec:08:98:09:1f: 48:4e:96:e7:95:8c:b2:9c:1f:fe:5c:f1:c0:41:22: 8c:77:f5:05:45:c6:f6:85:23:24:b6:25:e9:03:41: be:8c:64:34:3a:87:89:5e:b9:62:31:c6:1d:3b:47: 44:d0:6d:88:09:6d:b3:13:31:bd:7e:30:17:2a:2e: 7e:af:f4:35:c4:bd:15:e9:65:65:07:7d:b1:0d:45: 17:90:48:69:d8:33:28:85:c3:cc:df:d6:98:b9:0b: 6e:8d:bf:f5:9f:6e:97:77:80:6b:3c:dc:c8:6c:dc: 1b:97:16:a6:a5:57:e1:66:84:4e:32:3e:71:d8:9a: ab:ba:f6:f1:e0:f6:d6:61:e7:bb:f4:1c:96:3b:83: 8b:c9:05:36:66:bc:65:56:26:21:cd:bb:d6:d5:41: 68:24:72:d0:8f:fe:be:9e:45:70:f4:c4:ea:b8:55: b3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A0:70:01:9D:42:89:13:A4:12:AE:E1:56:F5:71:11:E7:94:7D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7c25f60d-e652-39c2-ad3b-e7bcb46ee09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f1:55:b7:19:fa:35:aa:d7:b9:ed:00:d3:ed:a2:bf:b1:6e: 54:72:51:33:14:42:4f:ff:f8:1d:6b:7b:8e:71:51:68:12:5f: e6:df:98:2d:c5:ac:c6:cb:14:89:aa:38:69:8e:bf:1f:f5:08: 1c:ba:ec:09:d3:05:41:71:3e:f7:61:c8:a9:10:c0:8a:e2:9a: 52:a9:6f:56:36:85:e7:b7:45:97:03:89:23:fc:02:d8:9a:f6: 94:17:c7:9d:bd:e3:fc:4a:20:f2:45:b7:e9:b6:b4:af:3d:ca: 09:e0:22:ab:e7:49:37:9f:0f:47:fd:1d:10:b4:be:aa:db:f1: ff:a8:14:e9:3f:75:29:1e:47:7a:83:b7:37:54:c6:60:7f:a7: 1d:c9:c5:a9:67:85:96:b5:61:08:44:76:d2:42:94:ea:d3:67: 06:06:b4:d7:1f:ad:86:c1:c0:05:ec:16:70:ac:65:68:29:6e: 1b:ba:60:3e:df:de:05:ce:23:f2:64:7f:6c:bb:d6:7b:d3:21: 7b:2d:25:67:6b:ed:8a:01:91:2f:8f:70:b9:56:79:b5:11:78: ec:5a:7c:7d:66:7c:85:23:20:9b:be:5b:6e:ca:71:1c:5b:3b: 7e:31:a8:2a:79:db:18:fb:ec:b4:90:48:7d:31:73:76:0e:43: 4c:02:ec:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvBvP5R2jspO2UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc1OVoXDTI1MDcyMzExMTc1OVowLzEtMCsGA1UEAxMk YjJmMGY1Y2MtZTBjNi00ZGEwLWI5NDktNjU0OWViM2JkMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPiPamKS7HxpCuyu+WrL/SP4qRtAaAZCleqR Aoh2GB6AG6c8x9BzvzI9qwKryDZ2S6DOxATKjJJSaSUp17whOKJMqCzWe5aENnft JLn268mCzemZ7AiYCR9ITpbnlYyynB/+XPHAQSKMd/UFRcb2hSMktiXpA0G+jGQ0 OoeJXrliMcYdO0dE0G2ICW2zEzG9fjAXKi5+r/Q1xL0V6WVlB32xDUUXkEhp2DMo hcPM39aYuQtujb/1n26Xd4BrPNzIbNwblxampVfhZoROMj5x2Jqruvbx4PbWYee7 9ByWO4OLyQU2ZrxlViYhzbvW1UFoJHLQj/6+nkVw9MTquFWzqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmgcAGdQokTpBKu4Vb1cRHnlH0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2MyNWY2MGQtZTY1Mi0z OWMyLWFkM2ItZTdiY2I0NmVlMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHxVbcZ+jWq17ntANPtor+xblRyUTMUQk//+B1re45xUWgSX+bfmC3F rMbLFImqOGmOvx/1CBy67AnTBUFxPvdhyKkQwIrimlKpb1Y2hee3RZcDiSP8Atia 9pQXx5294/xKIPJFt+m2tK89ygngIqvnSTefD0f9HRC0vqrb8f+oFOk/dSkeR3qD tzdUxmB/px3JxalnhZa1YQhEdtJClOrTZwYGtNcfrYbBwAXsFnCsZWgpbhu6YD7f 3gXOI/Jkf2y71nvTIXstJWdr7YoBkS+PcLlWebUReOxafH1mfIUjIJu+W27KcRxb O34xqCp52xj77LSQSH0xc3YOQ0wC7Gw= -----END CERTIFICATE-----Generated at Tue Apr 29 14:26:16 2025 by rpki-client