$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d84c6a65-765d-3a18-a0cc-8f4a1fecda9c.roa File: d84c6a65-765d-3a18-a0cc-8f4a1fecda9c.roa (raw, json) Hash identifier: wJKahEkOFIx+CvG8OGwQrwErfejaY18aZCf1Dy7+EKg= Subject key identifier: 40:E1:0F:18:BE:F2:C4:FE:93:61:91:AE:E3:A7:CD:13:B4:D3:6A:A8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBB77E59CF4260680B4328 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d84c6a65-765d-3a18-a0cc-8f4a1fecda9c.roa Signing time: Thu 24 Apr 2025 11:17:12 +0000 ROA not before: Thu 24 Apr 2025 11:17:12 +0000 ROA not after: Wed 23 Jul 2025 11:17:12 +0000 asID: 12041 IP address blocks: 199.182.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:b7:7e:59:cf:42:60:68:0b:43:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:12 2025 GMT Not After : Jul 23 11:17:12 2025 GMT Subject: CN=6426dcd0-3339-4b2d-b3f7-4dc6eacdbe5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:2e:9a:69:cc:8f:68:2a:b8:a7:28:12:67: 6f:04:1e:8f:1d:ec:ba:28:64:e7:85:5e:e5:92:ef: 48:0c:7a:09:ed:7b:f7:ea:0a:84:40:de:7e:26:84: a6:17:45:ba:f1:43:cd:3a:e9:d5:45:eb:c0:ad:7a: 6f:72:4a:23:6c:f2:8f:7f:5f:7b:28:f9:8b:f8:de: bd:d5:5e:8f:db:19:97:94:e3:08:81:bc:36:fe:22: 4d:e0:b4:98:3d:9a:ee:ae:c7:d4:a2:d1:22:c0:e7: 9c:27:08:9c:10:42:4e:af:1a:2e:2f:5d:33:10:81: bd:ad:db:a6:8c:1a:c0:40:fc:5c:b6:dc:71:83:84: 20:d7:cc:9b:3f:bb:aa:1f:3e:bf:fa:a5:3b:d2:5c: 72:e7:54:d0:cd:8d:18:d4:ac:d3:0c:53:e6:63:ab: e9:ce:91:c6:c2:36:ad:46:db:18:a8:28:5b:af:dc: 45:a4:fd:8e:ea:2c:8e:fc:d8:bd:c5:53:23:5c:b1: 5c:05:57:6a:99:5d:38:4f:32:0f:99:11:4f:80:72: c2:4b:72:05:b5:8c:1b:b8:1b:27:4b:e1:00:0e:67: ee:58:cb:7f:58:b2:d9:55:af:d7:33:17:53:a6:ee: a7:77:ec:af:70:77:61:8a:0e:ec:ca:ad:10:96:ce: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E1:0F:18:BE:F2:C4:FE:93:61:91:AE:E3:A7:CD:13:B4:D3:6A:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d84c6a65-765d-3a18-a0cc-8f4a1fecda9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e2:cc:c9:bd:4e:cd:45:5d:c2:4d:c9:68:de:80:ea:1d:62: 57:78:bd:96:1f:87:c8:98:93:f7:60:41:4d:8e:38:dc:fd:62: 41:5e:49:e8:9d:ea:5d:10:9c:bd:ef:63:13:0b:00:ad:a6:4f: f4:8d:cf:dd:dc:87:2f:7f:8d:2e:ad:31:97:c7:16:77:72:06: fd:9c:fa:6a:12:12:7c:36:ba:be:12:2a:bb:a2:0e:05:22:34: 05:d9:93:8b:59:4c:4d:d8:44:71:00:e8:77:62:a2:1d:31:88: 36:34:ca:21:7f:58:20:08:28:d0:fc:19:8e:79:13:8f:94:a6: 17:2c:58:e0:b1:c8:9d:91:2b:55:23:d4:f7:38:d7:ab:d4:5c: dc:cc:c7:b7:2e:0c:ba:90:a0:0e:ee:ed:02:45:be:a8:d0:45: 86:90:ce:e7:51:73:9a:b6:4c:9b:45:fd:0d:2c:0e:33:53:34: ad:e6:eb:ac:b2:c6:a3:9e:6b:6b:dd:64:b6:ea:08:c7:48:3c: e8:c7:c8:e3:5e:32:21:6b:32:ae:a9:14:28:3f:8e:17:53:3c: b4:02:42:bb:44:6e:af:c8:9d:e1:0e:3b:e6:e2:00:08:88:57: 86:c8:01:8c:d7:40:42:dd:18:61:df:42:25:47:bd:f8:9e:d4: d6:c8:58:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu7d+Wc9CYGgLQygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcxMloXDTI1MDcyMzExMTcxMlowLzEtMCsGA1UEAxMk NjQyNmRjZDAtMzMzOS00YjJkLWIzZjctNGRjNmVhY2RiZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXkummnMj2gquKcoEmdvBB6PHey6KGTnhV7l ku9IDHoJ7Xv36gqEQN5+JoSmF0W68UPNOunVRevArXpvckojbPKPf197KPmL+N69 1V6P2xmXlOMIgbw2/iJN4LSYPZrursfUotEiwOecJwicEEJOrxouL10zEIG9rdum jBrAQPxcttxxg4Qg18ybP7uqHz6/+qU70lxy51TQzY0Y1KzTDFPmY6vpzpHGwjat RtsYqChbr9xFpP2O6iyO/Ni9xVMjXLFcBVdqmV04TzIPmRFPgHLCS3IFtYwbuBsn S+EADmfuWMt/WLLZVa/XMxdTpu6nd+yvcHdhig7syq0Qls4B2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDhDxi+8sT+k2GRruOnzRO002qoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDg0YzZhNjUtNzY1ZC0z YTE4LWEwY2MtOGY0YTFmZWNkYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfizMm9Ts1FXcJNyWjegOodYld4vZYfh8iYk/dgQU2OONz9YkFeSeid 6l0QnL3vYxMLAK2mT/SNz93chy9/jS6tMZfHFndyBv2c+moSEnw2ur4SKruiDgUi NAXZk4tZTE3YRHEA6Hdioh0xiDY0yiF/WCAIKND8GY55E4+UphcsWOCxyJ2RK1Uj 1Pc416vUXNzMx7cuDLqQoA7u7QJFvqjQRYaQzudRc5q2TJtF/Q0sDjNTNK3m66yy xqOea2vdZLbqCMdIPOjHyONeMiFrMq6pFCg/jhdTPLQCQrtEbq/IneEOO+biAAiI V4bIAYzXQELdGGHfQiVHvfie1NbIWOQ= -----END CERTIFICATE-----Generated at Sun Jun 15 12:02:56 2025 by rpki-client