$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa File: b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa (raw, json) Hash identifier: bpOK4tXtigC5jzxxuKPrAwpqzAS35J74ZzofLrtAZcs= Subject key identifier: 94:EC:C8:C7:57:DC:99:05:1F:EF:3C:5A:8B:91:F5:FC:55:C5:27:6F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC30F547416F1F03CCEA00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa Signing time: Thu 24 Apr 2025 11:18:09 +0000 ROA not before: Thu 24 Apr 2025 11:18:09 +0000 ROA not after: Wed 23 Jul 2025 11:18:09 +0000 asID: 12041 IP address blocks: 199.254.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:30:f5:47:41:6f:1f:03:cc:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:18:09 2025 GMT Not After : Jul 23 11:18:09 2025 GMT Subject: CN=8469739d-073a-436d-aca2-e9e4a8e4ab57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:43:78:ce:2c:a6:21:5a:f7:05:6b:12:cd:6a: f7:39:7e:9e:5b:3f:22:12:13:43:26:ba:39:98:a4: 6e:18:8a:26:ec:13:96:a9:c2:57:6b:b7:ea:01:69: 57:81:8b:f6:b3:6b:56:da:e0:de:d8:36:fd:ce:cd: 84:5d:45:8b:3c:69:d9:09:c4:20:f0:fe:d2:fc:9d: 01:b5:23:d8:bf:8f:44:99:3c:d0:c5:88:26:12:4f: ba:c7:34:fe:e4:3f:88:bc:74:62:3d:7a:8a:5c:af: 70:db:0f:12:1f:cf:71:2a:9d:26:42:2a:cb:2e:df: 8a:e1:59:4c:37:b0:4c:48:d4:96:91:87:ff:87:9d: 98:e9:ae:7a:15:f9:70:0a:2a:cd:03:b3:e1:24:d8: 7f:c3:ab:ec:22:81:4f:c1:21:5f:97:f2:27:d5:a2: ae:05:df:df:b8:a3:cd:a6:02:06:46:04:cc:7d:63: 97:5f:95:1e:4e:ed:bf:f5:9c:4d:30:8f:e9:52:62: 1a:d4:13:56:d2:7e:9b:0a:d8:47:7e:90:95:b5:16: 1b:17:42:49:ce:b6:9c:64:96:5e:68:d5:d3:8e:b7: 89:19:52:d7:7f:70:ca:e9:2d:dc:9f:fa:8f:57:a4: 85:2d:ce:de:78:0f:93:54:e4:7e:f7:06:86:5c:cd: 6f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EC:C8:C7:57:DC:99:05:1F:EF:3C:5A:8B:91:F5:FC:55:C5:27:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b4da207a-5089-3e5a-b0ea-e9bf54bf6c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:0e:a0:42:59:0a:74:81:b5:36:0e:47:b1:98:b9:89:6d:e2: 8b:3e:cb:56:0e:32:7a:af:0e:77:3f:34:21:91:77:71:98:1c: c8:a5:ec:d3:68:f6:49:71:06:47:2e:41:b1:c5:0c:05:fe:b3: b1:7a:2d:a5:86:53:1f:0f:17:af:f7:74:d6:d8:c4:db:cf:06: 7b:f3:0d:7d:b2:5d:3f:73:2c:4b:26:88:a9:38:e7:b3:7a:8a: 2d:c9:73:f0:32:22:05:ad:18:99:d3:6c:63:15:66:a0:49:e2: be:25:d2:03:48:63:da:e6:6e:fa:6f:09:f7:56:96:87:48:7b: dd:b8:f0:1b:40:5a:f7:cb:c4:af:55:53:03:72:a4:fd:35:72: 83:40:41:b8:e3:5a:9b:c7:5a:a6:63:7b:05:13:e2:cb:15:49: 78:d0:ae:6b:a8:50:67:2f:ea:be:3a:74:70:e6:ba:21:f1:08: d7:a6:18:82:e5:b1:ac:1a:6d:dc:10:1f:f6:9b:6a:54:8a:0c: b4:c6:d0:d8:f7:25:72:fc:dc:0a:93:3f:86:81:07:ff:79:c1: 57:4b:72:2b:d1:67:a8:80:b1:49:c7:fd:49:2c:8b:06:19:36: 2f:dd:d9:0b:df:78:8e:97:cb:d8:a5:de:a2:db:cb:34:74:d2: fc:8b:7b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvDD1R0FvHwPM6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTgwOVoXDTI1MDcyMzExMTgwOVowLzEtMCsGA1UEAxMk ODQ2OTczOWQtMDczYS00MzZkLWFjYTItZTllNGE4ZTRhYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0N4ziymIVr3BWsSzWr3OX6eWz8iEhNDJro5 mKRuGIom7BOWqcJXa7fqAWlXgYv2s2tW2uDe2Db9zs2EXUWLPGnZCcQg8P7S/J0B tSPYv49EmTzQxYgmEk+6xzT+5D+IvHRiPXqKXK9w2w8SH89xKp0mQirLLt+K4VlM N7BMSNSWkYf/h52Y6a56FflwCirNA7PhJNh/w6vsIoFPwSFfl/In1aKuBd/fuKPN pgIGRgTMfWOXX5UeTu2/9ZxNMI/pUmIa1BNW0n6bCthHfpCVtRYbF0JJzracZJZe aNXTjreJGVLXf3DK6S3cn/qPV6SFLc7eeA+TVOR+9waGXM1vxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTsyMdX3JkFH+88WouR9fxVxSdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjRkYTIwN2EtNTA4OS0z ZTVhLWIwZWEtZTliZjU0YmY2YzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/48MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUOoEJZCnSBtTYOR7GYuYlt4os+y1YOMnqvDnc/NCGRd3GYHMil7NNo 9klxBkcuQbHFDAX+s7F6LaWGUx8PF6/3dNbYxNvPBnvzDX2yXT9zLEsmiKk457N6 ii3Jc/AyIgWtGJnTbGMVZqBJ4r4l0gNIY9rmbvpvCfdWlodIe9248BtAWvfLxK9V UwNypP01coNAQbjjWpvHWqZjewUT4ssVSXjQrmuoUGcv6r46dHDmuiHxCNemGILl sawabdwQH/abalSKDLTG0Nj3JXL83AqTP4aBB/95wVdLcivRZ6iAsUnH/UksiwYZ Ni/d2QvfeI6Xy9il3qLbyzR00vyLewY= -----END CERTIFICATE-----Generated at Tue Apr 29 12:03:30 2025 by rpki-client