$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa File: 038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa (raw, json) Hash identifier: tgxKb9h1h7/Ptn4zq+M/tR+fmwAyyY33ddh3TGLXoLc= Subject key identifier: 4F:A8:9C:A6:E4:CC:BE:C4:A5:3A:8E:91:14:BE:57:AF:DD:16:46:F1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A212D49F2B6DD55A4CC4F540 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa Signing time: Thu 24 Apr 2025 14:12:43 +0000 ROA not before: Thu 24 Apr 2025 14:12:43 +0000 ROA not after: Wed 23 Jul 2025 14:12:43 +0000 asID: 207266 IP address blocks: 199.249.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:d4:9f:2b:6d:d5:5a:4c:c4:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:12:43 2025 GMT Not After : Jul 23 14:12:43 2025 GMT Subject: CN=bde5b434-bb48-4e4a-b9e4-577dd49778d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:c2:08:db:3a:3e:d2:35:7c:71:2f:9c:48: 08:9f:bf:c8:cf:1e:22:48:a6:50:28:c6:fc:87:ed: 66:2e:93:19:a1:1f:33:38:dc:56:5f:89:cc:e5:ce: bd:8c:59:81:3d:ca:a0:07:8e:cb:7d:48:1d:e4:28: 8d:94:cf:81:5c:39:9d:f7:ea:bc:fb:e2:5c:11:18: 86:f9:81:8a:0b:2b:33:13:a6:6a:ea:9f:e1:1f:14: a1:76:31:6d:72:5d:b6:c6:11:49:fc:08:25:92:8b: 0b:40:47:77:59:47:0c:08:89:80:5c:c7:35:8e:97: 06:a5:13:14:55:9c:55:de:fd:05:a0:d2:58:24:61: 79:8a:be:9b:30:47:f8:a2:2a:24:e5:f0:72:54:ba: 66:cb:fc:45:58:b3:33:91:57:ec:cf:3e:d0:2e:97: 86:a7:d9:9e:c0:74:4a:de:a5:36:bf:ec:a8:79:5f: 3a:ae:df:d3:ff:a9:07:63:8e:bd:e7:5b:68:d8:77: c3:dc:35:2f:ed:77:30:01:6c:8c:ec:4e:fa:d3:8f: 15:9f:1d:f2:2f:6a:57:5c:a8:90:f2:ba:01:c3:24: ea:58:42:d2:e1:7b:6f:77:03:59:34:4c:38:54:4a: 54:35:43:3a:fb:24:a5:4c:f9:8e:0e:ff:ec:4a:c1: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A8:9C:A6:E4:CC:BE:C4:A5:3A:8E:91:14:BE:57:AF:DD:16:46:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/038d04c5-b3af-35a8-bbe8-49f52dc6e3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:73:5b:1c:7f:30:1f:74:ea:a3:3e:cc:fc:82:3d:ec:0b:7e: 71:56:63:4d:6c:89:7d:ea:da:a8:c7:c3:a5:36:45:37:56:0b: 64:02:dc:be:50:92:58:24:d7:8e:fc:10:fa:b2:da:16:c9:19: e9:19:c0:31:6a:61:84:74:c5:c2:68:05:4f:59:af:08:81:5f: eb:2f:12:9f:b5:d4:b8:4c:bc:cf:de:31:79:89:63:a8:9a:2d: be:2f:05:ce:7c:aa:e6:f1:dd:f1:39:21:e6:28:b2:e6:0d:d3: 7b:16:5d:03:00:b2:2d:79:3e:54:6e:de:46:eb:2f:63:3f:e7: 83:04:8e:63:23:50:94:9f:ff:38:c3:d2:c1:d6:d5:05:08:c0: 37:69:2b:ad:2f:d6:19:b5:13:45:3f:58:9d:6e:9a:e1:87:84: ca:01:f2:41:43:0d:4a:1b:c4:9c:bc:57:1b:8d:28:1b:df:38: d2:8d:37:ae:2c:40:ff:1f:a2:89:fe:29:62:48:30:00:7b:1c: 22:31:2f:d8:d3:09:1e:d1:dc:91:ec:a1:e1:58:ce:df:b2:6b: 78:55:59:f9:84:25:3c:76:5a:13:52:ed:98:ca:c8:e6:6a:a2: a4:93:90:d1:f4:5d:f9:1a:58:6b:59:48:7b:c4:5d:fd:7c:11: 11:03:8d:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEtSfK23VWkzE9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTI0M1oXDTI1MDcyMzE0MTI0M1owLzEtMCsGA1UEAxMk YmRlNWI0MzQtYmI0OC00ZTRhLWI5ZTQtNTc3ZGQ0OTc3OGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp/CCNs6PtI1fHEvnEgIn7/Izx4iSKZQKMb8 h+1mLpMZoR8zONxWX4nM5c69jFmBPcqgB47LfUgd5CiNlM+BXDmd9+q8++JcERiG +YGKCyszE6Zq6p/hHxShdjFtcl22xhFJ/AglkosLQEd3WUcMCImAXMc1jpcGpRMU VZxV3v0FoNJYJGF5ir6bMEf4oiok5fByVLpmy/xFWLMzkVfszz7QLpeGp9mewHRK 3qU2v+yoeV86rt/T/6kHY46951to2HfD3DUv7XcwAWyM7E76048Vnx3yL2pXXKiQ 8roBwyTqWELS4XtvdwNZNEw4VEpUNUM6+ySlTPmODv/sSsGlqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+onKbkzL7EpTqOkRS+V6/dFkbxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDM4ZDA0YzUtYjNhZi0z NWE4LWJiZTgtNDlmNTJkYzZlM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdzWxx/MB906qM+zPyCPewLfnFWY01siX3q2qjHw6U2RTdWC2QC3L5Q klgk1478EPqy2hbJGekZwDFqYYR0xcJoBU9ZrwiBX+svEp+11LhMvM/eMXmJY6ia Lb4vBc58qubx3fE5IeYosuYN03sWXQMAsi15PlRu3kbrL2M/54MEjmMjUJSf/zjD 0sHW1QUIwDdpK60v1hm1E0U/WJ1umuGHhMoB8kFDDUobxJy8VxuNKBvfONKNN64s QP8foon+KWJIMAB7HCIxL9jTCR7R3JHsoeFYzt+ya3hVWfmEJTx2WhNS7ZjKyOZq oqSTkNH0XfkaWGtZSHvEXf18EREDjXg= -----END CERTIFICATE-----Generated at Thu May 8 18:46:43 2025 by rpki-client