$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa File: a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa (raw, json) Hash identifier: uQvcSUpquw11Kgc03fcXFa4eLrOZ2WCHfOc7s5G2L1w= Subject key identifier: 22:34:9B:88:99:FF:3A:8D:41:BE:AA:C7:DA:A9:2D:CD:E5:E0:4B:EF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC18BD473E8AB2923EBC00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa Signing time: Thu 24 Apr 2025 11:17:58 +0000 ROA not before: Thu 24 Apr 2025 11:17:58 +0000 ROA not after: Wed 23 Jul 2025 11:17:58 +0000 asID: 12041 IP address blocks: 199.254.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:18:bd:47:3e:8a:b2:92:3e:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:58 2025 GMT Not After : Jul 23 11:17:58 2025 GMT Subject: CN=db17a4d9-17b3-4381-a36f-6a9c74cdeb93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:fe:aa:32:b7:f2:a0:b2:cf:2e:69:45:d9: 73:47:0a:ed:87:05:1e:9c:eb:cc:bf:4c:6e:b5:ad: ee:02:b7:d1:80:6b:57:1d:f3:62:4c:86:d1:ec:4c: 0a:18:fc:08:21:2b:a0:91:5b:7f:81:df:7f:b6:9d: 08:40:23:c2:f5:cb:93:77:c5:9a:40:f9:0d:99:a7: 80:c5:13:78:5e:68:05:b6:42:b0:69:fe:87:e9:d3: 41:a6:0b:41:f4:ab:76:d9:ba:78:57:94:a1:a6:8b: 63:33:ff:1b:d5:92:81:a0:0f:67:a2:ee:e4:34:f5: a1:3d:57:e4:37:a6:58:3b:5b:d2:f4:b4:3b:95:65: 4f:fa:14:ca:f6:fb:a8:42:c6:fb:44:d7:06:8d:99: bd:e0:fc:91:c1:95:48:f1:a1:83:4f:1a:67:b8:7d: 2e:81:a7:b6:22:ad:cb:90:6c:36:6d:b4:90:ed:9e: b9:52:70:f4:33:0a:f6:18:37:c9:bf:29:c9:5a:31: 6a:b4:98:62:f2:2a:8b:4e:9f:ee:47:fc:2d:6b:1b: cb:31:fb:d1:b3:09:e7:03:e9:50:a1:b2:1f:05:f9: 5c:ef:ba:75:c7:6d:5f:46:b3:12:d2:06:c6:37:10: 4c:37:13:00:64:98:8b:20:c0:0b:5d:99:51:ca:f3: cb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:34:9B:88:99:FF:3A:8D:41:BE:AA:C7:DA:A9:2D:CD:E5:E0:4B:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:af:94:8d:f5:85:c9:60:ed:63:4e:d9:02:f4:44:e2:1f:ef: 2d:4f:88:79:69:83:dc:2c:d1:fc:ad:68:2a:b7:5d:f2:43:ee: 98:a1:dc:04:c2:d9:1d:0e:13:be:e6:fd:b2:9d:de:d9:59:88: bc:c0:b1:bb:b3:d3:f4:58:2f:88:42:01:93:d1:f7:07:23:eb: fa:2f:37:bb:a5:09:0f:f8:c0:37:e2:ea:08:09:69:1b:50:35: 48:86:4c:60:91:90:70:d7:95:bc:e6:ec:c5:e4:da:65:78:04: 75:d8:d8:30:13:60:60:97:57:b7:20:5b:f0:7c:66:1d:af:a9: 73:4c:18:4f:83:94:28:12:6f:f2:d7:1e:74:bf:9a:2b:8c:b0: 16:12:75:3d:31:b1:40:64:0f:0a:40:af:35:9f:a2:40:db:6b: 3a:01:e9:db:23:b8:04:b4:a6:9f:91:15:b6:68:fd:a2:d3:41: d6:d0:fd:39:90:c1:11:e5:0e:a1:9b:92:77:a6:83:6b:c5:61: 13:07:56:f9:eb:c5:a7:2d:6a:c1:3b:75:23:77:11:1a:92:96: 4c:2a:ce:f9:b7:8d:c6:24:02:e4:ef:45:44:3c:63:ee:b7:07: 47:4b:65:7c:d5:70:85:47:52:8b:43:8a:7b:fa:3e:67:e3:df: ac:94:32:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvBi9Rz6KspI+vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc1OFoXDTI1MDcyMzExMTc1OFowLzEtMCsGA1UEAxMk ZGIxN2E0ZDktMTdiMy00MzgxLWEzNmYtNmE5Yzc0Y2RlYjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG7+qjK38qCyzy5pRdlzRwrthwUenOvMv0xu ta3uArfRgGtXHfNiTIbR7EwKGPwIISugkVt/gd9/tp0IQCPC9cuTd8WaQPkNmaeA xRN4XmgFtkKwaf6H6dNBpgtB9Kt22bp4V5ShpotjM/8b1ZKBoA9nou7kNPWhPVfk N6ZYO1vS9LQ7lWVP+hTK9vuoQsb7RNcGjZm94PyRwZVI8aGDTxpnuH0ugae2Iq3L kGw2bbSQ7Z65UnD0Mwr2GDfJvynJWjFqtJhi8iqLTp/uR/wtaxvLMfvRswnnA+lQ obIfBflc77p1x21fRrMS0gbGNxBMNxMAZJiLIMALXZlRyvPLXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI0m4iZ/zqNQb6qx9qpLc3l4EvvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYThiNzBkMjMtNzFiMy0z OTg5LWI2ZjEtN2NhMTMzZWMzOTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGavlI31hclg7WNO2QL0ROIf7y1PiHlpg9ws0fytaCq3XfJD7pih3ATC 2R0OE77m/bKd3tlZiLzAsbuz0/RYL4hCAZPR9wcj6/ovN7ulCQ/4wDfi6ggJaRtQ NUiGTGCRkHDXlbzm7MXk2mV4BHXY2DATYGCXV7cgW/B8Zh2vqXNMGE+DlCgSb/LX HnS/miuMsBYSdT0xsUBkDwpArzWfokDbazoB6dsjuAS0pp+RFbZo/aLTQdbQ/TmQ wRHlDqGbknemg2vFYRMHVvnrxactasE7dSN3ERqSlkwqzvm3jcYkAuTvRUQ8Y+63 B0dLZXzVcIVHUotDinv6Pmfj36yUMu8= -----END CERTIFICATE-----Generated at Tue Apr 29 13:04:59 2025 by rpki-client