$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa File: 34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa (raw, json) Hash identifier: TVouFq++VObFhHOISs4TS6ql/8S7o1qiPvGfWz1xleI= Subject key identifier: E5:14:41:66:4E:22:DD:14:FD:9C:01:1F:41:97:2C:94:69:4C:9E:27 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849CD34C1E926F9499A2E253AC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 393246 IP address blocks: 199.115.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:c1:e9:26:f9:49:9a:2e:25:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=28953805-d365-4496-a905-ddf4fa56c1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:43:2f:ef:75:43:44:46:0b:a7:73:84:08:1b: 03:bd:77:7a:42:c6:1d:d9:34:82:9b:83:e0:64:66: d0:ac:c5:78:c7:e3:14:d1:66:ee:6a:ce:92:d8:f1: 90:65:4f:72:7e:b0:0c:84:50:a7:23:b3:99:41:6a: 51:7c:04:4b:c4:30:1e:2e:23:79:7f:0b:e9:87:4b: 33:5c:0b:6b:4a:50:c8:ba:6c:79:77:b6:ff:ad:f7: 05:d5:26:e2:e9:4c:c3:04:a4:26:ce:f0:f3:0d:c4: 44:26:cf:6f:ab:c3:ce:e9:3e:a6:4f:86:7c:8b:61: f8:c7:26:d8:95:9e:63:e7:d9:c1:b9:d8:83:1d:ba: 3e:fb:03:2d:85:b2:30:12:c0:70:1a:2b:a8:19:15: ca:d3:3f:65:2c:4b:25:8c:2d:6a:e9:08:f1:3e:b0: 09:07:a3:36:ba:ea:d3:88:3a:80:ab:51:69:d4:32: 65:69:97:e2:48:9c:ff:44:b4:f1:0e:1d:86:c5:18: 1c:2b:7a:ee:cc:be:f2:db:ef:5b:da:28:d3:dd:7f: 46:a0:f3:9a:1c:12:01:1d:93:a5:d3:c4:27:7a:85: 8c:e2:d3:3a:b2:58:73:56:6c:99:5c:eb:98:3d:c6: de:8a:bc:02:c6:0f:d2:c5:30:15:0c:c2:96:c5:4f: f4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:14:41:66:4E:22:DD:14:FD:9C:01:1F:41:97:2C:94:69:4C:9E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:9b:47:bf:fd:e1:e2:06:ad:58:be:4e:41:8f:1c:b2:5b:4d: 8b:13:16:d5:a5:e9:4d:1a:1d:20:e7:0e:2f:17:ad:f2:c1:86: c3:7d:bd:94:1f:60:66:29:34:5c:c5:8e:c0:19:59:90:42:97: bf:15:94:14:d3:2f:59:68:18:ee:26:d9:23:05:02:cc:32:2f: b4:2c:e0:c3:dc:fc:d5:80:af:1e:1a:c9:4c:99:5d:61:27:da: 21:bf:ba:94:26:5e:39:10:b1:58:cd:59:14:03:93:5a:7b:e1: c2:6f:a9:a4:fd:5e:02:ef:74:ac:34:71:a5:cb:3e:3c:30:e2: f6:ff:51:3c:05:7a:7e:4d:48:54:59:7a:0e:d6:16:a3:fd:6c: 4c:51:01:52:43:bb:bb:99:3e:47:11:73:01:f6:8b:a5:2c:93: 77:9b:bc:93:86:eb:7f:04:f9:74:57:cd:54:8e:9c:99:ef:31: 42:9a:05:35:e1:09:d1:e3:da:62:54:a0:ed:b4:d6:21:32:a4: ac:ef:f9:05:5a:c5:05:e9:d2:56:b7:ad:24:aa:4e:72:fc:49: 4a:4d:e2:76:4e:b2:9f:5e:32:3d:02:c6:a8:2d:45:9e:e9:98: db:99:b3:97:0c:f4:58:b1:9c:35:f3:54:48:72:06:f0:20:60: e5:7a:5f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNMHpJvlJmi4lOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk Mjg5NTM4MDUtZDM2NS00NDk2LWE5MDUtZGRmNGZhNTZjMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUMv73VDREYLp3OECBsDvXd6QsYd2TSCm4Pg ZGbQrMV4x+MU0Wbuas6S2PGQZU9yfrAMhFCnI7OZQWpRfARLxDAeLiN5fwvph0sz XAtrSlDIumx5d7b/rfcF1Sbi6UzDBKQmzvDzDcREJs9vq8PO6T6mT4Z8i2H4xybY lZ5j59nBudiDHbo++wMthbIwEsBwGiuoGRXK0z9lLEsljC1q6QjxPrAJB6M2uurT iDqAq1Fp1DJlaZfiSJz/RLTxDh2GxRgcK3ruzL7y2+9b2ijT3X9GoPOaHBIBHZOl 08QneoWM4tM6slhzVmyZXOuYPcbeirwCxg/SxTAVDMKWxU/0bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUUQWZOIt0U/ZwBH0GXLJRpTJ4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzRjMmZiY2YtMzdiNS0z OTgzLThlODItNWI3YjMzNDNmMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCbR7/94eIGrVi+TkGPHLJbTYsTFtWl6U0aHSDnDi8XrfLBhsN9vZQf YGYpNFzFjsAZWZBCl78VlBTTL1loGO4m2SMFAswyL7Qs4MPc/NWArx4ayUyZXWEn 2iG/upQmXjkQsVjNWRQDk1p74cJvqaT9XgLvdKw0caXLPjww4vb/UTwFen5NSFRZ eg7WFqP9bExRAVJDu7uZPkcRcwH2i6Usk3ebvJOG638E+XRXzVSOnJnvMUKaBTXh CdHj2mJUoO201iEypKzv+QVaxQXp0la3rSSqTnL8SUpN4nZOsp9eMj0CxqgtRZ7p mNuZs5cM9FixnDXzVEhyBvAgYOV6X2Q= -----END CERTIFICATE-----Generated at Mon Jun 30 16:48:29 2025 by rpki-client