$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8fcfab7b-4a41-34db-9c52-796224eb45a6.roa File: 8fcfab7b-4a41-34db-9c52-796224eb45a6.roa (raw, json) Hash identifier: hcpRZtzw6GcJUdUxO3ITXM2L7TOKGO5N04jFJ1RYJbk= Subject key identifier: 96:9F:35:88:D9:55:F4:89:7D:58:A9:3F:B0:3B:71:28:11:7D:D5:2F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBB9005E4932A6644D6D00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8fcfab7b-4a41-34db-9c52-796224eb45a6.roa Signing time: Thu 24 Apr 2025 11:17:12 +0000 ROA not before: Thu 24 Apr 2025 11:17:12 +0000 ROA not after: Wed 23 Jul 2025 11:17:12 +0000 asID: 12041 IP address blocks: 199.182.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:b9:00:5e:49:32:a6:64:4d:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:12 2025 GMT Not After : Jul 23 11:17:12 2025 GMT Subject: CN=0860716b-baf8-498f-a3d4-2612f4d8467b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8c:e8:b8:1a:57:8a:fa:f3:c0:dc:a6:0d:44: eb:bc:7e:15:7e:ee:80:5a:73:31:ff:ba:fb:4f:dc: 54:fa:ba:80:52:15:c1:9b:c6:a2:79:43:15:9c:cf: 94:a8:e6:d2:d1:05:a2:a5:78:af:08:19:60:c4:20: a9:94:ab:01:15:d3:f1:40:a1:1f:d7:f0:45:d1:e3: 2b:6d:56:40:a2:1c:bb:58:a2:b2:f1:01:8e:53:84: 18:1c:d6:03:39:74:46:e9:95:c4:11:05:84:15:db: 2f:f5:96:0e:56:31:ae:86:20:9d:35:4e:f4:e1:7f: cd:22:ec:f9:2c:29:0d:66:a8:02:3b:5d:e4:d1:78: a0:61:aa:fb:15:a1:00:46:41:49:01:7f:87:1d:4e: d7:16:29:e4:3b:bb:d0:87:2b:4d:6e:a1:e7:43:12: 37:45:42:c3:d7:5c:b8:58:d8:70:15:dc:50:80:05: b7:55:8d:11:a9:49:98:13:66:20:c1:e1:da:e9:0e: ed:e0:2e:8e:15:4d:8d:47:0e:f2:19:a8:98:a4:74: e4:97:73:c9:64:c8:9b:f3:f6:d1:c7:f4:87:cd:ba: 4e:ae:93:d5:95:0f:37:d6:2e:58:01:4b:22:89:18: c2:d1:c5:71:4e:da:68:d6:e5:10:67:8e:a7:e2:97: a0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9F:35:88:D9:55:F4:89:7D:58:A9:3F:B0:3B:71:28:11:7D:D5:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8fcfab7b-4a41-34db-9c52-796224eb45a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:fc:98:06:8e:48:df:91:1c:01:0f:7d:e6:f4:e9:70:46:1a: 31:77:9a:73:ad:b8:18:87:f1:f7:de:61:8b:a4:c1:7c:e4:13: fe:be:a8:c8:ff:2b:08:2c:e7:1f:05:45:ab:a4:41:6e:4e:e1: a1:2b:5a:f6:9e:d1:a5:d6:75:53:4a:68:d0:b2:e9:78:17:d2: 53:dc:49:07:08:9d:63:50:d1:e2:15:1b:18:a4:a8:ca:21:4f: 87:29:83:72:41:a8:ef:57:ab:7c:6c:ad:e3:c9:73:c9:be:33: 9b:d1:77:36:10:8c:02:1c:f3:23:e4:fd:f2:e9:c8:6c:45:4b: 08:78:0e:10:5f:23:84:38:01:75:3c:9f:ba:73:56:3c:1d:7d: 8c:d8:23:a7:c6:da:99:71:11:4c:ed:bd:ce:3e:ef:83:ff:31: 9e:8e:72:27:01:26:22:16:6f:5c:9d:7e:d0:40:d7:90:8b:55: 10:1a:61:b8:5f:e0:95:69:5f:5d:d5:34:83:53:70:ce:89:c9: 5a:a9:0e:fb:78:7c:af:3b:54:2c:29:e5:4f:43:73:5c:c0:52: 9d:f4:c1:fa:fe:25:53:03:23:50:eb:d7:ff:a2:dd:07:3d:08: 39:a3:35:0e:37:9d:74:a4:64:af:78:6b:1e:e0:5f:2d:a6:5d: e6:6c:2a:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu7kAXkkypmRNbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcxMloXDTI1MDcyMzExMTcxMlowLzEtMCsGA1UEAxMk MDg2MDcxNmItYmFmOC00OThmLWEzZDQtMjYxMmY0ZDg0NjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IzouBpXivrzwNymDUTrvH4Vfu6AWnMx/7r7 T9xU+rqAUhXBm8aieUMVnM+UqObS0QWipXivCBlgxCCplKsBFdPxQKEf1/BF0eMr bVZAohy7WKKy8QGOU4QYHNYDOXRG6ZXEEQWEFdsv9ZYOVjGuhiCdNU704X/NIuz5 LCkNZqgCO13k0XigYar7FaEARkFJAX+HHU7XFinkO7vQhytNbqHnQxI3RULD11y4 WNhwFdxQgAW3VY0RqUmYE2YgweHa6Q7t4C6OFU2NRw7yGaiYpHTkl3PJZMib8/bR x/SHzbpOrpPVlQ831i5YAUsiiRjC0cVxTtpo1uUQZ46n4pegPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJafNYjZVfSJfVipP7A7cSgRfdUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGZjZmFiN2ItNGE0MS0z NGRiLTljNTItNzk2MjI0ZWI0NWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb8mAaOSN+RHAEPfeb06XBGGjF3mnOtuBiH8ffeYYukwXzkE/6+qMj/ Kwgs5x8FRaukQW5O4aErWvae0aXWdVNKaNCy6XgX0lPcSQcInWNQ0eIVGxikqMoh T4cpg3JBqO9Xq3xsrePJc8m+M5vRdzYQjAIc8yPk/fLpyGxFSwh4DhBfI4Q4AXU8 n7pzVjwdfYzYI6fG2plxEUztvc4+74P/MZ6OcicBJiIWb1ydftBA15CLVRAaYbhf 4JVpX13VNINTcM6JyVqpDvt4fK87VCwp5U9Dc1zAUp30wfr+JVMDI1Dr1/+i3Qc9 CDmjNQ43nXSkZK94ax7gXy2mXeZsKq4= -----END CERTIFICATE-----Generated at Tue Apr 29 17:41:02 2025 by rpki-client