$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0d4e2f6-5ab7-39d6-9014-65c589d1a5a4.roa File: f0d4e2f6-5ab7-39d6-9014-65c589d1a5a4.roa (raw, json) Hash identifier: AngsouXRAFSeQZWK1C3fV1ZRuSEdEn74XNCIF4Drd04= Subject key identifier: 08:98:47:F5:19:73:03:5D:E3:DF:80:C6:C6:62:30:6C:79:8B:1B:E9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBC071D9BDB930B98B4880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0d4e2f6-5ab7-39d6-9014-65c589d1a5a4.roa Signing time: Thu 24 Apr 2025 11:17:16 +0000 ROA not before: Thu 24 Apr 2025 11:17:16 +0000 ROA not after: Wed 23 Jul 2025 11:17:16 +0000 asID: 12041 IP address blocks: 199.182.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:c0:71:d9:bd:b9:30:b9:8b:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:16 2025 GMT Not After : Jul 23 11:17:16 2025 GMT Subject: CN=93621217-fdf2-4f38-8969-a96825e12e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:64:e1:b8:15:d4:5a:4a:f2:1b:88:03:3f: cd:83:ee:d5:11:21:fd:45:50:7b:db:6f:4e:ac:4e: 78:ca:01:78:52:a2:ee:e1:56:14:b5:5f:cd:f2:bc: 19:39:ad:d4:77:d1:75:23:fc:06:13:8f:c1:03:44: 74:07:b1:75:2a:65:d5:ad:52:f7:04:01:f9:2f:79: 5c:56:59:83:33:36:56:e5:ce:ea:9e:99:fe:b2:e9: ad:d6:59:47:7b:e1:a2:d7:3a:c3:59:78:f5:34:3a: 42:9e:ee:c2:fd:53:4b:da:ad:4b:d9:fc:c5:53:71: 82:01:d2:24:dd:c3:39:89:af:1f:c3:5e:42:80:cf: 85:4f:3d:c3:fb:02:12:6e:a8:9e:99:2c:15:73:d9: aa:50:2c:df:f7:f9:41:40:2d:eb:4a:2f:41:7c:f9: 05:6f:8c:db:bf:90:f2:c0:d8:dd:9d:7e:14:d1:40: 18:a2:33:b6:f9:e9:f8:ba:29:1b:28:ee:08:ab:05: b2:ad:ec:c4:2e:f5:80:26:d1:e8:d8:d7:01:cf:17: 38:43:a4:38:7f:47:6f:92:00:a9:40:06:e0:fd:52: 4b:c2:f6:1e:8d:b7:41:0f:8c:c2:71:f1:42:4a:b9: 31:f7:48:9d:b4:55:9b:dd:93:a2:b0:fe:8a:e5:1b: 85:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:98:47:F5:19:73:03:5D:E3:DF:80:C6:C6:62:30:6C:79:8B:1B:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f0d4e2f6-5ab7-39d6-9014-65c589d1a5a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:42:40:bc:72:f7:de:1d:10:ad:82:d6:b9:83:ac:0a:7d:0a: f8:e0:bc:50:8e:ff:97:a1:9d:b4:13:ec:4d:6b:65:b2:28:e3: 9e:86:33:b0:38:f2:06:0d:69:4e:d4:f2:c5:a5:2b:34:4f:53: 50:a6:fe:1f:8f:91:ed:8d:ed:84:65:d6:6d:85:24:4c:bc:ff: 92:84:d9:ad:46:a5:17:6e:ad:32:2f:0d:c0:5d:f7:c1:29:de: 9b:f2:6f:2d:5b:72:00:e5:40:9d:ba:68:59:04:18:60:4c:c2: d9:8e:a5:b3:54:71:a3:3e:ff:e9:cf:be:0f:6e:3c:b0:3c:30: ce:f9:30:ab:33:e8:5c:51:53:56:8a:f0:e6:34:34:61:58:4a: 5a:86:c1:2b:98:dd:ae:12:bc:51:94:70:c5:94:03:c0:99:2d: d2:93:3f:93:54:29:8d:5e:43:c0:d4:2b:3c:61:c3:47:25:8e: e7:38:98:f2:6d:92:a3:48:75:19:19:1f:b0:f4:b1:52:69:d9: 04:f6:36:79:e0:ab:db:8a:23:c1:62:64:1f:92:ac:c6:2e:84: b7:72:56:8a:b9:b8:2b:1d:fa:60:60:d4:5c:d3:37:2f:97:5a: d2:62:4d:af:c9:8b:58:4f:8a:2a:41:14:67:35:b8:00:d0:38: e8:83:52:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu8Bx2b25MLmLSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcxNloXDTI1MDcyMzExMTcxNlowLzEtMCsGA1UEAxMk OTM2MjEyMTctZmRmMi00ZjM4LTg5NjktYTk2ODI1ZTEyZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHVk4bgV1FpK8huIAz/Ng+7VESH9RVB7229O rE54ygF4UqLu4VYUtV/N8rwZOa3Ud9F1I/wGE4/BA0R0B7F1KmXVrVL3BAH5L3lc VlmDMzZW5c7qnpn+sumt1llHe+Gi1zrDWXj1NDpCnu7C/VNL2q1L2fzFU3GCAdIk 3cM5ia8fw15CgM+FTz3D+wISbqiemSwVc9mqUCzf9/lBQC3rSi9BfPkFb4zbv5Dy wNjdnX4U0UAYojO2+en4uikbKO4IqwWyrezELvWAJtHo2NcBzxc4Q6Q4f0dvkgCp QAbg/VJLwvYejbdBD4zCcfFCSrkx90idtFWb3ZOisP6K5RuFrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiYR/UZcwNd49+AxsZiMGx5ixvpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjBkNGUyZjYtNWFiNy0z OWQ2LTkwMTQtNjVjNTg5ZDFhNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdCQLxy994dEK2C1rmDrAp9CvjgvFCO/5ehnbQT7E1rZbIo456GM7A4 8gYNaU7U8sWlKzRPU1Cm/h+Pke2N7YRl1m2FJEy8/5KE2a1GpRdurTIvDcBd98Ep 3pvyby1bcgDlQJ26aFkEGGBMwtmOpbNUcaM+/+nPvg9uPLA8MM75MKsz6FxRU1aK 8OY0NGFYSlqGwSuY3a4SvFGUcMWUA8CZLdKTP5NUKY1eQ8DUKzxhw0cljuc4mPJt kqNIdRkZH7D0sVJp2QT2Nnngq9uKI8FiZB+SrMYuhLdyVoq5uCsd+mBg1FzTNy+X WtJiTa/Ji1hPiipBFGc1uADQOOiDUhI= -----END CERTIFICATE-----Generated at Tue Apr 29 16:23:14 2025 by rpki-client