$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d766f13-bfab-38cf-a384-99ce1fa7b924.roa File: 0d766f13-bfab-38cf-a384-99ce1fa7b924.roa (raw, json) Hash identifier: 7KMtgSeKU2HeKsbs66hfaEo1Lli+inQprMKOR85gU9s= Subject key identifier: E9:58:1C:D0:C0:1F:3D:E5:2E:12:1C:52:70:F1:D2:C8:5D:54:5B:A3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A21314B18A48582D660FC880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d766f13-bfab-38cf-a384-99ce1fa7b924.roa Signing time: Thu 24 Apr 2025 14:13:13 +0000 ROA not before: Thu 24 Apr 2025 14:13:13 +0000 ROA not after: Wed 23 Jul 2025 14:13:13 +0000 asID: 207266 IP address blocks: 199.249.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:13:14:b1:8a:48:58:2d:66:0f:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:13:13 2025 GMT Not After : Jul 23 14:13:13 2025 GMT Subject: CN=8584baf6-b884-4fdc-85e8-ae73c4494696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:39:5e:42:12:46:30:fa:c8:7b:63:5f:c1:43: b0:80:d2:89:2c:d1:db:7e:0f:68:e4:da:78:15:6f: 20:fe:98:a4:7c:9d:3f:07:b8:81:09:91:72:e0:73: 8a:ea:75:06:fe:02:76:5f:95:f7:1c:1a:3e:c6:48: d7:38:78:54:2e:6d:46:83:c5:7d:9b:fc:d3:f3:92: 2b:db:9b:58:44:90:6b:00:7f:ca:b3:8b:d0:e2:02: 50:91:27:a4:45:1f:d4:5e:0c:79:92:13:67:2e:8a: 8f:27:e8:dc:86:7f:ca:18:c4:13:c5:bf:df:75:ea: 8f:45:1b:60:49:c0:d5:f6:06:bf:01:cf:f7:96:98: 50:9a:a6:fd:d2:53:f2:71:23:53:d7:99:6b:e7:5e: 1a:d0:aa:5a:d5:c1:a2:7d:48:b8:70:be:00:20:04: 65:ea:c2:02:e9:e5:50:9b:20:22:fe:be:37:0c:ea: f0:03:47:68:f4:49:a9:2a:84:cf:0c:4a:d5:c8:28: 38:04:30:14:d3:5a:c0:83:ed:6a:da:cc:7d:ce:4d: 47:d7:0a:00:da:a2:21:92:a0:cd:b1:27:3d:eb:65: f8:21:90:50:1c:f9:00:0e:0c:cf:ff:ed:a3:87:01: ad:d5:04:4f:4f:88:4e:78:80:49:3f:a5:af:7b:cf: 29:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:58:1C:D0:C0:1F:3D:E5:2E:12:1C:52:70:F1:D2:C8:5D:54:5B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d766f13-bfab-38cf-a384-99ce1fa7b924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:41:64:b9:16:20:d9:ed:1c:11:0b:0e:4f:20:82:dd:e4:5e: 58:93:6f:39:f8:9e:98:a6:e8:b2:db:f7:df:ed:cb:0a:d9:bd: f0:e6:1f:bb:3b:93:db:6c:a5:c6:71:16:02:b6:b1:9f:c6:75: c2:ec:b5:9e:4d:4b:cc:66:35:b8:7c:31:a0:2d:c8:16:99:73: 77:13:42:32:34:b8:d7:03:6f:2e:d3:71:e9:8e:ec:55:a7:cf: f6:ad:3e:25:90:9f:1f:ba:6b:4c:62:0f:79:2e:e6:5a:ed:b0: f8:7e:dc:1e:d7:e7:7e:b1:d5:ec:89:76:e0:89:0a:d3:3e:b4: e1:6b:81:20:cf:09:42:4c:26:3d:53:36:30:d7:ac:19:28:78: 07:0e:59:f6:2c:1e:4f:cc:e2:66:bd:0c:dd:99:c0:2e:88:c7: 22:2e:e0:40:20:c4:1b:29:6b:d6:1d:1a:c5:87:71:a4:39:19: 00:ff:6e:13:f9:43:bd:84:ac:85:96:a6:7b:e2:36:79:d7:32: e0:44:f6:49:28:d9:5e:3a:71:7b:fb:92:7f:1f:3c:18:f9:f5: d5:ea:ab:fa:21:d2:46:f1:1d:a7:5c:77:ac:d8:f7:94:69:0b: 6d:87:9d:f9:a5:0c:c7:d3:87:1f:b6:f0:2a:c2:e2:a8:37:65: dc:af:df:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiExSxikhYLWYPyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTMxM1oXDTI1MDcyMzE0MTMxM1owLzEtMCsGA1UEAxMk ODU4NGJhZjYtYjg4NC00ZmRjLTg1ZTgtYWU3M2M0NDk0Njk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojleQhJGMPrIe2NfwUOwgNKJLNHbfg9o5Np4 FW8g/pikfJ0/B7iBCZFy4HOK6nUG/gJ2X5X3HBo+xkjXOHhULm1Gg8V9m/zT85Ir 25tYRJBrAH/Ks4vQ4gJQkSekRR/UXgx5khNnLoqPJ+jchn/KGMQTxb/fdeqPRRtg ScDV9ga/Ac/3lphQmqb90lPycSNT15lr514a0Kpa1cGifUi4cL4AIARl6sIC6eVQ myAi/r43DOrwA0do9EmpKoTPDErVyCg4BDAU01rAg+1q2sx9zk1H1woA2qIhkqDN sSc962X4IZBQHPkADgzP/+2jhwGt1QRPT4hOeIBJP6Wve88pYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlYHNDAHz3lLhIcUnDx0shdVFujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMGQ3NjZmMTMtYmZhYi0z OGNmLWEzODQtOTljZTFmYTdiOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlBZLkWINntHBELDk8ggt3kXliTbzn4npim6LLb99/tywrZvfDmH7s7 k9tspcZxFgK2sZ/GdcLstZ5NS8xmNbh8MaAtyBaZc3cTQjI0uNcDby7TcemO7FWn z/atPiWQnx+6a0xiD3ku5lrtsPh+3B7X536x1eyJduCJCtM+tOFrgSDPCUJMJj1T NjDXrBkoeAcOWfYsHk/M4ma9DN2ZwC6IxyIu4EAgxBspa9YdGsWHcaQ5GQD/bhP5 Q72ErIWWpnviNnnXMuBE9kko2V46cXv7kn8fPBj59dXqq/oh0kbxHadcd6zY95Rp C22HnfmlDMfThx+28CrC4qg3Zdyv37A= -----END CERTIFICATE-----Generated at Thu May 8 23:27:40 2025 by rpki-client