$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa File: cdd97578-6813-332c-a0bf-22a87019cc3f.roa (raw, json) Hash identifier: Gq3zo2+CRTP3B2F5sIqR+aphyZKW/tqmZon77RMUeq8= Subject key identifier: B4:6E:8A:A2:4A:90:8A:17:80:DA:4A:47:F2:04:6B:23:9F:1F:F7:AF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC175551943B10C05A9580 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa Signing time: Thu 24 Apr 2025 11:17:57 +0000 ROA not before: Thu 24 Apr 2025 11:17:57 +0000 ROA not after: Wed 23 Jul 2025 11:17:57 +0000 asID: 12041 IP address blocks: 199.254.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:17:55:51:94:3b:10:c0:5a:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:57 2025 GMT Not After : Jul 23 11:17:57 2025 GMT Subject: CN=fdfd859c-c7a4-4fd3-b2a5-ca694e7122da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:08:f1:47:00:ac:fb:c3:ca:d7:44:51:39: b1:88:f9:7d:ed:0a:28:c1:1b:f1:9e:89:d9:ba:a7: 6d:d6:7e:b7:af:56:a4:10:2a:72:ed:c4:e2:5b:cb: fe:fe:79:71:ce:f5:f9:31:d6:7b:94:6a:e5:aa:4d: 0d:ce:a3:49:47:07:28:a3:3c:c6:e4:b5:96:2e:03: 95:c4:02:4e:e1:37:2c:b5:21:40:72:81:d6:22:c9: 3b:81:1b:7a:04:00:a0:7f:52:e8:60:dc:cb:19:fc: c1:d8:69:bd:06:5e:5b:94:16:c1:31:00:8b:2b:47: 80:a2:ba:29:4c:6e:38:92:57:7d:cc:eb:49:4e:46: c3:4f:e8:6d:af:28:79:0a:6c:c8:2d:37:7d:74:96: c3:f5:d4:2a:43:9d:ac:20:4b:84:f2:f3:dc:47:fd: 21:0d:ff:3b:fc:ec:b9:7e:22:82:92:4f:03:fd:8f: 1a:70:b2:31:37:14:3c:dc:c3:ba:57:04:c4:2f:27: 2e:30:d9:a1:35:29:88:1e:b4:10:de:aa:c6:ac:53: 9f:02:d9:05:72:32:6e:9e:d2:5e:b9:15:cc:0e:fb: d7:d2:4c:df:97:39:57:12:c4:0e:d9:26:f3:5e:46: 3e:1b:47:19:31:40:eb:76:d7:28:bf:93:78:da:2f: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6E:8A:A2:4A:90:8A:17:80:DA:4A:47:F2:04:6B:23:9F:1F:F7:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdd97578-6813-332c-a0bf-22a87019cc3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:3a:20:85:25:17:95:47:85:ed:3f:1f:d8:ad:89:1d:a1:c1: c2:41:70:ad:ca:9f:42:23:7b:55:6d:3f:b8:8d:26:82:94:aa: 55:fe:a9:f2:d4:3b:92:d0:05:60:ac:cf:9f:73:dd:20:8f:35: b2:e7:77:1a:a3:a9:d6:26:c0:0c:f3:cd:cc:42:90:42:cd:6d: 1f:7b:fe:d4:38:b3:05:fc:80:fd:6c:c5:12:6d:04:69:f2:ce: c5:15:78:66:fb:59:01:13:fc:85:87:4d:68:ad:fa:79:0b:77: 1a:c0:e2:13:6b:58:ee:e4:46:29:9f:59:d7:65:30:19:3b:9f: 2c:46:a6:33:7f:fd:68:33:f6:9b:9a:f6:2e:a2:14:07:7c:46: a6:70:d6:19:b4:ac:34:24:2e:c5:fc:7d:fe:a2:ca:26:06:ea: 33:83:01:5a:93:b1:eb:04:bb:bc:44:d1:57:c7:75:18:fb:bf: 67:87:42:ad:66:91:61:8a:b0:6a:cd:59:83:f2:5e:e9:74:2d: bf:13:03:51:13:81:95:e5:90:39:10:d3:52:64:5b:f6:70:45: ea:b8:c4:60:39:94:27:38:7e:48:01:b7:7c:28:f5:d7:40:e1: 90:11:c6:52:b4:85:47:ed:b3:cb:58:32:ae:5f:f9:77:7c:40: ab:48:fb:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvBdVUZQ7EMBalYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc1N1oXDTI1MDcyMzExMTc1N1owLzEtMCsGA1UEAxMk ZmRmZDg1OWMtYzdhNC00ZmQzLWIyYTUtY2E2OTRlNzEyMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfII8UcArPvDytdEUTmxiPl97QoowRvxnonZ uqdt1n63r1akECpy7cTiW8v+/nlxzvX5MdZ7lGrlqk0NzqNJRwcoozzG5LWWLgOV xAJO4TcstSFAcoHWIsk7gRt6BACgf1LoYNzLGfzB2Gm9Bl5blBbBMQCLK0eAorop TG44kld9zOtJTkbDT+htryh5CmzILTd9dJbD9dQqQ52sIEuE8vPcR/0hDf87/Oy5 fiKCkk8D/Y8acLIxNxQ83MO6VwTELycuMNmhNSmIHrQQ3qrGrFOfAtkFcjJuntJe uRXMDvvX0kzflzlXEsQO2SbzXkY+G0cZMUDrdtcov5N42i98FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRuiqJKkIoXgNpKR/IEayOfH/evMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2RkOTc1NzgtNjgxMy0z MzJjLWEwYmYtMjJhODcwMTljYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo6IIUlF5VHhe0/H9itiR2hwcJBcK3Kn0Ije1VtP7iNJoKUqlX+qfLU O5LQBWCsz59z3SCPNbLndxqjqdYmwAzzzcxCkELNbR97/tQ4swX8gP1sxRJtBGny zsUVeGb7WQET/IWHTWit+nkLdxrA4hNrWO7kRimfWddlMBk7nyxGpjN//Wgz9pua 9i6iFAd8RqZw1hm0rDQkLsX8ff6iyiYG6jODAVqTsesEu7xE0VfHdRj7v2eHQq1m kWGKsGrNWYPyXul0Lb8TA1ETgZXlkDkQ01JkW/ZwReq4xGA5lCc4fkgBt3wo9ddA 4ZARxlK0hUfts8tYMq5f+Xd8QKtI+50= -----END CERTIFICATE-----Generated at Wed Apr 30 03:48:43 2025 by rpki-client