$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f72e9bdf-6373-3cd7-b728-8da6b3a9a1d2.roa File: f72e9bdf-6373-3cd7-b728-8da6b3a9a1d2.roa (raw, json) Hash identifier: Dq0ET4c9PdPSL6ylA006QdAnn2AGEOgE2q14cwL/SNI= Subject key identifier: 56:2B:F5:23:5F:D5:B4:B1:E4:22:E2:97:5C:2A:18:DF:01:FB:F8:29 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC0641D8324DA2BF7A0F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f72e9bdf-6373-3cd7-b728-8da6b3a9a1d2.roa Signing time: Thu 24 Apr 2025 11:17:49 +0000 ROA not before: Thu 24 Apr 2025 11:17:49 +0000 ROA not after: Wed 23 Jul 2025 11:17:49 +0000 asID: 12041 IP address blocks: 199.249.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:06:41:d8:32:4d:a2:bf:7a:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:49 2025 GMT Not After : Jul 23 11:17:49 2025 GMT Subject: CN=0124b5cf-a304-45d1-9c79-47afbf30b0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:e4:61:1d:88:56:a8:3d:be:08:93:24:52: 9e:8d:2c:60:c8:9c:c9:8e:10:33:1d:b1:92:1d:11: 2c:fb:6c:7c:5b:54:b9:0d:11:1e:74:69:f9:14:b5: b8:f7:11:60:04:09:40:18:c8:0f:48:92:aa:2f:f5: 5b:19:8e:5c:41:a6:89:bc:b2:ac:77:01:1f:aa:aa: e5:3e:50:8b:24:45:53:72:26:ca:2a:72:64:d9:00: 4d:82:99:e9:80:34:24:0d:fc:35:d0:e1:f1:59:0d: 9f:d7:9b:cf:97:94:4b:24:d5:5c:71:b4:bf:8a:20: f2:32:4b:a7:4b:6c:00:9d:29:bd:44:91:c4:5f:96: ae:18:1b:ef:eb:ca:1e:d9:1c:8d:60:2e:cb:fc:60: 5c:02:5c:5f:97:0b:d0:c7:d6:e8:a2:02:e7:2d:07: ad:d6:ec:e2:36:0a:09:79:b3:eb:d2:3f:19:02:b2: a4:6c:62:70:4a:97:36:c0:68:7a:c6:e5:66:1b:c3: b5:c0:f7:5c:8c:35:5c:10:6b:65:92:56:88:41:32: 2b:b5:f0:1b:0d:11:6b:6f:39:aa:66:e5:b6:f7:b4: e4:d0:4a:f8:cd:2a:07:1f:96:a9:07:e5:bd:11:9b: 83:ca:0f:da:07:a5:2f:9b:20:e8:9c:a2:3d:d0:c0: 55:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2B:F5:23:5F:D5:B4:B1:E4:22:E2:97:5C:2A:18:DF:01:FB:F8:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f72e9bdf-6373-3cd7-b728-8da6b3a9a1d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:87:08:08:08:71:3d:4d:1a:07:53:43:35:84:d8:7c:33:76: 6d:b6:88:c2:60:1f:34:ca:5b:3e:3a:82:14:39:4d:97:70:b3: c9:9a:46:3a:6a:e1:52:17:bd:d7:b7:6d:79:9b:be:6f:a5:1d: 3c:b6:d3:ff:9f:94:38:a7:b5:4a:1c:b9:f7:e0:87:79:8c:29: 88:0f:25:fd:8e:3a:fd:bb:58:1b:90:9c:44:c4:d8:76:2f:00: af:f0:3e:f4:3c:10:b0:3d:5e:85:90:a9:4f:0b:7a:c0:e9:7c: c4:1d:9b:bd:1e:18:7e:fe:d6:ac:97:ca:37:1a:d8:01:d7:f9: 05:ca:f1:73:8f:0a:5b:0d:3a:a4:91:ad:b6:0a:e7:27:2f:6e: 16:26:6e:63:e3:a3:5b:34:43:da:ac:aa:d8:eb:74:b6:cf:e0: ba:e3:f4:ee:82:0a:60:93:40:87:36:30:e9:a2:83:b3:e2:a6: c7:55:a7:12:0d:59:e7:87:98:2d:ff:97:ec:aa:bb:34:b2:7a: d8:32:d5:b5:13:c6:1a:a0:e4:3b:c1:c0:98:51:9f:e7:20:bf: d7:6f:35:3d:ab:fe:3c:da:cd:68:5c:4c:d6:4f:92:46:09:52: 16:bb:e1:6e:48:59:0f:3e:08:44:99:a8:b8:fa:5a:26:87:79: 32:23:07:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvAZB2DJNor96DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc0OVoXDTI1MDcyMzExMTc0OVowLzEtMCsGA1UEAxMk MDEyNGI1Y2YtYTMwNC00NWQxLTljNzktNDdhZmJmMzBiMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA043kYR2IVqg9vgiTJFKejSxgyJzJjhAzHbGS HREs+2x8W1S5DREedGn5FLW49xFgBAlAGMgPSJKqL/VbGY5cQaaJvLKsdwEfqqrl PlCLJEVTcibKKnJk2QBNgpnpgDQkDfw10OHxWQ2f15vPl5RLJNVccbS/iiDyMkun S2wAnSm9RJHEX5auGBvv68oe2RyNYC7L/GBcAlxflwvQx9boogLnLQet1uziNgoJ ebPr0j8ZArKkbGJwSpc2wGh6xuVmG8O1wPdcjDVcEGtlklaIQTIrtfAbDRFrbzmq ZuW297Tk0Er4zSoHH5apB+W9EZuDyg/aB6UvmyDonKI90MBVfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYr9SNf1bSx5CLil1wqGN8B+/gpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjcyZTliZGYtNjM3My0z Y2Q3LWI3MjgtOGRhNmIzYTlhMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOHCAgIcT1NGgdTQzWE2Hwzdm22iMJgHzTKWz46ghQ5TZdws8maRjpq 4VIXvde3bXmbvm+lHTy20/+flDintUocuffgh3mMKYgPJf2OOv27WBuQnETE2HYv AK/wPvQ8ELA9XoWQqU8LesDpfMQdm70eGH7+1qyXyjca2AHX+QXK8XOPClsNOqSR rbYK5ycvbhYmbmPjo1s0Q9qsqtjrdLbP4Lrj9O6CCmCTQIc2MOmig7PipsdVpxIN WeeHmC3/l+yquzSyetgy1bUTxhqg5DvBwJhRn+cgv9dvNT2r/jzazWhcTNZPkkYJ Uha74W5IWQ8+CESZqLj6WiaHeTIjB8I= -----END CERTIFICATE-----Generated at Mon Jun 16 02:22:53 2025 by rpki-client