$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa File: e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa (raw, json) Hash identifier: HNn+MJjPA+GzZnUJL4QkJZXP7BRg2uLmlPX07yFn2HA= Subject key identifier: 32:C0:54:30:BA:FF:82:41:FA:8D:78:9B:8A:4B:DF:C0:04:FD:8E:1C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A212FB8CA3993FC72F6D7B80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa Signing time: Thu 24 Apr 2025 14:13:01 +0000 ROA not before: Thu 24 Apr 2025 14:13:01 +0000 ROA not after: Wed 23 Jul 2025 14:13:01 +0000 asID: 207266 IP address blocks: 199.249.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:fb:8c:a3:99:3f:c7:2f:6d:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:13:01 2025 GMT Not After : Jul 23 14:13:01 2025 GMT Subject: CN=fbc46e35-5f41-4f32-a91b-3873f6545ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:59:69:fd:bf:07:cc:3e:7e:77:f8:bc:55:22: 53:c2:0a:b2:2d:58:82:bc:2b:8f:2b:93:ff:1b:1c: b3:72:ad:d1:61:5c:c6:6f:0d:42:79:5c:1d:3a:69: 7f:78:80:d7:82:ab:7f:9d:ee:c8:57:d7:c6:42:6d: 12:40:83:9f:56:bf:ba:0b:e1:1f:b7:9b:74:a4:a6: c7:f8:37:f2:bc:76:a3:d3:b1:81:c4:03:ef:67:14: 84:89:55:30:15:56:98:74:08:b4:57:72:41:e1:f2: 80:d0:93:2f:3d:0d:22:fe:f3:76:de:54:78:e6:25: d3:94:06:13:e7:4b:6f:7e:65:fa:0d:63:b6:32:98: f9:9e:7e:56:b5:f6:4f:11:a2:1d:c7:70:3d:ca:a0: 18:52:56:30:ee:78:9e:7a:85:3c:db:34:ce:4e:f1: ab:1e:b9:af:e6:a8:33:2c:2f:04:e9:64:bf:61:26: b3:5a:72:02:32:10:7d:ed:16:98:01:80:93:08:5d: e9:38:dd:5d:ec:78:37:ef:a8:e8:c9:70:2c:d5:0d: 3f:df:da:0f:cc:48:3e:43:a7:40:96:cf:63:b5:f3: f2:55:ac:50:36:af:50:ff:22:11:67:af:31:f6:ea: ac:90:d3:79:26:b3:6e:6f:e0:7a:f8:69:ed:51:0d: a3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C0:54:30:BA:FF:82:41:FA:8D:78:9B:8A:4B:DF:C0:04:FD:8E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e4bba3b4-76d8-3a48-82ef-f246e225dc35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:c2:02:00:bf:ad:41:7b:f0:86:85:c7:ac:27:fe:36:41:50: 62:cd:7f:a0:95:d5:80:8f:cc:3c:53:e8:20:c2:bf:bb:76:97: 1f:2d:f2:d8:ce:54:61:92:b2:e2:7e:91:5f:4b:30:31:69:3c: 59:c6:5b:e5:f3:0f:18:e7:f7:c4:0e:d9:11:eb:a0:53:22:c6: 5c:b9:3c:e5:d2:f5:99:65:74:6e:02:99:2e:03:c8:29:48:3e: 7b:9e:54:7f:ae:e3:e1:d8:1b:b1:ae:b6:7d:bd:05:d3:09:c3: 70:87:c9:98:e9:b1:11:7c:5a:1f:d3:66:23:ef:c3:09:b4:54: 5d:ca:f2:f7:f3:7d:20:a9:31:54:b1:49:96:3b:ab:d1:60:4c: 8a:ba:9d:38:0e:40:8d:3e:28:7e:28:13:13:40:cc:e8:c9:2d: 79:70:15:03:9d:95:d2:56:e5:96:09:9f:39:14:29:32:be:c3: db:54:2d:9b:04:0f:45:11:07:e7:af:57:71:6c:73:e3:04:ce: e2:b9:64:22:30:a9:d9:ea:d9:c0:72:1c:c5:d0:a3:55:35:6b: a5:d9:eb:a2:84:d9:25:49:87:9d:f9:0b:c2:a8:69:c1:ff:84: 24:8d:96:e2:07:0c:e1:5c:a2:d3:25:f8:63:16:da:9c:75:40: 46:32:6b:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEvuMo5k/xy9te4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTMwMVoXDTI1MDcyMzE0MTMwMVowLzEtMCsGA1UEAxMk ZmJjNDZlMzUtNWY0MS00ZjMyLWE5MWItMzg3M2Y2NTQ1YWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1lp/b8HzD5+d/i8VSJTwgqyLViCvCuPK5P/ Gxyzcq3RYVzGbw1CeVwdOml/eIDXgqt/ne7IV9fGQm0SQIOfVr+6C+Eft5t0pKbH +DfyvHaj07GBxAPvZxSEiVUwFVaYdAi0V3JB4fKA0JMvPQ0i/vN23lR45iXTlAYT 50tvfmX6DWO2Mpj5nn5WtfZPEaIdx3A9yqAYUlYw7nieeoU82zTOTvGrHrmv5qgz LC8E6WS/YSazWnICMhB97RaYAYCTCF3pON1d7Hg376joyXAs1Q0/39oPzEg+Q6dA ls9jtfPyVaxQNq9Q/yIRZ68x9uqskNN5JrNub+B6+GntUQ2jwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLAVDC6/4JB+o14m4pL38AE/Y4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTRiYmEzYjQtNzZkOC0z YTQ4LTgyZWYtZjI0NmUyMjVkYzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHCAgC/rUF78IaFx6wn/jZBUGLNf6CV1YCPzDxT6CDCv7t2lx8t8tjO VGGSsuJ+kV9LMDFpPFnGW+XzDxjn98QO2RHroFMixly5POXS9ZlldG4CmS4DyClI PnueVH+u4+HYG7Gutn29BdMJw3CHyZjpsRF8Wh/TZiPvwwm0VF3K8vfzfSCpMVSx SZY7q9FgTIq6nTgOQI0+KH4oExNAzOjJLXlwFQOdldJW5ZYJnzkUKTK+w9tULZsE D0URB+evV3Fsc+MEzuK5ZCIwqdnq2cByHMXQo1U1a6XZ66KE2SVJh535C8KoacH/ hCSNluIHDOFcotMl+GMW2px1QEYyax4= -----END CERTIFICATE-----Generated at Tue Apr 29 21:07:16 2025 by rpki-client