$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa File: efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa (raw, json) Hash identifier: imK8blwK73uSPc3Gn/8m9dL6x3UZBoTBfn1mQusjDEk= Subject key identifier: AC:35:85:DD:50:66:F6:F3:82:F4:8D:ED:6B:32:4C:C5:B4:60:62:CF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC2F3B7D0CD0A8D87A0C80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa Signing time: Thu 24 Apr 2025 11:18:08 +0000 ROA not before: Thu 24 Apr 2025 11:18:08 +0000 ROA not after: Wed 23 Jul 2025 11:18:08 +0000 asID: 12041 IP address blocks: 199.254.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:2f:3b:7d:0c:d0:a8:d8:7a:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:18:08 2025 GMT Not After : Jul 23 11:18:08 2025 GMT Subject: CN=c8ca125c-7d59-499e-a406-dba9c10780df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4b:40:5c:ef:49:19:69:34:15:60:ee:e4:0f: 63:5e:71:90:9b:57:3c:6e:2b:ed:a1:b0:4a:d0:90: 8b:bf:22:82:a2:36:e3:44:fd:08:f5:ba:96:de:d2: 5e:49:c7:dd:4c:99:58:f1:be:2a:4b:1e:fb:27:3b: 18:d9:c5:44:f1:08:2c:b2:67:9e:be:8d:79:84:45: 65:ff:81:6b:81:bd:1f:07:67:52:58:67:a5:23:8b: 74:8a:1a:69:42:b9:4a:9b:03:18:c8:58:8f:09:c9: a3:33:7f:b0:30:09:78:d0:65:15:36:1a:d9:a5:cd: 77:9b:f0:0b:98:e0:67:c4:f3:bc:d1:d4:99:65:1d: bf:29:79:5a:a8:b3:32:0e:65:3b:cb:f4:2d:ab:e5: bc:5f:4d:f9:58:d3:be:a4:a0:aa:6d:1c:4a:cc:f4: 12:cc:70:04:7b:35:8d:70:f2:4e:59:d0:75:32:5d: 4b:1a:94:65:7e:5e:b0:37:5b:86:4e:b3:2e:f1:a4: e2:cc:12:47:c4:ac:a6:8f:53:40:c6:e2:86:a0:8d: ee:bc:9f:2e:dc:10:b8:21:9b:c8:83:67:7b:93:ea: f2:2d:2f:82:63:dc:49:24:df:1a:bd:1e:18:d9:e4: 02:62:02:58:94:9c:df:71:4a:94:7b:83:98:85:6a: 99:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:35:85:DD:50:66:F6:F3:82:F4:8D:ED:6B:32:4C:C5:B4:60:62:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:91:63:9c:9d:b3:75:cf:f0:65:46:33:d4:dd:47:0c:2b:25: cc:ea:d2:cc:cb:d2:62:aa:ec:40:77:1b:67:d5:39:17:56:db: 20:11:0c:df:22:b1:30:e1:b5:d1:6c:40:c2:49:11:b6:15:29: cd:02:82:3f:1a:be:74:9f:f7:43:52:02:eb:8c:83:4e:11:7c: be:8e:4c:ab:13:56:6f:45:0b:27:6c:6b:0e:a6:4a:d9:b0:52: 95:0e:f9:eb:0c:27:50:9c:99:78:08:68:cf:88:48:43:7e:db: 1e:0f:ec:7f:36:4a:de:27:39:02:0a:4e:5b:c2:99:f3:5b:fd: 75:32:ad:9b:1e:fc:3b:00:38:a5:2b:1c:c0:a3:6f:6f:e3:5b: ac:fc:dc:e7:fd:bf:45:64:1b:ed:aa:81:6d:5b:92:1a:5a:10: d3:13:db:f6:71:e6:e8:83:b6:b5:f0:af:7f:f0:a2:ee:47:f8: 2e:05:19:72:6f:eb:73:ef:94:5e:b0:7b:af:64:67:c7:1e:de: 7a:04:c6:68:c5:01:ff:51:57:5b:ac:74:94:25:1d:9e:5b:1b: 35:f0:70:b7:bd:0f:1b:fd:ee:20:be:9e:e0:23:c0:a8:e8:29: b2:b8:b8:c5:d0:4e:12:b1:18:05:e1:1b:4a:7e:b1:82:2e:ad: f2:ca:50:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvC87fQzQqNh6DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTgwOFoXDTI1MDcyMzExMTgwOFowLzEtMCsGA1UEAxMk YzhjYTEyNWMtN2Q1OS00OTllLWE0MDYtZGJhOWMxMDc4MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEtAXO9JGWk0FWDu5A9jXnGQm1c8bivtobBK 0JCLvyKCojbjRP0I9bqW3tJeScfdTJlY8b4qSx77JzsY2cVE8Qgssmeevo15hEVl /4Frgb0fB2dSWGelI4t0ihppQrlKmwMYyFiPCcmjM3+wMAl40GUVNhrZpc13m/AL mOBnxPO80dSZZR2/KXlaqLMyDmU7y/Qtq+W8X035WNO+pKCqbRxKzPQSzHAEezWN cPJOWdB1Ml1LGpRlfl6wN1uGTrMu8aTizBJHxKymj1NAxuKGoI3uvJ8u3BC4IZvI g2d7k+ryLS+CY9xJJN8avR4Y2eQCYgJYlJzfcUqUe4OYhWqZRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKw1hd1QZvbzgvSN7WsyTMW0YGLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWZkOGE5ZjYtN2Y2MC0z YzZlLTgwNzgtZDc0MmYyNWViZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/47MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGRY5yds3XP8GVGM9TdRwwrJczq0szL0mKq7EB3G2fVORdW2yARDN8i sTDhtdFsQMJJEbYVKc0Cgj8avnSf90NSAuuMg04RfL6OTKsTVm9FCydsaw6mStmw UpUO+esMJ1CcmXgIaM+ISEN+2x4P7H82St4nOQIKTlvCmfNb/XUyrZse/DsAOKUr HMCjb2/jW6z83Of9v0VkG+2qgW1bkhpaENMT2/Zx5uiDtrXwr3/wou5H+C4FGXJv 63PvlF6we69kZ8ce3noExmjFAf9RV1usdJQlHZ5bGzXwcLe9Dxv97iC+nuAjwKjo KbK4uMXQThKxGAXhG0p+sYIurfLKUL0= -----END CERTIFICATE-----Generated at Sun Jun 15 12:05:43 2025 by rpki-client