$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e77564de-d4d1-31b5-baaa-fc645c1c6aa8.roa File: e77564de-d4d1-31b5-baaa-fc645c1c6aa8.roa (raw, json) Hash identifier: Cjgjvfuz8ClNezDIOWa+IiXF2G7gZLt/nLBggnIKSuk= Subject key identifier: C3:25:4D:A9:13:D5:7E:3A:F7:58:92:58:3B:34:0C:9C:31:5B:0E:84 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB9032990FAE116395EFC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e77564de-d4d1-31b5-baaa-fc645c1c6aa8.roa Signing time: Thu 24 Apr 2025 11:16:53 +0000 ROA not before: Thu 24 Apr 2025 11:16:53 +0000 ROA not after: Wed 23 Jul 2025 11:16:53 +0000 asID: 12041 IP address blocks: 199.7.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:90:32:99:0f:ae:11:63:95:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:53 2025 GMT Not After : Jul 23 11:16:53 2025 GMT Subject: CN=79966279-4ec7-4e23-bdbb-dd598a2e1462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:73:eb:cb:9b:4f:bb:94:42:96:7e:1b:7c: 35:65:62:83:4c:5d:b8:7b:85:9e:63:92:92:e4:a6: cf:0a:5d:a8:f5:be:c8:48:7d:ec:b7:a0:c9:35:f6: cf:74:e3:7b:d0:cd:5f:ef:c9:b5:40:c0:77:15:44: 78:14:60:87:63:24:3e:53:8d:e0:5b:57:01:64:01: 9c:d7:c9:34:cd:d7:5b:80:57:63:60:c2:5d:7d:c4: 29:44:8a:bf:e2:94:d4:22:bf:eb:63:11:9e:57:a5: 5c:88:53:0b:60:b2:ed:f3:19:6e:75:94:28:0d:e1: d6:b5:31:0d:45:c0:f7:1e:0e:7e:17:d2:68:48:b0: fa:42:4a:c3:14:4a:e3:58:ff:c2:48:56:29:35:c2: df:1c:c5:85:29:ed:14:96:0d:cb:89:74:6d:86:41: 32:53:7b:a2:3e:f1:74:2c:c1:96:f7:6e:fa:cb:f9: 01:13:36:61:59:d7:ae:db:04:32:2d:a6:70:de:3a: 95:a0:35:e6:7a:0f:3c:85:12:1e:0e:b3:bd:f6:1b: ec:f2:0b:e0:0e:6e:02:8f:c6:7a:c1:03:a5:38:b5: b2:7e:43:cb:eb:77:5d:73:65:ea:40:7f:7f:56:4a: d5:18:b1:b5:1d:5a:7e:5e:66:6b:16:bd:30:fb:b1: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:25:4D:A9:13:D5:7E:3A:F7:58:92:58:3B:34:0C:9C:31:5B:0E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/e77564de-d4d1-31b5-baaa-fc645c1c6aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.7.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:56:65:26:c2:5c:11:d9:20:0a:a2:a2:03:e4:59:df:7d:35: 6e:46:e8:79:b0:28:e2:10:7d:ec:e0:7c:83:55:1c:51:e6:2c: 7f:79:56:05:f1:68:3a:52:2c:71:9d:82:9e:e2:12:43:04:0d: 9e:df:6a:c0:7b:37:fa:93:6f:3a:74:81:94:49:77:da:d2:4f: 37:24:c7:71:01:98:6c:fd:0a:21:ba:68:89:e1:02:cc:ae:49: ec:11:27:26:82:f1:ef:02:02:7d:5a:98:de:a2:8e:51:0d:9c: 1b:c5:11:c4:74:46:55:bc:4a:54:40:99:51:4e:49:91:f2:41: f2:95:78:5d:72:7d:89:fd:45:d7:a1:32:e1:77:16:03:f7:5b: 5e:6f:b0:c0:1e:d5:bf:b5:9a:ee:6e:ca:de:e5:48:2a:bc:d0: 7c:b1:fa:b7:9e:81:61:77:dd:a7:47:5e:d5:d0:8a:21:a8:34: 1d:de:a0:fb:b3:c7:5a:51:c9:15:13:5a:91:d9:7c:d4:fd:bd: 5a:b9:52:b5:34:85:3e:c5:0e:2a:5a:4e:32:ec:3d:50:5a:e6: 88:4f:3b:75:1b:11:c7:97:3e:85:94:a0:f1:0b:cf:66:b9:c6: 07:4c:97:df:78:31:5a:e8:19:60:ab:c7:51:fc:d9:da:db:01: 5c:20:18:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu5AymQ+uEWOV78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY1M1oXDTI1MDcyMzExMTY1M1owLzEtMCsGA1UEAxMk Nzk5NjYyNzktNGVjNy00ZTIzLWJkYmItZGQ1OThhMmUxNDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ1z68ubT7uUQpZ+G3w1ZWKDTF24e4WeY5KS 5KbPCl2o9b7ISH3st6DJNfbPdON70M1f78m1QMB3FUR4FGCHYyQ+U43gW1cBZAGc 18k0zddbgFdjYMJdfcQpRIq/4pTUIr/rYxGeV6VciFMLYLLt8xludZQoDeHWtTEN RcD3Hg5+F9JoSLD6QkrDFErjWP/CSFYpNcLfHMWFKe0Ulg3LiXRthkEyU3uiPvF0 LMGW9276y/kBEzZhWdeu2wQyLaZw3jqVoDXmeg88hRIeDrO99hvs8gvgDm4Cj8Z6 wQOlOLWyfkPL63ddc2XqQH9/VkrVGLG1HVp+XmZrFr0w+7GDOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMlTakT1X4691iSWDs0DJwxWw6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZTc3NTY0ZGUtZDRkMS0z MWI1LWJhYWEtZmM2NDVjMWM2YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1WZSbCXBHZIAqiogPkWd99NW5G6HmwKOIQfezgfINVHFHmLH95VgXx aDpSLHGdgp7iEkMEDZ7fasB7N/qTbzp0gZRJd9rSTzckx3EBmGz9CiG6aInhAsyu SewRJyaC8e8CAn1amN6ijlENnBvFEcR0RlW8SlRAmVFOSZHyQfKVeF1yfYn9Rdeh MuF3FgP3W15vsMAe1b+1mu5uyt7lSCq80Hyx+reegWF33adHXtXQiiGoNB3eoPuz x1pRyRUTWpHZfNT9vVq5UrU0hT7FDipaTjLsPVBa5ohPO3UbEceXPoWUoPELz2a5 xgdMl994MVroGWCrx1H82drbAVwgGA8= -----END CERTIFICATE-----Generated at Tue Apr 29 20:33:11 2025 by rpki-client