$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b6162258-e974-3d0b-9036-506271b3d99e.roa File: b6162258-e974-3d0b-9036-506271b3d99e.roa (raw, json) Hash identifier: HroychHilTka6YWusl7HnKhlXIT+oCuidkmE6QRkW5M= Subject key identifier: 79:37:E6:E4:31:92:4F:85:17:62:0E:92:A7:7E:8B:FF:0E:A8:D2:6E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC07CB6B388B58E572D080 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b6162258-e974-3d0b-9036-506271b3d99e.roa Signing time: Thu 24 Apr 2025 11:17:50 +0000 ROA not before: Thu 24 Apr 2025 11:17:50 +0000 ROA not after: Wed 23 Jul 2025 11:17:50 +0000 asID: 12041 IP address blocks: 199.249.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:07:cb:6b:38:8b:58:e5:72:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:50 2025 GMT Not After : Jul 23 11:17:50 2025 GMT Subject: CN=ed41d118-aa83-4aac-b55b-0a7c5f93152d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fe:92:b0:8c:b2:16:42:d7:a1:e3:bc:4f:82: 4e:7a:32:74:96:dc:af:0e:ff:ba:12:7e:26:5c:69: b0:93:98:81:1a:b9:c0:69:af:dd:e2:d9:d0:ac:12: 60:e2:c1:be:a5:04:8b:3c:f9:76:51:20:2e:d2:e0: d6:32:ba:c4:41:d2:41:57:af:fa:37:84:70:ac:fe: 8f:c0:c7:d0:a1:f7:b9:b4:d9:13:a1:ce:99:a7:02: 31:a9:b4:92:35:5e:2e:23:05:27:ba:19:69:49:c9: e5:65:17:9f:58:95:41:62:dc:f9:6a:c7:f2:6b:1c: cf:b7:89:a8:70:36:9c:59:f7:0e:13:08:4c:35:90: 05:d5:be:a2:db:d0:b6:7e:31:7b:90:29:7c:20:4f: b1:ec:ee:bc:d4:a8:a2:ba:90:1c:b1:d7:9e:6d:3e: 74:b8:42:b1:6e:c0:4d:da:9f:4b:35:d5:e8:7b:c6: a3:c6:a2:05:9e:51:2c:9a:1e:5f:f9:a6:e2:eb:01: 65:13:d6:46:72:23:bd:1c:55:15:d4:cb:10:31:e6: 4a:b4:17:0e:9c:e0:f4:8f:aa:e0:02:ef:a1:96:ec: 8e:6f:86:25:52:92:cd:2c:fc:cc:16:24:f2:91:37: 12:27:9b:d7:bf:d3:5b:02:65:22:02:25:ca:59:85: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:37:E6:E4:31:92:4F:85:17:62:0E:92:A7:7E:8B:FF:0E:A8:D2:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b6162258-e974-3d0b-9036-506271b3d99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:23:e3:69:21:9e:ab:17:73:dc:ed:d0:c4:f3:da:b0:cf:1e: cc:3f:2f:ea:ed:a2:be:c1:f3:d0:b6:12:b1:ff:35:9f:91:c3: 53:60:d0:c7:ea:6e:07:d1:53:a4:dc:45:20:20:90:5f:06:d6: b7:e8:c2:41:52:95:85:74:9e:b2:47:85:7c:f4:b8:f6:cd:08: 77:d9:d9:1b:91:65:b8:f3:f6:98:6b:ff:43:1b:ea:0d:d2:ed: c2:91:1c:e3:f4:e9:75:93:ea:10:51:60:6a:86:fa:be:62:c6: 0d:75:16:aa:4b:bc:ba:01:81:b1:40:fd:c4:15:9d:18:e6:63: 8c:0a:dd:4d:d0:25:18:6f:92:1e:52:9c:49:d1:c1:2d:ac:d5: 4d:90:cb:9a:ee:04:91:2d:81:16:83:cd:3c:20:11:d5:c8:12: 11:57:ed:f4:c0:67:f9:11:e1:ad:de:2a:f3:2b:db:97:e7:32: 9d:36:ac:df:30:62:33:93:07:6d:76:44:37:9b:25:5c:1c:35: f5:10:e0:73:75:e5:9e:47:9f:f7:8a:37:62:c9:f9:95:39:48: 58:ca:dc:a4:4b:dd:cd:78:7d:d3:af:cc:6c:f6:6c:78:dc:4f: d6:7c:0d:80:a5:3c:c8:3f:8d:07:cd:f9:c5:73:f6:84:f4:b9: 42:27:0a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvAfLaziLWOVy0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc1MFoXDTI1MDcyMzExMTc1MFowLzEtMCsGA1UEAxMk ZWQ0MWQxMTgtYWE4My00YWFjLWI1NWItMGE3YzVmOTMxNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv6SsIyyFkLXoeO8T4JOejJ0ltyvDv+6En4m XGmwk5iBGrnAaa/d4tnQrBJg4sG+pQSLPPl2USAu0uDWMrrEQdJBV6/6N4RwrP6P wMfQofe5tNkToc6ZpwIxqbSSNV4uIwUnuhlpScnlZRefWJVBYtz5asfyaxzPt4mo cDacWfcOEwhMNZAF1b6i29C2fjF7kCl8IE+x7O681KiiupAcsdeebT50uEKxbsBN 2p9LNdXoe8ajxqIFnlEsmh5f+abi6wFlE9ZGciO9HFUV1MsQMeZKtBcOnOD0j6rg Au+hluyOb4YlUpLNLPzMFiTykTcSJ5vXv9NbAmUiAiXKWYX6KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHk35uQxkk+FF2IOkqd+i/8OqNJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjYxNjIyNTgtZTk3NC0z ZDBiLTkwMzYtNTA2MjcxYjNkOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQj42khnqsXc9zt0MTz2rDPHsw/L+rtor7B89C2ErH/NZ+Rw1Ng0Mfq bgfRU6TcRSAgkF8G1rfowkFSlYV0nrJHhXz0uPbNCHfZ2RuRZbjz9phr/0Mb6g3S 7cKRHOP06XWT6hBRYGqG+r5ixg11FqpLvLoBgbFA/cQVnRjmY4wK3U3QJRhvkh5S nEnRwS2s1U2Qy5ruBJEtgRaDzTwgEdXIEhFX7fTAZ/kR4a3eKvMr25fnMp02rN8w YjOTB212RDebJVwcNfUQ4HN15Z5Hn/eKN2LJ+ZU5SFjK3KRL3c14fdOvzGz2bHjc T9Z8DYClPMg/jQfN+cVz9oT0uUInCtA= -----END CERTIFICATE-----Generated at Tue Apr 29 20:31:58 2025 by rpki-client