$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d3f2d62-7392-3f54-9ead-3a261d95adca.roa File: 5d3f2d62-7392-3f54-9ead-3a261d95adca.roa (raw, json) Hash identifier: DCz1rs8EO8yr4AT5Lb1HLWbQz6AwUzvuN5dryyV/zF8= Subject key identifier: 93:7A:F6:BD:78:2E:CF:71:17:45:2C:CD:18:D0:1F:AC:6C:3F:91:E8 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBDA13FA20E638DCBB9200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d3f2d62-7392-3f54-9ead-3a261d95adca.roa Signing time: Thu 24 Apr 2025 11:17:28 +0000 ROA not before: Thu 24 Apr 2025 11:17:28 +0000 ROA not after: Wed 23 Jul 2025 11:17:28 +0000 asID: 12041 IP address blocks: 199.182.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:da:13:fa:20:e6:38:dc:bb:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:28 2025 GMT Not After : Jul 23 11:17:28 2025 GMT Subject: CN=553a59a3-a2d6-48f6-9167-0d04fac4dbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:8e:67:c1:a4:c3:eb:7a:ed:46:e9:09:a8: a7:5b:87:bf:ab:93:6d:eb:4b:f7:3f:e7:34:93:10: 2f:80:78:ac:c7:78:c2:6c:f2:ad:53:f2:69:ee:58: 62:38:cc:fd:ac:fc:ad:ff:60:a4:c2:21:77:58:cf: 1a:d7:5a:b1:02:e6:68:cf:5a:93:9a:85:5e:5c:b3: c9:9f:82:a4:1d:da:b3:4e:fa:89:62:1f:94:fa:f4: b2:bc:74:e8:06:3d:75:04:69:86:1f:d5:73:1b:dd: 82:86:16:96:8a:6e:c7:6c:74:c8:27:21:ae:92:38: 58:11:2e:df:60:1e:9d:04:15:37:40:5d:c6:67:d1: a8:44:25:52:40:3f:4b:d5:7b:d2:0f:a8:f6:3d:da: d8:1d:f7:94:55:78:e7:b2:2a:90:f4:89:1b:8c:da: 44:bc:69:cd:07:e1:3a:b9:7f:31:d4:34:40:b6:2b: 59:a6:44:a7:d5:8a:fc:16:9c:47:aa:a5:ad:87:89: 0d:76:e7:01:cf:c3:a6:49:72:c4:26:89:ab:50:f6: c1:cd:97:5d:e6:8e:a5:66:ec:57:8a:17:12:bd:67: bc:28:78:95:3d:25:85:2d:39:c7:8b:8f:d7:16:1e: c5:46:4b:33:3f:7f:b1:d6:e3:70:04:63:f6:e6:4e: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7A:F6:BD:78:2E:CF:71:17:45:2C:CD:18:D0:1F:AC:6C:3F:91:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5d3f2d62-7392-3f54-9ead-3a261d95adca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f8:06:4f:37:65:78:4b:3d:65:be:58:10:f4:aa:1e:9f:24: e6:3c:13:6d:51:81:74:76:f8:f1:9a:52:bc:72:36:13:21:ba: 85:4d:34:f7:73:10:e3:4e:83:3a:c9:84:4f:bb:67:1a:46:29: d4:61:1d:b7:b6:95:5c:77:84:3c:d2:27:98:59:8a:ad:84:71: 41:cb:80:66:82:a7:9c:7a:e3:da:f7:62:d9:38:8c:42:a5:85: f9:c4:3d:9e:49:75:34:99:52:92:95:ee:bc:5d:df:ea:49:30: 3f:50:17:1f:75:82:9a:ba:4b:87:c1:a8:3e:91:16:32:00:ce: 33:7e:2f:bb:95:7e:f9:e0:38:ba:50:a9:ec:26:5b:37:fa:c1: 96:8a:4d:b0:1b:bd:91:7b:f7:c9:a5:83:87:4c:bc:db:a1:f3: 41:cc:89:84:de:dc:72:1b:f1:c7:90:5c:f9:61:c1:58:78:b3: 9f:19:ee:98:83:2f:06:71:fa:af:62:60:90:00:90:ad:ab:84: bb:44:ab:aa:fe:47:f9:a7:d3:0e:14:7a:80:c3:00:10:8c:9c: f7:c2:66:f5:8e:26:be:1e:9f:f8:cc:5d:cf:29:dd:ad:45:b6: e7:12:0f:e2:f1:d6:d0:c4:59:66:33:f2:40:c4:42:3b:61:10: 64:53:54:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu9oT+iDmONy7kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcyOFoXDTI1MDcyMzExMTcyOFowLzEtMCsGA1UEAxMk NTUzYTU5YTMtYTJkNi00OGY2LTkxNjctMGQwNGZhYzRkYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqiOZ8Gkw+t67UbpCainW4e/q5Nt60v3P+c0 kxAvgHisx3jCbPKtU/Jp7lhiOMz9rPyt/2CkwiF3WM8a11qxAuZoz1qTmoVeXLPJ n4KkHdqzTvqJYh+U+vSyvHToBj11BGmGH9VzG92ChhaWim7HbHTIJyGukjhYES7f YB6dBBU3QF3GZ9GoRCVSQD9L1XvSD6j2PdrYHfeUVXjnsiqQ9IkbjNpEvGnNB+E6 uX8x1DRAtitZpkSn1Yr8FpxHqqWth4kNducBz8OmSXLEJomrUPbBzZdd5o6lZuxX ihcSvWe8KHiVPSWFLTnHi4/XFh7FRkszP3+x1uNwBGP25k7o6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJN69r14Ls9xF0UszRjQH6xsP5HoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNWQzZjJkNjItNzM5Mi0z ZjU0LTllYWQtM2EyNjFkOTVhZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI34Bk83ZXhLPWW+WBD0qh6fJOY8E21RgXR2+PGaUrxyNhMhuoVNNPdz EONOgzrJhE+7ZxpGKdRhHbe2lVx3hDzSJ5hZiq2EcUHLgGaCp5x649r3Ytk4jEKl hfnEPZ5JdTSZUpKV7rxd3+pJMD9QFx91gpq6S4fBqD6RFjIAzjN+L7uVfvngOLpQ qewmWzf6wZaKTbAbvZF798mlg4dMvNuh80HMiYTe3HIb8ceQXPlhwVh4s58Z7piD LwZx+q9iYJAAkK2rhLtEq6r+R/mn0w4UeoDDABCMnPfCZvWOJr4en/jMXc8p3a1F tucSD+Lx1tDEWWYz8kDEQjthEGRTVKE= -----END CERTIFICATE-----Generated at Sun May 11 15:41:38 2025 by rpki-client