$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa File: cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa (raw, json) Hash identifier: 1FiwKgQw1kOiI76rqME3iiW9SIxtmiP7RKRY0s6w/kw= Subject key identifier: BE:86:02:14:9C:76:BF:9B:6A:96:1B:6F:97:F9:0A:1F:2F:A8:52:0F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBBF0DB28E45C0E32AA200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa Signing time: Thu 24 Apr 2025 11:17:15 +0000 ROA not before: Thu 24 Apr 2025 11:17:15 +0000 ROA not after: Wed 23 Jul 2025 11:17:15 +0000 asID: 12041 IP address blocks: 199.182.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:bf:0d:b2:8e:45:c0:e3:2a:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:15 2025 GMT Not After : Jul 23 11:17:15 2025 GMT Subject: CN=ed9cacb7-6846-43b2-a3c5-f14b18e8248c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:bd:2c:b2:8d:9b:76:6b:1b:dd:30:9f:28: c2:34:c0:21:7a:27:d5:9c:ee:cc:3b:eb:f1:73:c7: a2:bd:74:9a:67:e2:a9:71:9e:3d:a6:6a:ce:5e:d7: 1a:76:02:50:38:17:c1:23:25:b5:4f:b5:af:7e:93: a9:a8:83:2f:e0:6b:8b:85:bb:83:03:b4:dd:46:14: ff:0d:04:1e:48:7f:25:bc:ee:b1:28:95:c1:b0:34: a6:e7:a4:9c:48:eb:fa:c5:14:2e:42:29:e8:d0:08: a4:f8:af:ba:97:27:cc:42:55:f8:63:a2:38:41:4b: 16:10:bc:92:14:1c:0a:3f:f0:6d:59:0c:0f:21:bc: b7:c1:f2:7e:74:8a:9d:c0:66:44:42:3a:58:b9:b8: 11:4b:de:e6:f5:65:40:c3:1b:d0:66:67:7a:01:d1: 48:8c:1f:b9:38:63:98:a7:5c:ac:2f:d6:32:27:02: 35:72:ee:ea:63:28:54:e8:d7:40:e0:5a:77:52:fb: ea:ed:6c:c7:95:66:69:41:8f:47:e0:be:9d:16:86: 8c:66:f2:df:6d:a2:cd:0e:1e:25:05:cc:1c:19:d5: 2b:9c:f6:0b:8b:f9:62:32:b5:ca:aa:64:15:5a:4c: 92:59:e2:58:b2:a8:31:54:1d:26:36:a4:1d:a0:fa: 94:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:86:02:14:9C:76:BF:9B:6A:96:1B:6F:97:F9:0A:1F:2F:A8:52:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cd8c0905-ac80-3806-a98e-e07bd5fc5a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a2:a1:7c:e5:c9:b2:53:39:06:6a:0e:6e:0a:9d:1a:72:9b: 62:72:b2:7d:82:ab:87:c5:7c:fd:78:0b:d2:10:98:f9:10:e1: 05:2f:72:ae:25:56:8c:92:c8:0c:09:cb:e8:77:a9:15:1e:ed: 22:6c:6f:e7:f8:cc:9d:78:6b:bf:3c:ec:7f:a8:12:55:fc:62: bd:98:39:98:cf:d0:4f:44:70:bd:3d:75:3c:0a:8d:5c:2d:1f: e9:83:7e:01:9e:55:fe:34:9b:f4:1d:62:0d:a7:c4:54:24:ea: ce:b7:db:41:43:75:ba:c9:2c:94:23:a1:5e:60:35:2f:5c:35: 99:52:63:d0:e0:ad:22:84:ab:43:4e:74:50:53:0b:b9:47:24: 8e:67:04:71:16:5b:e1:8d:9b:a9:25:f1:31:82:2d:9c:23:25: 3b:ca:17:51:61:f8:9d:e4:7d:f0:54:80:0b:98:e1:8e:a3:4c: 53:b5:04:49:5f:46:1e:27:4d:1f:a3:50:27:d7:91:79:87:95: 29:c0:00:67:e8:63:6d:c4:54:34:0f:7a:09:ec:3e:53:2a:51: d6:c6:36:07:ad:01:33:0c:a4:f6:3b:ce:48:91:f6:06:05:21: 7a:cb:86:29:8b:41:bf:cb:bc:ff:29:cd:d5:b2:a4:af:7e:cf: 38:1c:b4:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu78Nso5FwOMqogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcxNVoXDTI1MDcyMzExMTcxNVowLzEtMCsGA1UEAxMk ZWQ5Y2FjYjctNjg0Ni00M2IyLWEzYzUtZjE0YjE4ZTgyNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0a9LLKNm3ZrG90wnyjCNMAheifVnO7MO+vx c8eivXSaZ+KpcZ49pmrOXtcadgJQOBfBIyW1T7WvfpOpqIMv4GuLhbuDA7TdRhT/ DQQeSH8lvO6xKJXBsDSm56ScSOv6xRQuQino0Aik+K+6lyfMQlX4Y6I4QUsWELyS FBwKP/BtWQwPIby3wfJ+dIqdwGZEQjpYubgRS97m9WVAwxvQZmd6AdFIjB+5OGOY p1ysL9YyJwI1cu7qYyhU6NdA4Fp3Uvvq7WzHlWZpQY9H4L6dFoaMZvLfbaLNDh4l BcwcGdUrnPYLi/liMrXKqmQVWkySWeJYsqgxVB0mNqQdoPqU3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6GAhScdr+bapYbb5f5Ch8vqFIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2Q4YzA5MDUtYWM4MC0z ODA2LWE5OGUtZTA3YmQ1ZmM1YTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2ioXzlybJTOQZqDm4KnRpym2Jysn2Cq4fFfP14C9IQmPkQ4QUvcq4l VoySyAwJy+h3qRUe7SJsb+f4zJ14a7887H+oElX8Yr2YOZjP0E9EcL09dTwKjVwt H+mDfgGeVf40m/QdYg2nxFQk6s6320FDdbrJLJQjoV5gNS9cNZlSY9DgrSKEq0NO dFBTC7lHJI5nBHEWW+GNm6kl8TGCLZwjJTvKF1Fh+J3kffBUgAuY4Y6jTFO1BElf Rh4nTR+jUCfXkXmHlSnAAGfoY23EVDQPegnsPlMqUdbGNgetATMMpPY7zkiR9gYF IXrLhimLQb/LvP8pzdWypK9+zzgctO8= -----END CERTIFICATE-----Generated at Tue Apr 29 23:29:27 2025 by rpki-client