$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa File: 8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa (raw, json) Hash identifier: I5S4NUcsAgHYBYGC3IuRRQaa7b1Je901BG73S5Ibz5s= Subject key identifier: A9:C3:ED:71:55:B2:5C:2F:E4:85:16:77:17:6A:29:D4:27:21:4F:F8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC2D7D5665785801B3D240 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa Signing time: Thu 24 Apr 2025 11:18:07 +0000 ROA not before: Thu 24 Apr 2025 11:18:07 +0000 ROA not after: Wed 23 Jul 2025 11:18:07 +0000 asID: 12041 IP address blocks: 199.254.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:2d:7d:56:65:78:58:01:b3:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:18:07 2025 GMT Not After : Jul 23 11:18:07 2025 GMT Subject: CN=fb5f71a2-6862-43cf-b518-29b031706936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:d5:c5:8a:af:a4:c2:ef:bd:0b:76:0d:84: 0e:d7:11:62:82:c8:fe:b4:ca:ad:c0:81:cc:83:2b: 9b:ac:71:5a:0a:23:05:f0:54:9d:8d:18:38:4a:92: ce:a0:09:2f:ac:26:b6:00:5a:55:24:5c:a8:09:d7: f3:66:41:85:73:ae:8c:65:7b:98:ec:df:33:76:be: d7:7d:d2:17:c9:8b:56:d1:9f:38:99:fb:8c:ce:33: 3b:bf:1e:52:28:1f:57:98:63:98:de:06:29:ed:21: d1:fa:00:37:ab:0a:2f:ea:7a:62:da:c5:05:44:be: ef:3a:fd:d9:0c:69:a3:e3:f8:6f:11:8c:cb:b8:54: 39:0f:ff:b2:24:23:a6:dd:b2:53:b6:74:5a:c4:7c: 5d:4e:0f:14:69:8b:8c:d3:c3:ac:ea:ab:61:86:96: a8:71:e6:6d:cf:0a:8c:4c:68:08:af:bf:69:71:c8: 08:83:91:35:c4:d7:5c:ca:af:b5:fd:73:1a:58:fb: c0:72:a8:2d:7d:4d:27:65:ed:82:92:43:d1:c4:9e: d3:07:e9:c4:ef:24:8a:1c:91:19:b0:85:ed:00:bb: 54:6d:14:f9:37:83:be:a6:26:73:bc:3d:ca:f1:fd: 6d:42:d6:72:48:3a:20:7a:76:b6:c3:99:21:5b:ca: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C3:ED:71:55:B2:5C:2F:E4:85:16:77:17:6A:29:D4:27:21:4F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:13:f4:44:f1:7f:b4:ca:0f:1c:f7:5b:21:c6:d6:59:f6:ce: 90:08:c4:85:03:29:62:16:76:b2:12:ac:d3:dc:7e:87:47:2c: ec:47:1c:76:84:4a:cf:17:78:4c:1e:b4:b7:81:72:d0:07:2c: 80:ec:bf:44:74:7f:8c:2b:d0:3f:5b:5d:ec:ad:91:d7:4d:c4: 63:cb:fa:fd:74:00:a5:db:1a:a3:1f:b2:d8:f7:1e:37:87:b4: 1e:51:af:43:b6:46:ce:89:fe:f8:89:dd:ce:13:ee:6e:55:a1: d4:17:c6:60:33:94:dd:e9:89:14:9d:11:4b:f0:e0:7b:7b:13: b6:ba:c1:4d:77:fd:7d:c4:83:2b:ec:7a:7a:ae:55:e2:1a:f2: 8a:ec:7f:14:73:48:51:ef:17:d1:af:53:c2:7b:61:5f:61:67: 4e:6b:54:1b:0c:51:a6:bd:0c:5b:bf:a9:d3:bf:38:89:cf:d5: 80:4a:fd:cc:62:77:d1:63:e2:d8:cb:10:b3:55:20:d7:2b:a9: 0c:76:e2:e6:53:87:21:f9:9f:d6:d6:d5:cd:b6:75:00:d9:e9: 5c:41:a5:93:e5:4f:4b:e5:59:1e:45:72:89:ef:bf:f1:d9:85: 14:fc:a4:78:f9:15:98:39:6a:e4:6d:14:f5:5c:fa:73:7f:b9: 41:59:3f:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvC19VmV4WAGz0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTgwN1oXDTI1MDcyMzExMTgwN1owLzEtMCsGA1UEAxMk ZmI1ZjcxYTItNjg2Mi00M2NmLWI1MTgtMjliMDMxNzA2OTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/TVxYqvpMLvvQt2DYQO1xFigsj+tMqtwIHM gyubrHFaCiMF8FSdjRg4SpLOoAkvrCa2AFpVJFyoCdfzZkGFc66MZXuY7N8zdr7X fdIXyYtW0Z84mfuMzjM7vx5SKB9XmGOY3gYp7SHR+gA3qwov6npi2sUFRL7vOv3Z DGmj4/hvEYzLuFQ5D/+yJCOm3bJTtnRaxHxdTg8UaYuM08Os6qthhpaoceZtzwqM TGgIr79pccgIg5E1xNdcyq+1/XMaWPvAcqgtfU0nZe2CkkPRxJ7TB+nE7ySKHJEZ sIXtALtUbRT5N4O+piZzvD3K8f1tQtZySDogena2w5khW8pTrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnD7XFVslwv5IUWdxdqKdQnIU/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGQ3YzVkNGItMzc1OC0z Nzc2LWEzY2EtNjhiNTJjYzU0OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/46MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQT9ETxf7TKDxz3WyHG1ln2zpAIxIUDKWIWdrISrNPcfodHLOxHHHaE Ss8XeEwetLeBctAHLIDsv0R0f4wr0D9bXeytkddNxGPL+v10AKXbGqMfstj3HjeH tB5Rr0O2Rs6J/viJ3c4T7m5VodQXxmAzlN3piRSdEUvw4Ht7E7a6wU13/X3Egyvs enquVeIa8orsfxRzSFHvF9GvU8J7YV9hZ05rVBsMUaa9DFu/qdO/OInP1YBK/cxi d9Fj4tjLELNVINcrqQx24uZThyH5n9bW1c22dQDZ6VxBpZPlT0vlWR5Fconvv/HZ hRT8pHj5FZg5auRtFPVc+nN/uUFZPwA= -----END CERTIFICATE-----Generated at Tue Apr 29 12:12:51 2025 by rpki-client