$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/83249b09-da78-3496-b35d-3cddaa31c30b.roa File: 83249b09-da78-3496-b35d-3cddaa31c30b.roa (raw, json) Hash identifier: trzsYqwwo3mPKuezigfuPDkw2EQSCOkx8e2HLY2xGOQ= Subject key identifier: 82:52:CF:56:22:4E:0A:98:F6:43:2A:00:91:B1:DD:03:F4:DB:36:AD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC0E9787ADF9BA5219E180 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/83249b09-da78-3496-b35d-3cddaa31c30b.roa Signing time: Thu 24 Apr 2025 11:17:53 +0000 ROA not before: Thu 24 Apr 2025 11:17:53 +0000 ROA not after: Wed 23 Jul 2025 11:17:53 +0000 asID: 12041 IP address blocks: 199.253.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:0e:97:87:ad:f9:ba:52:19:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:53 2025 GMT Not After : Jul 23 11:17:53 2025 GMT Subject: CN=1e5ce682-be73-4065-aab6-02eef37b8919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:26:0e:d5:d3:25:3c:de:be:6c:d0:92:4a: 2c:b4:fa:ed:be:2b:f4:8b:56:3c:67:58:c7:9a:ce: a1:ac:16:32:81:e1:ee:d0:87:63:f9:d7:7a:fe:53: c4:c4:7c:da:27:c6:77:81:ed:44:a6:8b:e5:40:19: 05:00:7e:05:11:f5:3a:4c:22:04:11:4c:eb:f7:b5: bd:41:6c:cd:7a:21:54:66:6b:e1:09:df:1e:e0:8a: 51:7f:49:93:49:03:fa:e4:b1:99:10:5c:cf:c2:6d: 47:f6:25:0a:99:ad:21:e6:cb:4b:9a:8f:2b:5a:75: 17:ae:ba:db:e9:95:81:d7:10:0e:61:0d:b3:78:98: e2:e5:80:c3:b0:25:19:ab:83:f5:d4:1b:63:a3:5f: 7e:7e:46:2f:3d:f6:2a:69:2d:d3:58:bf:e6:d1:f2: 12:40:5a:87:97:26:2c:95:9d:3b:01:98:91:ad:44: 58:95:c9:4d:25:ac:68:53:39:22:66:fb:46:90:56: 0a:a9:0e:74:bb:0b:2c:71:06:5f:d7:8f:26:96:8c: d5:2d:24:5a:83:1a:8e:72:fc:32:c1:1f:9a:f3:10: ff:a0:5d:97:07:a6:d7:27:ab:db:79:7e:6b:f5:fb: a0:62:a8:ca:15:2f:17:b8:0c:e7:dc:c0:f7:85:9e: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:52:CF:56:22:4E:0A:98:F6:43:2A:00:91:B1:DD:03:F4:DB:36:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/83249b09-da78-3496-b35d-3cddaa31c30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.253.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e4:cc:4d:59:4f:8c:80:64:3e:b9:ee:1c:03:61:63:aa:e7: e7:0c:ea:fd:6f:88:5e:19:0b:2d:a4:63:a0:ec:66:7a:15:e5: 83:a2:fd:da:f1:7b:82:71:5a:51:7d:fc:a6:81:61:ca:6b:38: 58:05:06:0d:17:cc:3a:04:ec:ba:ab:8c:cc:00:bc:87:4c:28: 0e:16:0a:68:40:13:fb:d5:5a:22:60:18:43:37:e1:1b:64:8b: 98:0a:64:c3:87:40:6f:b5:b7:f7:98:63:5d:9d:6f:a2:16:84: 66:97:17:bd:bb:f9:7d:0e:71:b4:60:1c:65:d9:7d:98:17:3b: 23:26:e7:74:c5:50:a5:c2:9b:4e:08:5c:de:f3:5e:22:83:d7: a3:cc:f5:26:59:73:fc:df:38:a5:a8:de:26:4b:00:9f:d9:ed: 10:31:3b:17:f1:8c:0d:b8:f8:8d:f0:10:2e:ae:56:9f:ed:22: bf:4c:c0:72:c2:28:d2:e9:d1:73:0f:69:75:f6:58:3b:f6:3f: 66:ef:9f:2f:b0:05:a9:f6:7a:e1:85:3f:fc:c9:2f:a9:dc:07: 54:7d:08:b9:8a:f3:4a:95:4f:6d:24:ce:42:a2:56:24:4b:62: 62:31:91:8b:52:85:93:99:79:5f:10:78:45:c9:ce:d8:57:fe: 46:2d:08:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvA6Xh635ulIZ4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc1M1oXDTI1MDcyMzExMTc1M1owLzEtMCsGA1UEAxMk MWU1Y2U2ODItYmU3My00MDY1LWFhYjYtMDJlZWYzN2I4OTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt0mDtXTJTzevmzQkkostPrtviv0i1Y8Z1jH ms6hrBYygeHu0Idj+dd6/lPExHzaJ8Z3ge1EpovlQBkFAH4FEfU6TCIEEUzr97W9 QWzNeiFUZmvhCd8e4IpRf0mTSQP65LGZEFzPwm1H9iUKma0h5stLmo8rWnUXrrrb 6ZWB1xAOYQ2zeJji5YDDsCUZq4P11Btjo19+fkYvPfYqaS3TWL/m0fISQFqHlyYs lZ07AZiRrURYlclNJaxoUzkiZvtGkFYKqQ50uwsscQZf148mlozVLSRagxqOcvwy wR+a8xD/oF2XB6bXJ6vbeX5r9fugYqjKFS8XuAzn3MD3hZ4sQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJSz1YiTgqY9kMqAJGx3QP02zatMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODMyNDliMDktZGE3OC0z NDk2LWIzNWQtM2NkZGFhMzFjMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/05MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/kzE1ZT4yAZD657hwDYWOq5+cM6v1viF4ZCy2kY6DsZnoV5YOi/drx e4JxWlF9/KaBYcprOFgFBg0XzDoE7LqrjMwAvIdMKA4WCmhAE/vVWiJgGEM34Rtk i5gKZMOHQG+1t/eYY12db6IWhGaXF727+X0OcbRgHGXZfZgXOyMm53TFUKXCm04I XN7zXiKD16PM9SZZc/zfOKWo3iZLAJ/Z7RAxOxfxjA24+I3wEC6uVp/tIr9MwHLC KNLp0XMPaXX2WDv2P2bvny+wBan2euGFP/zJL6ncB1R9CLmK80qVT20kzkKiViRL YmIxkYtShZOZeV8QeEXJzthX/kYtCCg= -----END CERTIFICATE-----Generated at Thu May 8 12:24:08 2025 by rpki-client