$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5da2668-43f2-39e1-bc17-28278be8296e.roa File: e5da2668-43f2-39e1-bc17-28278be8296e.roa (raw, json) Hash identifier: 38mpJ71elYMBwLLM9iu7Wb9Zf8rbhU7ZVHsaFMWcwUQ= Subject key identifier: 75:1B:A1:2A:87:3D:DD:D7:0A:99:B0:33:9F:E5:3B:AC:D6:56:A1:F3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC1471E49F8E8C4A651D40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5da2668-43f2-39e1-bc17-28278be8296e.roa Signing time: Thu 24 Apr 2025 11:17:56 +0000 ROA not before: Thu 24 Apr 2025 11:17:56 +0000 ROA not after: Wed 23 Jul 2025 11:17:56 +0000 asID: 12041 IP address blocks: 199.253.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:14:71:e4:9f:8e:8c:4a:65:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:56 2025 GMT Not After : Jul 23 11:17:56 2025 GMT Subject: CN=feff6879-e7e6-4aa5-92f6-fdc18409d16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:2b:29:16:f2:b0:7b:9e:b8:77:33:25:8f: 8d:35:b8:d3:b0:2e:84:d9:f9:b8:f3:21:22:aa:30: 06:f8:40:4f:e0:41:9d:f2:84:f4:6d:07:49:fe:ea: d5:67:95:2a:82:21:99:e9:d1:1c:59:f2:03:6a:ee: 2f:b2:ca:dd:2b:46:d6:e0:da:58:a4:5b:05:f7:64: df:3f:1d:e8:0c:c1:a0:4c:f2:db:8d:2c:b3:d3:0d: 54:69:4d:02:9f:56:95:0a:37:be:3a:09:b5:60:b9: 6c:b3:5b:ca:e4:01:02:42:21:50:78:b6:09:4f:60: 7f:e6:0d:75:b5:03:09:d8:e0:8e:96:bf:36:8b:7e: dc:cc:4b:16:d8:a7:2f:fb:8a:61:a9:d9:ac:c4:ec: 00:30:92:bd:06:bd:06:d4:a4:52:83:c2:ad:4e:a9: a0:e2:cb:39:11:64:36:be:32:4b:49:5a:80:fc:33: 3b:37:72:86:50:19:2c:d4:b2:04:a8:47:bd:78:0b: 86:27:8e:5a:88:81:72:fa:8d:35:b7:05:75:4f:b6: d5:f2:01:e8:42:fb:7c:e0:d2:c5:c6:c3:86:1d:6e: 00:c4:29:7e:12:78:bc:30:ae:61:bc:dd:8a:6d:37: 0c:8c:0e:dc:b1:b8:61:b8:f3:4e:d4:61:6c:e4:55: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1B:A1:2A:87:3D:DD:D7:0A:99:B0:33:9F:E5:3B:AC:D6:56:A1:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e5da2668-43f2-39e1-bc17-28278be8296e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8d:c8:b5:76:65:8b:47:12:1f:07:0f:03:b0:2a:86:13:f6: 77:32:79:83:82:29:e4:9d:70:e0:11:5d:d7:86:f6:59:f1:7a: cd:3c:a5:dd:39:f5:7f:a7:a2:ac:3f:e8:00:f7:02:31:e6:1b: ed:ff:11:bc:68:65:17:42:1e:24:5f:fc:44:9a:0f:cc:fc:a6: eb:59:83:75:b6:33:ff:85:8b:e6:e8:fd:ce:42:87:c1:e6:9a: 7f:74:87:aa:95:c0:d7:9e:74:6a:36:10:ee:ff:e6:cc:89:92: 02:4e:2f:8c:6e:fc:93:22:39:ee:a3:cc:7d:43:a1:a7:10:02: ff:24:20:b7:a2:6b:9f:b6:33:18:42:9a:fd:37:17:d0:2e:53: 12:be:de:a7:e1:be:ca:c9:af:d0:a6:4c:ce:20:b3:8c:19:c8: b6:ee:a2:e2:83:40:65:c4:86:bc:92:aa:61:01:50:fa:e6:2a: a4:f7:74:35:7a:6d:b7:4f:63:1d:3a:a5:3f:12:aa:f6:3c:65: 64:e2:7a:be:fe:d6:fa:ab:c4:f1:d1:46:f8:f7:09:96:e7:79: 2c:5d:ef:86:7f:6b:ab:64:5c:6e:0f:99:b3:ea:93:b5:57:e8: 06:ca:99:84:d2:79:d2:76:a9:fb:4f:88:e8:ae:e4:8e:50:5c: 71:89:46:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvBRx5J+OjEplHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc1NloXDTI1MDcyMzExMTc1NlowLzEtMCsGA1UEAxMk ZmVmZjY4NzktZTdlNi00YWE1LTkyZjYtZmRjMTg0MDlkMTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq8rKRbysHueuHczJY+NNbjTsC6E2fm48yEi qjAG+EBP4EGd8oT0bQdJ/urVZ5UqgiGZ6dEcWfIDau4vssrdK0bW4NpYpFsF92Tf Px3oDMGgTPLbjSyz0w1UaU0Cn1aVCje+Ogm1YLlss1vK5AECQiFQeLYJT2B/5g11 tQMJ2OCOlr82i37czEsW2Kcv+4phqdmsxOwAMJK9Br0G1KRSg8KtTqmg4ss5EWQ2 vjJLSVqA/DM7N3KGUBks1LIEqEe9eAuGJ45aiIFy+o01twV1T7bV8gHoQvt84NLF xsOGHW4AxCl+Eni8MK5hvN2KbTcMjA7csbhhuPNO1GFs5FUTOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUboSqHPd3XCpmwM5/lO6zWVqHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTVkYTI2NjgtNDNmMi0z OWUxLWJjMTctMjgyNzhiZTgyOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWNyLV2ZYtHEh8HDwOwKoYT9ncyeYOCKeSdcOARXdeG9lnxes08pd05 9X+noqw/6AD3AjHmG+3/EbxoZRdCHiRf/ESaD8z8putZg3W2M/+Fi+bo/c5Ch8Hm mn90h6qVwNeedGo2EO7/5syJkgJOL4xu/JMiOe6jzH1DoacQAv8kILeia5+2MxhC mv03F9AuUxK+3qfhvsrJr9CmTM4gs4wZyLbuouKDQGXEhrySqmEBUPrmKqT3dDV6 bbdPYx06pT8SqvY8ZWTier7+1vqrxPHRRvj3CZbneSxd74Z/a6tkXG4PmbPqk7VX 6AbKmYTSedJ2qftPiOiu5I5QXHGJRtw= -----END CERTIFICATE-----Generated at Wed Apr 30 01:41:46 2025 by rpki-client