$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f64dd5b-6fd0-341d-8504-a02adae27e53.roa File: 8f64dd5b-6fd0-341d-8504-a02adae27e53.roa (raw, json) Hash identifier: rHjml6Md1BSMnFxB62BmG9obubdx8HAmERlsbve0NRA= Subject key identifier: B7:B5:2B:63:7A:B7:AB:6D:E1:D9:6F:A9:0A:A5:25:F5:84:1A:76:26 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBA304431D50258F220280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f64dd5b-6fd0-341d-8504-a02adae27e53.roa Signing time: Thu 24 Apr 2025 11:17:02 +0000 ROA not before: Thu 24 Apr 2025 11:17:02 +0000 ROA not after: Wed 23 Jul 2025 11:17:02 +0000 asID: 12041 IP address blocks: 199.115.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:a3:04:43:1d:50:25:8f:22:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:02 2025 GMT Not After : Jul 23 11:17:02 2025 GMT Subject: CN=c1a6e934-f883-4eff-a421-2e6ee7e908ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:25:09:54:ca:65:b9:97:0a:19:4e:93:c6: fa:78:37:e2:83:87:c5:95:27:da:fa:79:30:f4:f5: 48:81:3f:1d:54:7f:67:3c:cf:02:37:4d:85:02:55: af:59:ad:db:11:35:2b:86:42:85:7d:fe:eb:0e:6d: 1d:82:29:49:1b:cd:28:11:75:38:37:4b:68:ec:08: 7e:c3:22:d1:db:49:6c:46:9b:67:91:06:39:8e:94: 06:4f:7c:d6:4b:d4:12:90:e9:e8:46:8d:dc:3a:17: dc:29:24:96:2b:82:73:9f:34:be:33:85:6f:58:31: 19:52:93:47:42:40:ab:d5:9a:6d:9f:33:0a:a9:c7: 45:9a:da:db:0c:e7:d1:01:5e:4d:af:2c:b5:bb:f4: 5e:bd:c1:e8:2b:ee:fd:5f:68:19:24:30:a2:77:52: 79:c1:76:a2:14:df:31:90:56:af:f4:e2:a2:f8:22: 33:6a:0d:6a:3a:00:57:84:20:d5:d8:ae:0a:9e:ce: a7:9d:5f:8c:3e:30:60:1b:54:d8:18:c8:89:98:0b: d0:0d:6f:36:3c:b0:f4:f9:17:a9:2f:e4:71:fe:02: b1:db:10:e4:94:65:1b:4a:e1:e1:45:67:69:15:f3: b9:e3:ee:49:c3:56:dd:26:5b:ac:1b:13:5a:91:ec: ed:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B5:2B:63:7A:B7:AB:6D:E1:D9:6F:A9:0A:A5:25:F5:84:1A:76:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8f64dd5b-6fd0-341d-8504-a02adae27e53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8d:dc:d6:d4:ec:a1:06:87:26:bf:52:34:dc:e8:a5:54:15: 08:ca:6e:af:09:a0:60:57:fe:72:cf:79:3c:66:93:e7:7e:c4: d2:7b:43:4d:ac:f0:80:52:d0:fa:45:22:b8:c6:e0:a3:8e:6a: 46:d0:45:94:cd:a4:5b:f9:68:66:a7:35:c1:04:c8:da:c2:1c: a6:2c:84:26:0d:23:64:8a:ce:a8:8b:88:75:dd:e5:e9:1c:2d: 59:62:e8:06:44:ee:4f:13:47:bf:37:ee:c4:31:92:17:c6:40: 85:18:ce:bf:e6:da:cc:d0:4a:4f:93:0f:c4:2d:2f:54:66:e8: 5f:d7:9e:ed:67:e6:cd:a6:54:48:88:5c:63:35:f8:b4:f3:63: e1:b7:b5:c2:df:4e:95:f8:ee:49:f6:e1:07:74:a1:21:bf:09: b8:24:ad:cc:f3:8f:9e:8b:8f:4c:85:3b:0f:c7:24:2a:09:3f: 72:00:0c:25:0f:d6:53:26:44:bd:98:04:dd:6f:4c:00:2c:46: 04:71:e0:aa:d7:23:be:00:a5:39:44:9e:fc:d8:72:81:ff:31: 9d:bb:48:0a:7c:1c:08:83:48:bf:b3:40:57:4a:ea:00:8b:48: d0:8d:ee:03:0c:ca:69:c8:bf:aa:8a:2e:26:0a:3c:1a:65:e5: 38:a3:14:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu6MEQx1QJY8iAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcwMloXDTI1MDcyMzExMTcwMlowLzEtMCsGA1UEAxMk YzFhNmU5MzQtZjg4My00ZWZmLWE0MjEtMmU2ZWU3ZTkwOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIIlCVTKZbmXChlOk8b6eDfig4fFlSfa+nkw 9PVIgT8dVH9nPM8CN02FAlWvWa3bETUrhkKFff7rDm0dgilJG80oEXU4N0to7Ah+ wyLR20lsRptnkQY5jpQGT3zWS9QSkOnoRo3cOhfcKSSWK4JznzS+M4VvWDEZUpNH QkCr1ZptnzMKqcdFmtrbDOfRAV5Nryy1u/RevcHoK+79X2gZJDCid1J5wXaiFN8x kFav9OKi+CIzag1qOgBXhCDV2K4Kns6nnV+MPjBgG1TYGMiJmAvQDW82PLD0+Rep L+Rx/gKx2xDklGUbSuHhRWdpFfO54+5Jw1bdJlusGxNakeztuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLe1K2N6t6tt4dlvqQqlJfWEGnYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGY2NGRkNWItNmZkMC0z NDFkLTg1MDQtYTAyYWRhZTI3ZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3ObMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+N3NbU7KEGhya/UjTc6KVUFQjKbq8JoGBX/nLPeTxmk+d+xNJ7Q02s 8IBS0PpFIrjG4KOOakbQRZTNpFv5aGanNcEEyNrCHKYshCYNI2SKzqiLiHXd5ekc LVli6AZE7k8TR7837sQxkhfGQIUYzr/m2szQSk+TD8QtL1Rm6F/Xnu1n5s2mVEiI XGM1+LTzY+G3tcLfTpX47kn24Qd0oSG/Cbgkrczzj56Lj0yFOw/HJCoJP3IADCUP 1lMmRL2YBN1vTAAsRgRx4KrXI74ApTlEnvzYcoH/MZ27SAp8HAiDSL+zQFdK6gCL SNCN7gMMymnIv6qKLiYKPBpl5TijFAE= -----END CERTIFICATE-----Generated at Tue Apr 29 16:23:42 2025 by rpki-client