$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ef12246c-9d7a-30c3-80ba-732121f21aa9.roa File: ef12246c-9d7a-30c3-80ba-732121f21aa9.roa (raw, json) Hash identifier: tDib5xww+QE3imJkbsY4J81/2Andnel1i45tntjgQ2U= Subject key identifier: 34:17:34:E6:84:B9:26:A5:78:7C:8E:E8:23:C9:6E:49:00:C6:AA:E6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC2528AEBF9E1186969C1C Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ef12246c-9d7a-30c3-80ba-732121f21aa9.roa Signing time: Thu 24 Apr 2025 11:18:03 +0000 ROA not before: Thu 24 Apr 2025 11:18:03 +0000 ROA not after: Wed 23 Jul 2025 11:18:03 +0000 asID: 12041 IP address blocks: 199.254.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:25:28:ae:bf:9e:11:86:96:9c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:18:03 2025 GMT Not After : Jul 23 11:18:03 2025 GMT Subject: CN=26b1db5e-d01f-4bd0-bb65-52e59b190b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:ef:2c:1a:1f:54:20:8f:f6:ee:e4:bc:a2: a9:de:dc:e2:27:ab:89:b8:25:35:72:01:e8:c6:84: ab:10:5f:88:4e:b3:54:6a:ad:f7:6c:19:b8:f2:94: 1d:86:1d:2b:14:b2:f8:2c:ab:ec:f5:26:5a:b2:87: fd:ef:c4:7f:cc:84:08:ad:66:a8:ed:0c:04:a8:b6: ba:f2:1c:56:26:1c:2d:05:71:9b:2d:57:b1:f8:bb: e9:94:fd:d6:fa:16:a8:25:30:72:cd:bf:61:5d:bc: 5a:33:ab:50:29:fb:a5:c7:b9:7a:f1:ee:55:5c:3f: 4c:fd:05:b3:1a:7f:85:81:6a:32:3f:6c:09:ab:39: b5:75:f5:bb:1c:3d:1e:6d:56:37:5e:a5:c9:3a:99: 8b:76:16:1e:71:18:86:ae:f4:c7:db:ba:87:51:86: eb:bc:40:0d:2d:99:ac:61:b4:37:75:88:5d:d5:17: 4d:70:67:58:f6:4f:f3:92:ce:fc:97:0d:fe:37:e1: da:07:f0:1a:3c:09:56:3b:2e:84:da:f3:74:88:ad: d8:22:a0:89:20:9e:86:f2:af:75:8b:5d:26:34:0b: 8e:be:08:1e:7f:98:21:25:0a:8b:28:73:96:7b:31: 25:0e:63:fa:a8:2e:4c:0c:eb:98:21:a6:c7:50:2a: 17:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:17:34:E6:84:B9:26:A5:78:7C:8E:E8:23:C9:6E:49:00:C6:AA:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ef12246c-9d7a-30c3-80ba-732121f21aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3b:26:84:7a:71:83:1f:f0:ed:7d:f4:5f:5c:ff:2a:01:84: 09:ec:81:94:16:f5:88:5d:ac:84:3b:a2:06:39:e3:29:55:93: 2a:ce:4f:e5:a1:5e:b2:92:65:e5:87:94:ee:56:87:a3:e0:d2: 15:fe:1a:b2:32:63:d4:f3:0d:83:c8:57:c9:91:6c:ef:26:89: 55:26:6a:84:4f:f1:3d:99:bc:d9:ce:44:1e:d5:37:24:21:ad: 3e:ce:b3:91:93:94:2f:16:77:39:42:ee:3a:dd:0e:f3:36:a3: 57:4c:8c:d9:90:0c:b5:ff:0c:4e:a7:ff:fd:fb:54:03:29:8e: 87:84:de:7e:ed:b1:3f:2c:53:3f:6c:27:dc:87:db:6b:b0:09: a7:62:09:81:9e:8b:29:20:88:05:95:bd:12:0a:ac:c3:a2:9b: b9:f4:1d:86:37:d0:3c:a4:cd:a5:70:b1:f3:95:15:74:ec:e2: 26:83:e9:1e:b1:57:bb:4c:b5:92:6f:17:a1:0d:b8:50:e2:90: d5:65:a5:05:eb:2f:a3:c1:1f:e7:6c:3d:b4:16:19:fd:df:ff: 20:27:df:b6:71:6f:38:b5:20:4f:03:76:20:0c:fe:f4:1f:60: 57:b6:fa:fa:e2:7a:53:01:41:76:a8:e6:26:2e:0f:e4:a1:c0: 62:9a:b3:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvCUorr+eEYaWnBwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTgwM1oXDTI1MDcyMzExMTgwM1owLzEtMCsGA1UEAxMk MjZiMWRiNWUtZDAxZi00YmQwLWJiNjUtNTJlNTliMTkwYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRPvLBofVCCP9u7kvKKp3tziJ6uJuCU1cgHo xoSrEF+ITrNUaq33bBm48pQdhh0rFLL4LKvs9SZasof978R/zIQIrWao7QwEqLa6 8hxWJhwtBXGbLVex+LvplP3W+haoJTByzb9hXbxaM6tQKfulx7l68e5VXD9M/QWz Gn+FgWoyP2wJqzm1dfW7HD0ebVY3XqXJOpmLdhYecRiGrvTH27qHUYbrvEANLZms YbQ3dYhd1RdNcGdY9k/zks78lw3+N+HaB/AaPAlWOy6E2vN0iK3YIqCJIJ6G8q91 i10mNAuOvggef5ghJQqLKHOWezElDmP6qC5MDOuYIabHUCoXjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQXNOaEuSaleHyO6CPJbkkAxqrmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWYxMjI0NmMtOWQ3YS0z MGMzLTgwYmEtNzMyMTIxZjIxYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE47JoR6cYMf8O199F9c/yoBhAnsgZQW9YhdrIQ7ogY54ylVkyrOT+Wh XrKSZeWHlO5Wh6Pg0hX+GrIyY9TzDYPIV8mRbO8miVUmaoRP8T2ZvNnORB7VNyQh rT7Os5GTlC8WdzlC7jrdDvM2o1dMjNmQDLX/DE6n//37VAMpjoeE3n7tsT8sUz9s J9yH22uwCadiCYGeiykgiAWVvRIKrMOim7n0HYY30DykzaVwsfOVFXTs4iaD6R6x V7tMtZJvF6ENuFDikNVlpQXrL6PBH+dsPbQWGf3f/yAn37Zxbzi1IE8DdiAM/vQf YFe2+vrielMBQXao5iYuD+ShwGKaszs= -----END CERTIFICATE-----Generated at Tue Apr 29 12:04:38 2025 by rpki-client