$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa File: cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa (raw, json) Hash identifier: eESULLKU20RXPMW+0cS2fFsWdRKCfRuLahJ2L2g7p70= Subject key identifier: E3:1A:E6:01:6C:F2:03:8B:74:AF:16:9C:36:0E:C4:38:49:97:5D:56 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2132634B8A37464A648A800 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa Signing time: Thu 24 Apr 2025 14:13:22 +0000 ROA not before: Thu 24 Apr 2025 14:13:22 +0000 ROA not after: Wed 23 Jul 2025 14:13:22 +0000 asID: 207266 IP address blocks: 199.249.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:13:26:34:b8:a3:74:64:a6:48:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:13:22 2025 GMT Not After : Jul 23 14:13:22 2025 GMT Subject: CN=9e19b02b-403b-4190-8df1-755592266aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ec:75:a8:d2:96:d6:da:eb:65:f1:07:70:96: b7:29:2d:30:04:5c:32:e8:d6:23:02:50:36:c8:f0: 7b:1e:e2:0a:b3:c7:78:92:6b:08:43:81:78:a7:a8: e8:fa:60:a5:99:f0:b7:3d:10:aa:13:f9:23:c3:18: 77:f3:ee:6b:f6:1f:d0:4e:e7:b2:40:5c:c5:cb:53: 39:9e:67:23:b3:5d:6b:0e:59:95:3b:82:0e:8e:8b: 6d:08:47:75:5a:75:1b:56:47:d2:c2:c6:9e:4f:27: 81:1e:33:10:20:9c:14:a8:94:8f:d5:72:3b:e7:4e: a3:89:e0:f5:76:5b:3e:9a:aa:83:6c:85:45:5a:f4: 99:0f:d8:ee:a3:82:62:cf:b2:2c:0a:0e:f0:d1:cb: 27:d0:82:52:08:84:c4:07:7c:39:e4:b8:f5:bd:fa: 64:70:92:21:01:cd:48:f6:58:0e:60:23:f4:52:cb: f2:fd:41:a5:03:1d:28:03:39:b0:84:3a:ff:7a:71: 4e:50:c3:11:22:3d:d8:57:4d:57:d3:ce:a0:92:ed: df:7d:a1:49:09:c7:bd:78:32:38:70:91:90:a2:c1: 7e:6f:56:09:c5:78:55:b3:0b:c2:48:8f:3e:22:8d: 76:28:8a:ef:2d:1a:52:be:0e:b6:b7:b9:d5:6d:14: 51:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1A:E6:01:6C:F2:03:8B:74:AF:16:9C:36:0E:C4:38:49:97:5D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cb493953-7d82-3c68-b3d1-fcfb24bc7437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:dc:c3:85:c1:53:29:bd:8f:07:1d:db:ee:59:ad:38:6d:c0: 05:e6:30:3a:cd:33:e5:51:f7:af:c9:3a:46:35:9e:e7:51:41: 47:ff:18:55:b9:97:ec:fd:5a:45:47:0a:98:37:36:25:0b:6d: 17:78:4e:57:d9:f3:a9:2b:68:1d:13:6d:13:2f:97:aa:dc:b3: 78:6a:21:23:c9:57:c5:74:c8:72:8a:ef:64:61:d7:9d:76:fa: f9:12:58:62:5a:f2:7f:2d:e2:0a:85:55:6b:5c:01:6a:4d:f7: 40:51:6d:89:07:71:6f:74:f2:07:8e:b2:a2:1f:77:4e:3c:0d: 63:0f:39:2c:e0:a7:0b:e6:4d:39:fa:17:9e:65:87:c8:a4:31: 32:53:f5:16:b6:b5:7d:e3:c7:28:89:de:54:6b:10:89:b3:d7: 8f:0b:ac:16:e8:ab:c5:7c:43:9a:f1:f9:15:f0:ea:76:a7:b0: ab:99:99:52:3a:11:37:d9:fe:17:5a:b8:6a:b3:e0:f2:24:04: 86:0f:a3:3b:6e:d1:51:8d:bb:5c:69:9b:1f:0b:72:3f:59:7e: fb:dd:9d:95:bf:6d:36:54:91:6e:ae:c6:b7:62:a9:61:5c:9a: 3a:b6:15:08:42:9a:aa:95:7f:a8:16:68:4e:e4:82:dd:34:3d: 90:7f:dc:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEyY0uKN0ZKZIqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTMyMloXDTI1MDcyMzE0MTMyMlowLzEtMCsGA1UEAxMk OWUxOWIwMmItNDAzYi00MTkwLThkZjEtNzU1NTkyMjY2YWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOx1qNKW1trrZfEHcJa3KS0wBFwy6NYjAlA2 yPB7HuIKs8d4kmsIQ4F4p6jo+mClmfC3PRCqE/kjwxh38+5r9h/QTueyQFzFy1M5 nmcjs11rDlmVO4IOjottCEd1WnUbVkfSwsaeTyeBHjMQIJwUqJSP1XI7506jieD1 dls+mqqDbIVFWvSZD9juo4Jiz7IsCg7w0csn0IJSCITEB3w55Lj1vfpkcJIhAc1I 9lgOYCP0Usvy/UGlAx0oAzmwhDr/enFOUMMRIj3YV01X086gku3ffaFJCce9eDI4 cJGQosF+b1YJxXhVswvCSI8+Io12KIrvLRpSvg62t7nVbRRR7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMa5gFs8gOLdK8WnDYOxDhJl11WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2I0OTM5NTMtN2Q4Mi0z YzY4LWIzZDEtZmNmYjI0YmM3NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjcw4XBUym9jwcd2+5ZrThtwAXmMDrNM+VR96/JOkY1nudRQUf/GFW5 l+z9WkVHCpg3NiULbRd4TlfZ86kraB0TbRMvl6rcs3hqISPJV8V0yHKK72Rh1512 +vkSWGJa8n8t4gqFVWtcAWpN90BRbYkHcW908geOsqIfd048DWMPOSzgpwvmTTn6 F55lh8ikMTJT9Ra2tX3jxyiJ3lRrEImz148LrBboq8V8Q5rx+RXw6nansKuZmVI6 ETfZ/hdauGqz4PIkBIYPoztu0VGNu1xpmx8Lcj9ZfvvdnZW/bTZUkW6uxrdiqWFc mjq2FQhCmqqVf6gWaE7kgt00PZB/3EA= -----END CERTIFICATE-----Generated at Tue Apr 29 21:06:24 2025 by rpki-client