$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91ff832b-f9dc-3719-9e9f-6e7ef9922f82.roa File: 91ff832b-f9dc-3719-9e9f-6e7ef9922f82.roa (raw, json) Hash identifier: yZcfk8UbWzbEs3C4MEdelKCWbXivrz2y8YfjhyXlhhQ= Subject key identifier: 3F:9A:03:49:9D:F9:CD:1A:85:EF:E7:C2:6F:3E:EC:AC:BE:B6:B0:90 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBFCCCD1A8DFE26E3EA480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91ff832b-f9dc-3719-9e9f-6e7ef9922f82.roa Signing time: Thu 24 Apr 2025 11:17:44 +0000 ROA not before: Thu 24 Apr 2025 11:17:44 +0000 ROA not after: Wed 23 Jul 2025 11:17:44 +0000 asID: 12041 IP address blocks: 199.249.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:fc:cc:d1:a8:df:e2:6e:3e:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:44 2025 GMT Not After : Jul 23 11:17:44 2025 GMT Subject: CN=432b8f70-432e-4d86-8192-c1f3137f91a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:05:b4:c5:eb:b6:2c:54:a5:df:ab:e7:a1: ce:8c:3f:b7:37:b8:ec:52:ab:55:02:9c:2d:ad:e2: 17:1e:1e:08:88:0e:d3:82:32:8f:af:ab:db:b0:2f: 84:e4:2b:59:2d:fa:64:49:28:60:2b:5b:13:0c:fd: f7:28:a6:33:fb:3a:ed:5f:1c:19:6e:ff:c5:0d:aa: e6:60:0c:b5:17:90:33:a2:15:11:ae:7a:4d:23:d2: d4:c1:b0:5a:b0:4e:92:5f:da:1d:16:b3:bc:04:b4: 9f:c3:d1:b7:5a:b2:02:b2:18:26:9d:ee:9d:8f:60: 99:d1:2c:b6:a2:49:7f:aa:99:7e:79:75:3d:69:72: 0e:02:ec:0d:5c:b3:54:4e:f7:f6:ee:8a:56:47:58: 71:e9:21:1d:49:a1:ec:f0:db:78:b4:c2:e0:b5:3a: 91:86:74:43:a5:15:1b:0e:75:01:46:c7:a0:6c:2e: b8:08:3c:77:80:57:4f:67:ea:9f:48:43:03:a9:22: 14:d1:84:cf:6f:65:2b:ac:b0:54:ec:84:0c:a5:1a: ba:0b:f2:7a:3b:e6:63:c1:69:ad:45:8e:ad:eb:b5: 28:31:ea:e6:42:c3:6d:f9:e7:9e:fb:20:75:e6:59: 0c:65:38:d9:cf:8d:14:7e:c6:a5:ee:02:ff:62:73: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9A:03:49:9D:F9:CD:1A:85:EF:E7:C2:6F:3E:EC:AC:BE:B6:B0:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/91ff832b-f9dc-3719-9e9f-6e7ef9922f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:2f:c9:e4:38:db:9c:28:ce:2a:fe:93:f1:fe:ef:a0:68:47: 9a:eb:b6:87:69:ae:dc:fb:bd:70:bc:57:60:f3:34:9b:60:46: 4f:27:a3:82:1d:1c:cd:bf:3a:a8:05:4e:11:d1:3a:17:13:a5: f5:c9:99:65:68:66:c3:51:38:93:80:b7:f0:fd:d7:41:85:55: e2:f8:0a:3c:c2:74:bc:5d:3b:71:34:99:60:ff:8a:46:8e:29: dc:b0:d0:03:79:47:26:b1:8b:33:6c:fd:a6:c2:9e:48:04:f9: 09:e0:1d:70:ed:31:f1:2a:4e:3d:f9:a2:92:1b:80:6f:fd:c5: 8f:6c:d1:5c:1d:db:b3:8f:25:ca:59:78:8c:b4:ab:da:26:fd: 96:b0:9d:af:2c:e4:2e:54:a9:e1:5f:aa:9a:ee:11:97:f7:c0: 07:de:ec:a9:b7:64:a2:09:3c:f5:a2:a7:97:50:6f:7a:3e:5c: f8:34:92:cd:7c:83:a9:b8:42:2a:c8:06:0d:77:75:4e:38:d3: 4f:78:69:6d:06:76:f7:b1:1d:80:15:33:a7:0a:16:01:38:57: aa:3d:c7:53:b2:4c:5f:43:41:64:f1:5a:0b:4f:bd:5c:b3:32: 1e:6e:bb:8d:b3:30:64:1c:65:a9:67:8b:49:bf:ea:1e:91:0e: ce:31:3a:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu/zM0ajf4m4+pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc0NFoXDTI1MDcyMzExMTc0NFowLzEtMCsGA1UEAxMk NDMyYjhmNzAtNDMyZS00ZDg2LTgxOTItYzFmMzEzN2Y5MWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMMFtMXrtixUpd+r56HOjD+3N7jsUqtVApwt reIXHh4IiA7TgjKPr6vbsC+E5CtZLfpkSShgK1sTDP33KKYz+zrtXxwZbv/FDarm YAy1F5AzohURrnpNI9LUwbBasE6SX9odFrO8BLSfw9G3WrICshgmne6dj2CZ0Sy2 okl/qpl+eXU9aXIOAuwNXLNUTvf27opWR1hx6SEdSaHs8Nt4tMLgtTqRhnRDpRUb DnUBRsegbC64CDx3gFdPZ+qfSEMDqSIU0YTPb2UrrLBU7IQMpRq6C/J6O+ZjwWmt RY6t67UoMermQsNt+eee+yB15lkMZTjZz40Ufsal7gL/YnN+MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+aA0md+c0ahe/nwm8+7Ky+trCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTFmZjgzMmItZjlkYy0z NzE5LTllOWYtNmU3ZWY5OTIyZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEvyeQ425wozir+k/H+76BoR5rrtodprtz7vXC8V2DzNJtgRk8no4Id HM2/OqgFThHROhcTpfXJmWVoZsNROJOAt/D910GFVeL4CjzCdLxdO3E0mWD/ikaO Kdyw0AN5RyaxizNs/abCnkgE+QngHXDtMfEqTj35opIbgG/9xY9s0Vwd27OPJcpZ eIy0q9om/Zawna8s5C5UqeFfqpruEZf3wAfe7Km3ZKIJPPWip5dQb3o+XPg0ks18 g6m4QirIBg13dU440094aW0GdvexHYAVM6cKFgE4V6o9x1OyTF9DQWTxWgtPvVyz Mh5uu42zMGQcZalni0m/6h6RDs4xOog= -----END CERTIFICATE-----Generated at Tue Apr 29 18:39:21 2025 by rpki-client