$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4c964d42-735f-3bb3-820e-c686e0eae8ba.roa File: 4c964d42-735f-3bb3-820e-c686e0eae8ba.roa (raw, json) Hash identifier: 0DMYw03Wu4/EMP4ElEjPPAKxIa5KsK2R1dCO34ETZSM= Subject key identifier: 66:8D:85:9C:AD:A3:93:4F:9F:CD:75:53:A5:87:31:FE:7B:22:D0:33 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBCB0FEF04637914231680 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4c964d42-735f-3bb3-820e-c686e0eae8ba.roa Signing time: Thu 24 Apr 2025 11:17:21 +0000 ROA not before: Thu 24 Apr 2025 11:17:21 +0000 ROA not after: Wed 23 Jul 2025 11:17:21 +0000 asID: 12041 IP address blocks: 199.182.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:cb:0f:ef:04:63:79:14:23:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:21 2025 GMT Not After : Jul 23 11:17:21 2025 GMT Subject: CN=e06aa552-7375-4b63-accf-3fcb5ae1ca8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d7:20:95:94:28:19:3c:26:64:b2:55:b5:09: 6f:2a:d7:a6:18:8d:31:cd:02:bd:58:cb:d3:30:66: 6a:84:25:09:9b:07:d6:8e:81:b8:92:18:27:e3:af: 5a:4c:0c:05:05:b9:1a:19:28:a9:49:5e:ee:e3:a3: 9d:72:94:35:12:52:37:b6:49:c6:ef:14:9e:2e:f4: 93:66:9b:66:22:ee:b9:b7:32:36:5e:a9:3b:ad:a0: 9a:a4:df:9b:aa:ee:29:7e:ba:cf:32:e1:af:d4:dd: d5:31:43:cf:48:86:95:1d:b3:63:80:fe:3c:18:4b: 3e:e1:b2:c0:f7:ef:21:e0:cc:e1:5b:77:fe:6c:dd: 9b:aa:a1:47:98:fd:65:42:f5:f8:3d:98:17:46:c0: a7:5c:d0:c2:30:1f:b8:d9:ec:ea:f0:c1:53:5d:af: ff:56:7e:bc:89:26:2d:e8:ed:cd:15:2e:e7:c1:af: 3e:35:81:93:3b:76:b9:4d:f3:3e:e0:14:87:6d:7d: a1:a6:37:4b:d1:44:12:62:74:8b:9d:9a:a6:9c:36: d2:6b:50:81:d9:11:b9:b6:4f:3a:a5:7f:de:e0:d3: d2:76:6f:f3:61:5d:c9:88:cf:f8:86:66:41:b5:1f: 79:7c:d1:50:17:26:2d:b7:01:60:60:c1:fc:95:da: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8D:85:9C:AD:A3:93:4F:9F:CD:75:53:A5:87:31:FE:7B:22:D0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4c964d42-735f-3bb3-820e-c686e0eae8ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:11:52:05:1e:0e:68:5e:70:55:df:8a:6e:4d:e4:55:b4:e3: d3:bd:91:4e:ff:1b:3a:38:0d:c0:c6:75:d5:68:30:24:86:02: b9:24:7e:f4:d7:59:e0:73:d7:aa:6c:0d:65:c7:76:c8:7b:f7: 21:89:9a:4f:d0:00:7b:fa:ec:cc:a9:4e:d0:44:cd:26:38:3a: 8d:fb:99:2d:db:63:9c:7f:9e:a0:1e:24:6e:09:77:f9:89:e0: 23:37:5c:8e:36:0a:d1:76:12:8d:e1:17:9d:51:a4:29:91:9b: 5b:56:d7:f5:8f:dc:d7:a7:e9:c6:35:a8:c8:3d:01:50:ff:c8: a3:5b:6b:1a:3f:b8:bf:13:74:48:ac:b5:1f:f7:e9:4b:01:58: 43:f0:14:2a:0b:8f:a2:18:50:57:d0:12:74:57:a6:12:f3:e6: f6:2c:0c:43:3f:ba:80:b9:74:35:7c:c3:a8:fb:eb:83:75:71: ee:93:07:8c:a3:00:e1:94:93:52:52:3a:f3:1a:6a:8f:ba:fa: 44:28:dd:52:73:c9:83:b0:fa:71:3e:eb:35:51:ad:17:ea:92: 61:88:4d:af:93:77:f8:70:91:96:80:b2:35:c4:ff:34:d9:45: ac:97:3a:07:e2:24:36:b4:24:1d:b5:31:e2:9b:4b:4d:1a:a6: 18:28:fb:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu8sP7wRjeRQjFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcyMVoXDTI1MDcyMzExMTcyMVowLzEtMCsGA1UEAxMk ZTA2YWE1NTItNzM3NS00YjYzLWFjY2YtM2ZjYjVhZTFjYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdcglZQoGTwmZLJVtQlvKtemGI0xzQK9WMvT MGZqhCUJmwfWjoG4khgn469aTAwFBbkaGSipSV7u46OdcpQ1ElI3tknG7xSeLvST ZptmIu65tzI2Xqk7raCapN+bqu4pfrrPMuGv1N3VMUPPSIaVHbNjgP48GEs+4bLA 9+8h4MzhW3f+bN2bqqFHmP1lQvX4PZgXRsCnXNDCMB+42ezq8MFTXa//Vn68iSYt 6O3NFS7nwa8+NYGTO3a5TfM+4BSHbX2hpjdL0UQSYnSLnZqmnDbSa1CB2RG5tk86 pX/e4NPSdm/zYV3JiM/4hmZBtR95fNFQFyYttwFgYMH8ldqzwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaNhZyto5NPn811U6WHMf57ItAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGM5NjRkNDItNzM1Zi0z YmIzLTgyMGUtYzY4NmUwZWFlOGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACERUgUeDmhecFXfim5N5FW049O9kU7/Gzo4DcDGddVoMCSGArkkfvTX WeBz16psDWXHdsh79yGJmk/QAHv67MypTtBEzSY4Oo37mS3bY5x/nqAeJG4Jd/mJ 4CM3XI42CtF2Eo3hF51RpCmRm1tW1/WP3Nen6cY1qMg9AVD/yKNbaxo/uL8TdEis tR/36UsBWEPwFCoLj6IYUFfQEnRXphLz5vYsDEM/uoC5dDV8w6j764N1ce6TB4yj AOGUk1JSOvMaao+6+kQo3VJzyYOw+nE+6zVRrRfqkmGITa+Td/hwkZaAsjXE/zTZ RayXOgfiJDa0JB21MeKbS00aphgo+3k= -----END CERTIFICATE-----Generated at Fri May 9 10:00:20 2025 by rpki-client