$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/643af3b0-6aa0-31cc-934e-1c1ec4ea17bb.roa File: 643af3b0-6aa0-31cc-934e-1c1ec4ea17bb.roa (raw, json) Hash identifier: 3qSrAx/dfsqSsF0ZNNJw3C+JZvjl4rFhKyMpr+xDdtI= Subject key identifier: 99:B5:96:A0:00:39:52:B2:9E:3C:2F:EA:F3:0D:1A:F8:F3:C1:6C:57 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A212EF87AC01F566B739D880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/643af3b0-6aa0-31cc-934e-1c1ec4ea17bb.roa Signing time: Thu 24 Apr 2025 14:12:56 +0000 ROA not before: Thu 24 Apr 2025 14:12:56 +0000 ROA not after: Wed 23 Jul 2025 14:12:56 +0000 asID: 207266 IP address blocks: 199.249.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:ef:87:ac:01:f5:66:b7:39:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:12:56 2025 GMT Not After : Jul 23 14:12:56 2025 GMT Subject: CN=fed86f82-ea06-440a-9ac3-a8bed8597e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fb:f0:2e:0a:ec:8d:8c:a5:8b:1e:0e:3a:c3: ad:3e:8a:b8:d2:52:2e:4f:95:f8:33:0b:bb:7d:48: af:45:d0:6c:1f:ba:a6:dd:83:17:ec:f2:21:0d:e0: a8:d7:89:d3:f5:58:8b:a3:ae:d4:6c:c7:99:db:b4: 22:01:7c:52:d2:6b:45:6b:4a:18:03:ab:63:32:e2: f0:bd:8f:bc:be:9a:32:bd:4f:7e:e2:47:50:91:ee: 52:dd:96:b4:b0:8c:d6:56:a9:ca:95:b7:0e:c0:51: 60:77:5c:76:f1:e6:e3:a9:a8:84:4e:07:57:d2:c0: 66:ec:32:c2:7a:c2:10:46:67:1d:7d:23:77:7f:d1: 80:ad:e2:a4:d1:17:07:cd:86:b8:41:6b:60:ea:41: b8:18:97:1c:f8:e1:2e:c0:e5:f8:d3:32:b8:75:d3: e0:72:da:d2:63:da:f2:25:be:52:07:4e:c4:45:31: fc:06:d7:1f:b1:88:a5:7a:43:fd:ac:8a:46:ad:6d: b7:ec:62:9d:80:27:10:0a:2c:ef:01:79:15:ac:6e: 64:10:e3:57:3b:79:b8:e2:4f:fa:bd:ea:78:20:f5: d9:f9:3f:f0:59:bf:ff:19:d7:09:c9:c3:03:d7:1a: 2a:0d:b4:af:db:54:f6:a8:78:83:04:c5:f8:f1:49: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B5:96:A0:00:39:52:B2:9E:3C:2F:EA:F3:0D:1A:F8:F3:C1:6C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/643af3b0-6aa0-31cc-934e-1c1ec4ea17bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:3d:8d:f3:f2:cf:35:aa:02:ce:15:66:f0:ca:0a:4b:f3:82: cc:51:3b:c6:42:78:70:62:d2:2d:91:d9:50:e3:7e:c9:58:66: 7b:21:a7:72:ec:8f:ee:55:d6:5e:f8:2a:e1:8d:25:93:aa:bb: 26:d2:6f:4a:20:18:6c:ab:ae:01:c9:d9:5b:a9:dd:aa:95:93: 94:71:0a:ec:22:c6:0d:d7:42:46:d3:11:05:45:48:26:28:42: 83:76:61:82:45:ea:ee:79:c4:6f:ca:83:6c:4e:02:c1:75:7b: 54:ca:ec:e3:bf:cd:80:f0:4d:8b:ea:b4:a1:34:bf:17:64:17: 11:ab:6b:03:36:13:5a:4f:89:ca:b1:a5:da:06:3a:e0:d9:f0: 2d:00:78:ff:7e:70:99:21:cb:91:f0:8d:0d:89:33:e2:02:11: af:47:6e:59:bb:96:18:9f:a9:9f:e0:c9:82:ce:d2:5c:d2:58: 32:45:6d:3b:27:ba:da:37:bb:a2:8d:88:db:83:27:ba:62:7b: 2d:44:f1:42:50:87:5f:a9:02:ef:40:38:9e:5c:74:a4:c9:79: e0:e7:bd:49:4a:12:2e:f5:01:66:10:f0:5d:ee:33:af:94:2b: e8:f9:fd:ca:93:75:16:44:99:a9:5e:56:f7:3b:ac:fe:dc:fa: 46:bb:69:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEu+HrAH1Zrc52IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTI1NloXDTI1MDcyMzE0MTI1NlowLzEtMCsGA1UEAxMk ZmVkODZmODItZWEwNi00NDBhLTlhYzMtYThiZWQ4NTk3ZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfvwLgrsjYylix4OOsOtPoq40lIuT5X4Mwu7 fUivRdBsH7qm3YMX7PIhDeCo14nT9ViLo67UbMeZ27QiAXxS0mtFa0oYA6tjMuLw vY+8vpoyvU9+4kdQke5S3Za0sIzWVqnKlbcOwFFgd1x28ebjqaiETgdX0sBm7DLC esIQRmcdfSN3f9GAreKk0RcHzYa4QWtg6kG4GJcc+OEuwOX40zK4ddPgctrSY9ry Jb5SB07ERTH8BtcfsYilekP9rIpGrW237GKdgCcQCizvAXkVrG5kEONXO3m44k/6 vep4IPXZ+T/wWb//GdcJycMD1xoqDbSv21T2qHiDBMX48UlpUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm1lqAAOVKynjwv6vMNGvjzwWxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjQzYWYzYjAtNmFhMC0z MWNjLTkzNGUtMWMxZWM0ZWExN2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ09jfPyzzWqAs4VZvDKCkvzgsxRO8ZCeHBi0i2R2VDjfslYZnshp3Ls j+5V1l74KuGNJZOquybSb0ogGGyrrgHJ2Vup3aqVk5RxCuwixg3XQkbTEQVFSCYo QoN2YYJF6u55xG/Kg2xOAsF1e1TK7OO/zYDwTYvqtKE0vxdkFxGrawM2E1pPicqx pdoGOuDZ8C0AeP9+cJkhy5HwjQ2JM+ICEa9Hblm7lhifqZ/gyYLO0lzSWDJFbTsn uto3u6KNiNuDJ7piey1E8UJQh1+pAu9AOJ5cdKTJeeDnvUlKEi71AWYQ8F3uM6+U K+j5/cqTdRZEmaleVvc7rP7c+ka7abk= -----END CERTIFICATE-----Generated at Fri May 9 02:06:24 2025 by rpki-client