$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e76de01e-7c23-35ab-a2c6-c2d58b7600fb.roa File: e76de01e-7c23-35ab-a2c6-c2d58b7600fb.roa (raw, json) Hash identifier: Ovaklk5KSzeeBPBcLp7+cBrudSMb6XVTuGmp0OL3oFU= Subject key identifier: 52:5C:8F:13:66:CD:42:F4:F4:DB:95:24:0E:EA:43:D9:F3:26:17:A4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC1A512B18A90D0742CF80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e76de01e-7c23-35ab-a2c6-c2d58b7600fb.roa Signing time: Thu 24 Apr 2025 11:17:58 +0000 ROA not before: Thu 24 Apr 2025 11:17:58 +0000 ROA not after: Wed 23 Jul 2025 11:17:58 +0000 asID: 12041 IP address blocks: 199.254.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:1a:51:2b:18:a9:0d:07:42:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:58 2025 GMT Not After : Jul 23 11:17:58 2025 GMT Subject: CN=e16001b7-9b50-42b0-8f38-15041ebc1567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7f:8b:a2:74:59:07:cf:61:80:13:37:9f:6f: d9:1f:87:ae:51:71:05:28:d3:38:42:0a:24:fb:04: 0c:94:83:1e:18:a5:42:67:e7:f2:c8:c9:ce:71:1e: 62:a8:fb:80:ee:7e:62:bb:72:0c:c3:1e:e5:0e:db: 1e:34:cb:c8:da:78:a7:69:d1:6b:c4:f6:69:88:ae: 2f:64:7c:d3:65:f0:81:20:af:d9:ea:c5:21:06:fe: e5:88:b6:00:f4:e2:6a:8e:17:67:d3:db:c8:88:7b: 78:d3:2e:de:77:a6:fc:2f:8a:69:d8:86:9b:ff:29: fc:43:9e:80:e0:79:5c:ac:ba:11:e9:c1:23:e7:e4: 54:11:93:c5:1b:b0:e7:8c:42:ec:e3:50:c0:b0:a1: 2e:54:fd:e4:f2:8d:a6:4c:e4:89:d0:1a:84:9e:96: c2:80:1e:c9:df:34:ac:f1:78:02:9b:b0:f9:e2:ac: 0e:04:05:b1:bd:aa:90:4e:2e:ec:91:1c:51:1b:5d: 20:d9:76:26:55:e7:a4:cc:eb:3a:01:c9:8e:6a:2a: c5:87:72:06:1e:a7:50:3e:1b:25:44:5a:42:91:56: 38:1d:a1:70:48:4f:bb:43:9a:32:3f:4b:bd:0e:5c: 55:a0:77:ba:f7:19:7d:95:dd:22:a3:45:13:1f:61: 85:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5C:8F:13:66:CD:42:F4:F4:DB:95:24:0E:EA:43:D9:F3:26:17:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e76de01e-7c23-35ab-a2c6-c2d58b7600fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:56:40:68:c6:dd:6b:a5:7e:17:7d:9a:96:6d:b6:1b:a0:75: 7e:f8:8b:ce:e8:85:f8:54:54:98:81:ad:92:51:4e:a6:25:68: 97:2e:b1:cc:69:6a:2a:4e:33:76:88:94:3d:40:17:5f:41:0a: e5:d8:ea:ce:73:4f:5c:0c:63:7b:ee:87:3a:3d:ae:02:47:83: c5:0c:cc:fd:2e:12:1e:4a:55:d9:43:d3:3b:db:be:7d:b4:07: b2:f7:ff:18:45:75:93:d2:1d:e9:ab:28:67:ea:e2:0b:20:1c: 56:86:15:ba:e6:80:e3:a3:40:7c:ab:6a:ce:0d:c3:c2:8a:da: 3c:d7:2c:6c:8c:96:2a:61:e2:e2:0a:dc:d5:d2:81:60:32:13: d3:0f:bb:e3:6f:39:f5:cf:c1:5b:82:2f:a7:d5:a1:67:14:90: fd:86:b2:80:51:af:17:ae:f0:cd:2b:d1:30:26:bd:72:5f:66: 20:40:16:73:1c:f0:ab:d5:b5:59:0a:94:7c:26:1a:ac:1c:12: 0f:2b:4a:44:44:f3:2e:a2:2d:97:eb:1e:77:37:9d:0e:ae:a9: 88:d4:f6:d8:7c:18:27:42:bf:fa:1b:a8:ee:12:95:20:fd:a0: 83:a7:ce:04:3d:96:08:14:da:ca:60:a9:da:23:35:cc:f4:e8: 00:a9:6c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvBpRKxipDQdCz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc1OFoXDTI1MDcyMzExMTc1OFowLzEtMCsGA1UEAxMk ZTE2MDAxYjctOWI1MC00MmIwLThmMzgtMTUwNDFlYmMxNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7n+LonRZB89hgBM3n2/ZH4euUXEFKNM4Qgok +wQMlIMeGKVCZ+fyyMnOcR5iqPuA7n5iu3IMwx7lDtseNMvI2ninadFrxPZpiK4v ZHzTZfCBIK/Z6sUhBv7liLYA9OJqjhdn09vIiHt40y7ed6b8L4pp2Iab/yn8Q56A 4HlcrLoR6cEj5+RUEZPFG7DnjELs41DAsKEuVP3k8o2mTOSJ0BqEnpbCgB7J3zSs 8XgCm7D54qwOBAWxvaqQTi7skRxRG10g2XYmVeekzOs6AcmOairFh3IGHqdQPhsl RFpCkVY4HaFwSE+7Q5oyP0u9DlxVoHe69xl9ld0io0UTH2GF0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJcjxNmzUL09NuVJA7qQ9nzJhekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTc2ZGUwMWUtN2MyMy0z NWFiLWEyYzYtYzJkNThiNzYwMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpWQGjG3Wulfhd9mpZtthugdX74i87ohfhUVJiBrZJRTqYlaJcuscxp aipOM3aIlD1AF19BCuXY6s5zT1wMY3vuhzo9rgJHg8UMzP0uEh5KVdlD0zvbvn20 B7L3/xhFdZPSHemrKGfq4gsgHFaGFbrmgOOjQHyras4Nw8KK2jzXLGyMliph4uIK 3NXSgWAyE9MPu+NvOfXPwVuCL6fVoWcUkP2GsoBRrxeu8M0r0TAmvXJfZiBAFnMc 8KvVtVkKlHwmGqwcEg8rSkRE8y6iLZfrHnc3nQ6uqYjU9th8GCdCv/obqO4SlSD9 oIOnzgQ9lggU2spgqdojNcz06ACpbK0= -----END CERTIFICATE-----Generated at Wed Apr 30 01:33:04 2025 by rpki-client