$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/24805ac9-0688-3b29-92cf-4829d09b3093.roa File: 24805ac9-0688-3b29-92cf-4829d09b3093.roa (raw, json) Hash identifier: wmbOnkDVK2zbdc2u/ol5EC4hpE8ERrZ3vZWmZzOLqIY= Subject key identifier: FC:57:98:1A:D3:5E:F8:CA:61:79:0B:C0:AF:8B:90:2F:14:8B:4F:47 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A212E5ABA7FFCB782591B780 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/24805ac9-0688-3b29-92cf-4829d09b3093.roa Signing time: Thu 24 Apr 2025 14:12:51 +0000 ROA not before: Thu 24 Apr 2025 14:12:51 +0000 ROA not after: Wed 23 Jul 2025 14:12:51 +0000 asID: 207266 IP address blocks: 199.249.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:e5:ab:a7:ff:cb:78:25:91:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:12:51 2025 GMT Not After : Jul 23 14:12:51 2025 GMT Subject: CN=23dd0388-86fe-484f-bc67-9673e2588e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4d:3c:0c:76:f2:ef:cb:5f:27:56:94:d6:63: 90:6c:94:f4:e7:b3:ad:21:f7:dd:1e:4d:e4:bf:02: 50:0d:5d:34:0d:46:1e:c9:0c:22:ed:57:e0:49:5c: 13:fa:ea:9f:36:0c:09:ee:1f:5f:4d:29:e3:c0:dd: 8c:25:06:98:1f:e1:37:f5:44:32:be:71:1c:1e:a7: fb:93:3c:be:82:25:16:9d:6a:1d:f4:0e:c5:c3:ea: 30:a7:c0:56:62:78:8b:4f:4b:81:96:b3:f3:c0:90: 72:d3:a9:4e:f2:44:de:f0:f2:31:31:e6:71:e1:65: b6:29:fd:3e:d2:09:29:0b:9a:63:ab:73:3f:fd:28: 6d:48:ae:bc:2b:66:b6:0d:c7:f0:e1:18:b9:c9:25: 00:ed:a4:31:32:cc:4f:0a:2a:d4:d6:9a:ca:b3:9f: 7b:84:22:bd:97:e2:96:6e:50:d7:44:e2:28:b5:2d: 75:14:6b:96:16:49:55:45:21:cc:bf:f9:b5:8a:9b: d3:52:cb:d0:d9:06:93:f7:18:84:9e:68:e8:10:b0: 2c:aa:77:77:d5:71:69:ca:df:00:ce:36:49:93:d5: 8c:29:fb:ff:e7:40:1d:e8:6a:38:8e:8f:ba:6c:4f: dd:25:4e:c8:78:6d:2c:c7:cd:7e:95:72:73:3a:40: ce:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:57:98:1A:D3:5E:F8:CA:61:79:0B:C0:AF:8B:90:2F:14:8B:4F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/24805ac9-0688-3b29-92cf-4829d09b3093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b3:d6:29:d0:2e:12:fe:ec:f4:d7:1f:31:b0:d6:25:ce:e9: a5:61:3e:df:1d:85:85:04:45:21:f8:98:14:17:b1:09:0a:4f: 63:4c:53:c5:ed:3b:95:a7:ad:bf:f3:54:de:4a:e6:11:9a:53: 79:c1:af:60:aa:0a:ee:24:3b:ad:17:6f:c4:69:1a:a5:6a:d8: a5:a5:10:30:1d:39:5b:5f:74:ce:d8:bd:ae:aa:b2:92:9b:8b: f9:04:7c:45:ab:51:c8:ef:b9:55:c2:0c:86:f2:2f:3b:1b:cc: a7:7f:82:a5:6e:1d:40:81:c1:23:9c:21:02:cd:51:24:6e:f6: 6a:06:10:0f:6b:b3:6e:31:51:de:71:6d:70:fe:02:3d:99:5d: 87:0a:50:14:e9:43:1a:92:a9:90:58:06:b0:4e:81:95:1a:47: 28:a9:45:23:05:79:ea:fa:a4:be:6c:c5:a7:68:94:b8:b6:74: 3d:8a:a2:ef:59:70:6d:6a:11:01:a8:32:f0:70:96:d1:af:3e: ac:af:f5:14:33:e3:43:4d:b0:9e:3c:75:02:cb:02:3e:d3:f8: e7:65:e0:f8:31:37:04:ae:2c:21:a4:7f:7b:c3:41:93:c4:bf: 54:84:3e:3f:c5:18:5a:10:70:59:61:20:34:cc:52:08:46:48: 09:e5:7e:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEuWrp//LeCWRt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTI1MVoXDTI1MDcyMzE0MTI1MVowLzEtMCsGA1UEAxMk MjNkZDAzODgtODZmZS00ODRmLWJjNjctOTY3M2UyNTg4ZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6008DHby78tfJ1aU1mOQbJT057OtIffdHk3k vwJQDV00DUYeyQwi7VfgSVwT+uqfNgwJ7h9fTSnjwN2MJQaYH+E39UQyvnEcHqf7 kzy+giUWnWod9A7Fw+owp8BWYniLT0uBlrPzwJBy06lO8kTe8PIxMeZx4WW2Kf0+ 0gkpC5pjq3M//ShtSK68K2a2Dcfw4Ri5ySUA7aQxMsxPCirU1prKs597hCK9l+KW blDXROIotS11FGuWFklVRSHMv/m1ipvTUsvQ2QaT9xiEnmjoELAsqnd31XFpyt8A zjZJk9WMKfv/50Ad6Go4jo+6bE/dJU7IeG0sx81+lXJzOkDOKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxXmBrTXvjKYXkLwK+LkC8Ui09HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjQ4MDVhYzktMDY4OC0z YjI5LTkyY2YtNDgyOWQwOWIzMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWz1inQLhL+7PTXHzGw1iXO6aVhPt8dhYUERSH4mBQXsQkKT2NMU8Xt O5Wnrb/zVN5K5hGaU3nBr2CqCu4kO60Xb8RpGqVq2KWlEDAdOVtfdM7Yva6qspKb i/kEfEWrUcjvuVXCDIbyLzsbzKd/gqVuHUCBwSOcIQLNUSRu9moGEA9rs24xUd5x bXD+Aj2ZXYcKUBTpQxqSqZBYBrBOgZUaRyipRSMFeer6pL5sxadolLi2dD2Kou9Z cG1qEQGoMvBwltGvPqyv9RQz40NNsJ48dQLLAj7T+Odl4PgxNwSuLCGkf3vDQZPE v1SEPj/FGFoQcFlhIDTMUghGSAnlfn0= -----END CERTIFICATE-----Generated at Sun May 11 09:18:24 2025 by rpki-client