$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c47d9973-fd09-3cf3-a491-ec2e473bfe64.roa File: c47d9973-fd09-3cf3-a491-ec2e473bfe64.roa (raw, json) Hash identifier: lcFRYh07f+P+oFSb7YwjNN7M3fxkMWKbxSIyLoHT/fI= Subject key identifier: 2A:A3:F4:42:53:60:85:7C:B9:CA:50:12:1A:1B:EC:FA:54:65:08:E6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC0B36DF179D758D8FB000 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c47d9973-fd09-3cf3-a491-ec2e473bfe64.roa Signing time: Thu 24 Apr 2025 11:17:51 +0000 ROA not before: Thu 24 Apr 2025 11:17:51 +0000 ROA not after: Wed 23 Jul 2025 11:17:51 +0000 asID: 12041 IP address blocks: 199.249.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:0b:36:df:17:9d:75:8d:8f:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:51 2025 GMT Not After : Jul 23 11:17:51 2025 GMT Subject: CN=d53582c0-864c-4bc4-a9a4-aaf07167425f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f8:a7:dc:9f:9c:33:c4:51:31:8b:e6:79:31: d0:64:dc:3b:28:35:33:13:aa:14:1f:41:ae:ec:d8: 3b:01:7a:1c:fc:cb:4c:c1:0a:d5:8b:46:af:4e:a7: 5f:d8:7b:94:dc:33:79:a2:82:62:e8:7a:da:0d:d6: 2e:c8:e3:45:eb:49:fb:26:00:4e:22:ef:39:b6:9e: 81:97:bd:da:55:e4:a6:a9:f6:20:ea:44:f7:84:3e: 62:c5:7d:c3:be:3c:20:73:95:68:30:64:c0:6e:9d: 8c:1d:d4:8f:6a:36:7d:4b:4f:de:11:cc:c1:49:ea: fb:bc:4e:26:8a:73:b6:b8:41:c0:49:8c:58:79:1e: 3c:8f:21:7d:b2:f6:61:8b:01:74:25:a7:8e:60:57: 71:6c:28:8e:4a:2a:66:88:06:4d:34:61:97:de:ff: 90:f0:67:d3:a2:a8:e4:5d:09:e2:87:b2:06:76:5d: f0:71:aa:ac:75:da:0c:25:fe:d9:4b:e9:60:70:ac: 0b:67:64:54:32:99:d1:cb:c7:a1:09:e4:0e:46:a6: 26:3e:6e:b7:94:00:49:54:d5:87:6e:29:02:3b:90: 46:b4:4a:b9:c3:55:a9:43:44:7a:f7:b7:13:a2:e7: f6:d9:d7:8a:c0:f5:c3:03:2a:4d:fd:a3:49:c8:c2: 00:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A3:F4:42:53:60:85:7C:B9:CA:50:12:1A:1B:EC:FA:54:65:08:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c47d9973-fd09-3cf3-a491-ec2e473bfe64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:4c:15:c3:6b:25:96:a8:c6:13:5e:ef:b9:89:5c:e1:94:d7: f0:9d:e4:71:ae:fd:48:00:86:7d:aa:3e:45:22:3c:ef:a9:e3: 7a:94:f4:34:4c:eb:59:49:38:cd:47:0c:1b:1d:d4:06:b8:46: 95:e0:3f:26:d4:c4:4e:40:11:0f:b2:88:50:bf:3d:ae:cf:34: b4:5b:cd:e7:12:c5:7f:b8:d1:f7:23:34:e5:ad:8d:d7:a4:b9: 05:3e:e7:5a:0f:cd:13:53:2e:7f:16:6c:c1:0b:84:ca:65:80: 65:8a:71:25:67:29:68:d4:f0:0c:4a:54:89:2e:76:22:13:08: 11:24:35:3f:2a:df:2a:bc:10:3b:a5:ba:6f:e8:4f:42:aa:07: c1:91:86:d9:50:2c:b8:fc:8a:70:49:a3:f0:59:19:12:bb:c9: 50:c3:db:05:25:f1:76:4d:6a:ab:2c:fd:3e:f7:98:72:53:81: 78:22:7b:75:33:27:db:11:b3:65:fa:6e:98:c1:2a:ac:65:84: f1:b4:0e:71:38:06:b7:c2:e2:28:e5:ca:95:b0:73:13:2b:f4: b0:15:5a:73:72:fa:c0:64:01:13:f8:57:05:f3:5f:4e:4c:e8: 97:97:ce:99:6c:28:04:23:9c:d8:88:b6:ff:aa:a1:66:4e:7d: 8b:02:32:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvAs23xeddY2PsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc1MVoXDTI1MDcyMzExMTc1MVowLzEtMCsGA1UEAxMk ZDUzNTgyYzAtODY0Yy00YmM0LWE5YTQtYWFmMDcxNjc0MjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/in3J+cM8RRMYvmeTHQZNw7KDUzE6oUH0Gu 7Ng7AXoc/MtMwQrVi0avTqdf2HuU3DN5ooJi6HraDdYuyONF60n7JgBOIu85tp6B l73aVeSmqfYg6kT3hD5ixX3Dvjwgc5VoMGTAbp2MHdSPajZ9S0/eEczBSer7vE4m inO2uEHASYxYeR48jyF9svZhiwF0JaeOYFdxbCiOSipmiAZNNGGX3v+Q8GfToqjk XQnih7IGdl3wcaqsddoMJf7ZS+lgcKwLZ2RUMpnRy8ehCeQORqYmPm63lABJVNWH bikCO5BGtEq5w1WpQ0R697cTouf22deKwPXDAypN/aNJyMIA1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqj9EJTYIV8ucpQEhob7PpUZQjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzQ3ZDk5NzMtZmQwOS0z Y2YzLWE0OTEtZWMyZTQ3M2JmZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlMFcNrJZaoxhNe77mJXOGU1/Cd5HGu/UgAhn2qPkUiPO+p43qU9DRM 61lJOM1HDBsd1Aa4RpXgPybUxE5AEQ+yiFC/Pa7PNLRbzecSxX+40fcjNOWtjdek uQU+51oPzRNTLn8WbMELhMplgGWKcSVnKWjU8AxKVIkudiITCBEkNT8q3yq8EDul um/oT0KqB8GRhtlQLLj8inBJo/BZGRK7yVDD2wUl8XZNaqss/T73mHJTgXgie3Uz J9sRs2X6bpjBKqxlhPG0DnE4BrfC4ijlypWwcxMr9LAVWnNy+sBkARP4VwXzX05M 6JeXzplsKAQjnNiItv+qoWZOfYsCMuM= -----END CERTIFICATE-----Generated at Tue Apr 29 22:15:52 2025 by rpki-client