$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f12ccd90-8ed5-3c29-9368-a1ec6b279e6f.roa File: f12ccd90-8ed5-3c29-9368-a1ec6b279e6f.roa (raw, json) Hash identifier: qYqqmc98eRb2+D8FL+1mVw9QnH2x7ZCcWL/m3QOIeVs= Subject key identifier: 3A:28:D0:BD:9F:99:54:35:E1:1A:49:C7:78:66:D4:1A:8D:25:A7:19 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBE36AA217CF19E956D0C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f12ccd90-8ed5-3c29-9368-a1ec6b279e6f.roa Signing time: Thu 24 Apr 2025 11:17:32 +0000 ROA not before: Thu 24 Apr 2025 11:17:32 +0000 ROA not after: Wed 23 Jul 2025 11:17:32 +0000 asID: 12041 IP address blocks: 199.182.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:e3:6a:a2:17:cf:19:e9:56:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:32 2025 GMT Not After : Jul 23 11:17:32 2025 GMT Subject: CN=a11c52fc-65af-434a-a87e-0f19501b484e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:a2:9b:63:fd:d7:6b:2f:18:7b:10:09:dc: 74:d6:2b:f9:20:a9:79:31:76:67:12:99:c3:ca:26: 8a:05:69:a8:52:c3:00:e2:1b:57:09:8b:53:37:7e: ac:50:e6:f5:59:96:d3:27:41:c2:13:31:5a:12:ba: eb:01:5a:13:d8:f4:f5:22:f3:e9:2d:c7:eb:4b:44: ce:60:1e:a4:f1:c4:23:04:7c:32:6c:e2:58:e5:84: 71:1b:5e:e1:d7:e5:04:36:6c:7c:49:62:e6:e5:d3: e7:26:83:61:51:01:f2:a3:03:31:3d:4e:e5:36:b7: f8:2d:9a:8d:88:ff:74:fa:bd:a6:c5:d9:70:38:9c: 8b:d4:85:05:f8:fe:14:5f:17:17:04:99:4a:a5:be: 11:49:ed:1f:0d:53:78:b4:fd:7c:7a:2d:64:33:2e: df:ac:92:61:a9:17:a2:74:6c:38:6e:cc:52:63:ba: 98:42:21:9e:9e:a1:33:72:ab:d0:4f:77:2e:3f:e4: d0:3e:09:95:ef:a5:86:07:be:9f:58:72:4a:04:66: e9:25:9e:4e:56:25:92:c8:c1:d9:c2:a5:0b:bc:cb: 8b:d1:f3:19:d4:82:ed:64:ed:84:52:37:db:2c:43: 5f:99:44:04:4f:64:df:c8:2c:8d:2d:6c:b5:b8:71: 6a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:28:D0:BD:9F:99:54:35:E1:1A:49:C7:78:66:D4:1A:8D:25:A7:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f12ccd90-8ed5-3c29-9368-a1ec6b279e6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c2:71:b8:32:d8:52:87:1c:c1:3a:da:f3:99:18:a0:7d:e2: 87:44:ca:8c:7f:65:bb:dd:8a:4e:15:d2:32:e2:71:3e:03:7a: e0:82:d4:b0:b9:f0:4d:a1:e7:ff:73:4e:48:d8:7c:ce:69:6e: 0e:7e:50:7d:fe:85:d3:23:87:f0:a7:7d:1e:8e:de:61:ee:e3: 0f:85:a1:10:86:db:ca:0f:f5:59:65:b4:38:0c:6c:cd:d1:c2: c9:38:c1:5a:a5:7e:03:80:26:86:96:c2:11:87:93:9d:89:7c: 89:b8:98:8c:00:8d:a6:39:25:5e:ec:12:f1:58:4b:0d:2f:b8: 10:81:79:ee:28:b0:fb:b7:66:ee:06:bb:37:49:6f:2f:9a:7c: f8:6a:e4:0a:3c:58:34:e9:62:bc:d3:6e:98:51:e4:46:aa:b5: 24:5c:2c:30:84:67:b6:1f:62:78:86:bd:ac:c7:b8:37:89:6f: db:a3:bb:df:dd:9b:9a:7e:20:3a:71:fc:28:ab:3c:ff:5f:0a: f5:03:d0:95:0d:b7:b0:47:d7:22:40:4c:99:32:89:d8:ce:00: 05:79:3e:5c:9f:0c:26:a8:4f:79:a0:8d:4f:cc:1f:83:0f:d8: ff:c7:21:5a:45:6a:66:c2:7e:29:20:d4:8f:f1:13:01:be:e3: ce:a9:0e:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu+NqohfPGelW0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTczMloXDTI1MDcyMzExMTczMlowLzEtMCsGA1UEAxMk YTExYzUyZmMtNjVhZi00MzRhLWE4N2UtMGYxOTUwMWI0ODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYCim2P912svGHsQCdx01iv5IKl5MXZnEpnD yiaKBWmoUsMA4htXCYtTN36sUOb1WZbTJ0HCEzFaErrrAVoT2PT1IvPpLcfrS0TO YB6k8cQjBHwybOJY5YRxG17h1+UENmx8SWLm5dPnJoNhUQHyowMxPU7lNrf4LZqN iP90+r2mxdlwOJyL1IUF+P4UXxcXBJlKpb4RSe0fDVN4tP18ei1kMy7frJJhqRei dGw4bsxSY7qYQiGenqEzcqvQT3cuP+TQPgmV76WGB76fWHJKBGbpJZ5OViWSyMHZ wqULvMuL0fMZ1ILtZO2EUjfbLENfmUQET2TfyCyNLWy1uHFqvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoo0L2fmVQ14RpJx3hm1BqNJacZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjEyY2NkOTAtOGVkNS0z YzI5LTkzNjgtYTFlYzZiMjc5ZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPCcbgy2FKHHME62vOZGKB94odEyox/Zbvdik4V0jLicT4DeuCC1LC5 8E2h5/9zTkjYfM5pbg5+UH3+hdMjh/CnfR6O3mHu4w+FoRCG28oP9VlltDgMbM3R wsk4wVqlfgOAJoaWwhGHk52JfIm4mIwAjaY5JV7sEvFYSw0vuBCBee4osPu3Zu4G uzdJby+afPhq5Ao8WDTpYrzTbphR5EaqtSRcLDCEZ7YfYniGvazHuDeJb9uju9/d m5p+IDpx/CirPP9fCvUD0JUNt7BH1yJATJkyidjOAAV5PlyfDCaoT3mgjU/MH4MP 2P/HIVpFambCfikg1I/xEwG+486pDqY= -----END CERTIFICATE-----Generated at Sun Jun 15 12:01:54 2025 by rpki-client