$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c24095cc-fe71-3104-80d4-2d1e88a49062.roa File: c24095cc-fe71-3104-80d4-2d1e88a49062.roa (raw, json) Hash identifier: OYtR4eFtO4AKcAGHFp28ps6ciDM5kIafgeWyK/DnveA= Subject key identifier: 67:74:6F:10:68:21:A1:64:3A:9E:C5:18:90:A5:81:62:8E:96:AA:69 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB92F8357CEEFC2975AAC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c24095cc-fe71-3104-80d4-2d1e88a49062.roa Signing time: Thu 24 Apr 2025 11:16:54 +0000 ROA not before: Thu 24 Apr 2025 11:16:54 +0000 ROA not after: Wed 23 Jul 2025 11:16:54 +0000 asID: 12041 IP address blocks: 199.7.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:92:f8:35:7c:ee:fc:29:75:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:54 2025 GMT Not After : Jul 23 11:16:54 2025 GMT Subject: CN=ba48db0a-3cec-482f-a20c-55936def9c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e0:78:3c:61:89:f7:d8:ac:b6:85:0a:3f:52: 80:cd:e0:e3:ce:ab:90:3d:69:de:95:95:36:18:86: ba:63:29:d4:c0:49:dc:d8:69:db:bc:f0:0a:b6:3b: e7:24:00:a6:e9:e3:e4:ba:2e:15:2e:28:a1:8f:5e: f5:fe:bf:9a:8a:00:e9:9f:3f:82:e1:d2:b3:48:3b: a5:31:f2:c6:fd:1b:fa:9b:a1:d9:dd:01:61:57:42: 8c:b9:e9:a6:fb:2b:75:b7:57:4c:4b:e8:63:ba:78: b2:24:1d:90:75:1c:9d:e8:9a:b1:a0:0e:39:94:5c: d6:32:a6:b9:03:b6:83:04:95:61:11:16:16:82:72: e5:83:30:84:24:3d:8b:aa:a2:dc:84:73:9b:8a:0f: d3:08:e4:ef:ac:07:63:f9:0c:f9:1a:61:a1:e2:09: d6:b6:5c:74:f0:5c:ce:09:13:31:f2:52:26:ae:8b: fa:77:9a:a5:ae:9b:74:de:0e:49:0c:1c:8e:a6:ce: 0c:0d:d9:5c:f3:11:9f:bb:fa:5e:97:60:3a:85:ac: 2a:ea:f0:8c:c7:21:5b:6b:c5:bd:bd:ca:74:fb:d2: a3:f5:16:47:6d:c3:cf:1d:4a:24:f4:d9:04:77:e0: 6a:7f:e1:20:a1:6a:5b:32:fc:26:25:1e:45:07:7a: da:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:74:6F:10:68:21:A1:64:3A:9E:C5:18:90:A5:81:62:8E:96:AA:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c24095cc-fe71-3104-80d4-2d1e88a49062.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.7.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7e:7b:6d:66:92:b3:cc:e6:7b:87:98:15:68:c1:98:72:25: 89:f8:32:0e:d7:5d:8f:a6:32:f8:10:68:ab:85:77:70:23:cc: 97:04:a0:f6:87:6e:76:5f:27:f0:a0:d8:42:a7:cd:c7:a4:76: d9:3b:46:34:eb:7f:3e:fd:40:26:b5:ad:6c:b8:ca:cc:43:bd: 8f:c1:2a:55:98:06:47:d6:6a:98:38:91:27:60:6a:a9:bc:fb: ea:de:bb:42:d4:8e:03:f3:c3:8f:75:9f:1f:e2:21:0c:c8:50: 01:38:a0:19:04:34:1f:28:2b:0d:d1:e1:0f:1e:2a:c4:f6:c4: bb:55:3e:9c:ea:0c:ce:18:b1:f3:b3:a9:8d:45:0f:92:44:1d: 69:9f:c7:40:11:ff:e7:ab:44:a7:49:95:29:26:d3:06:72:fa: 31:98:46:8e:73:cc:e6:ee:16:d0:6d:88:e1:2c:0d:de:06:87: 76:64:36:35:f6:b3:6d:f9:b5:29:88:1e:36:60:37:65:0d:78: 9f:51:ba:64:cd:bb:32:b8:e9:92:c3:c0:01:be:4a:b5:ec:d0: fa:5e:9f:55:e0:5e:84:45:ee:3b:6c:c5:6d:6a:55:1d:e5:74: 39:dd:05:2f:63:5e:67:1a:33:6c:6f:0f:31:e4:f7:98:b5:3d: 51:40:43:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu5L4NXzu/Cl1qsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY1NFoXDTI1MDcyMzExMTY1NFowLzEtMCsGA1UEAxMk YmE0OGRiMGEtM2NlYy00ODJmLWEyMGMtNTU5MzZkZWY5YzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+B4PGGJ99istoUKP1KAzeDjzquQPWnelZU2 GIa6YynUwEnc2GnbvPAKtjvnJACm6ePkui4VLiihj171/r+aigDpnz+C4dKzSDul MfLG/Rv6m6HZ3QFhV0KMuemm+yt1t1dMS+hjuniyJB2QdRyd6JqxoA45lFzWMqa5 A7aDBJVhERYWgnLlgzCEJD2LqqLchHObig/TCOTvrAdj+Qz5GmGh4gnWtlx08FzO CRMx8lImrov6d5qlrpt03g5JDByOps4MDdlc8xGfu/pel2A6hawq6vCMxyFba8W9 vcp0+9Kj9RZHbcPPHUok9NkEd+Bqf+EgoWpbMvwmJR5FB3raTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd0bxBoIaFkOp7FGJClgWKOlqppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzI0MDk1Y2MtZmU3MS0z MTA0LTgwZDQtMmQxZTg4YTQ5MDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGF+e21mkrPM5nuHmBVowZhyJYn4Mg7XXY+mMvgQaKuFd3AjzJcEoPaH bnZfJ/Cg2EKnzcekdtk7RjTrfz79QCa1rWy4ysxDvY/BKlWYBkfWapg4kSdgaqm8 ++reu0LUjgPzw491nx/iIQzIUAE4oBkENB8oKw3R4Q8eKsT2xLtVPpzqDM4YsfOz qY1FD5JEHWmfx0AR/+erRKdJlSkm0wZy+jGYRo5zzObuFtBtiOEsDd4Gh3ZkNjX2 s235tSmIHjZgN2UNeJ9RumTNuzK46ZLDwAG+SrXs0Ppen1XgXoRF7jtsxW1qVR3l dDndBS9jXmcaM2xvDzHk95i1PVFAQwY= -----END CERTIFICATE-----Generated at Tue Apr 29 18:37:55 2025 by rpki-client