$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a555e56c-6056-3069-8eef-ee9a38473d80.roa File: a555e56c-6056-3069-8eef-ee9a38473d80.roa (raw, json) Hash identifier: nYpUHrTjH97BoH6baIdwkjegOQdQJrleDnZxHanWI04= Subject key identifier: C3:05:F8:F9:7A:3A:95:F9:2B:B6:0E:1B:B5:28:C5:3D:A5:14:5B:90 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBE895E7C7FB87B158D040 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a555e56c-6056-3069-8eef-ee9a38473d80.roa Signing time: Thu 24 Apr 2025 11:17:35 +0000 ROA not before: Thu 24 Apr 2025 11:17:35 +0000 ROA not after: Wed 23 Jul 2025 11:17:35 +0000 asID: 12041 IP address blocks: 199.182.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:e8:95:e7:c7:fb:87:b1:58:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:35 2025 GMT Not After : Jul 23 11:17:35 2025 GMT Subject: CN=5109d918-4ae3-4c9d-8380-8c620d3dbb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:03:54:22:87:68:77:a2:ac:1b:c3:06:68:14: 38:e8:c3:3f:71:68:fd:d1:14:b3:d3:5d:2a:a2:8e: 88:0e:29:d2:cd:4a:0f:df:6b:cf:ed:c5:4d:2d:af: 48:c6:c9:a3:e1:f1:ba:78:c7:be:71:7f:24:7e:d9: 89:f8:09:d7:9d:da:56:56:9f:be:4b:40:ca:f0:c6: d7:a3:7c:d0:f4:fc:d7:f4:74:e5:b7:3f:31:96:a3: 95:3e:c5:f9:c6:ca:ba:65:85:61:f5:5e:c0:e7:6b: f2:b6:26:bf:95:04:e1:19:48:b9:0b:91:53:10:15: 99:cc:ff:f8:b3:ce:b8:aa:9d:bc:70:c8:1d:63:7f: fa:00:30:57:fc:b7:e8:f0:de:ad:64:f6:6d:b9:74: df:f1:f3:0b:88:74:89:c9:2d:1d:11:93:32:57:73: dc:31:91:3e:09:0d:ca:26:e6:90:9f:c1:4f:8e:b3: b1:69:7d:55:05:29:b2:ce:39:7b:f5:73:5a:b3:be: c8:8b:be:4f:cf:32:83:35:cb:f5:bb:66:77:e9:df: 02:1b:91:56:a2:bf:72:5a:7f:75:7c:07:59:2f:89: 84:c9:3f:ad:ba:a8:ce:57:9f:25:59:e9:22:79:f1: 7b:92:55:53:e7:a4:3b:a5:dd:96:54:55:cc:53:bd: 26:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:05:F8:F9:7A:3A:95:F9:2B:B6:0E:1B:B5:28:C5:3D:A5:14:5B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a555e56c-6056-3069-8eef-ee9a38473d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a1:d4:03:ca:68:ed:55:36:25:7a:ca:3b:d2:46:99:04:70: 69:89:82:e8:7a:e5:08:1d:51:07:38:41:84:58:d8:d2:18:68: 59:19:32:f2:5b:97:5d:46:f5:32:ed:d3:4a:2f:50:f8:22:8e: 19:dc:60:90:32:22:d7:55:54:de:ae:9c:4e:3b:29:59:6e:4b: 0b:46:bb:2d:d6:a6:e2:17:cc:ae:13:93:55:8c:e3:62:75:67: 28:48:e6:bb:63:84:5f:87:fd:4e:12:ac:ac:3b:1b:78:97:bd: ae:e5:e3:65:de:ac:52:48:81:3f:b7:a7:28:b1:10:2a:43:d3: 00:83:1c:cd:78:01:b6:10:9b:91:80:6b:e7:7f:b9:09:b1:d2: 82:38:22:16:83:ff:4e:6e:82:a2:e0:ab:a9:23:c3:bd:e4:dd: 83:75:ef:1e:90:d0:21:3a:6d:14:aa:a4:23:f6:61:ff:e0:ba: 9d:30:1f:47:5e:ae:74:ab:6e:64:90:91:92:cb:bf:7f:e7:f0: d1:93:61:a0:33:35:bd:dc:10:3d:f5:10:f8:d5:cd:0f:4c:7b: 63:32:d2:a4:d4:74:88:2a:c0:a4:c2:84:64:01:eb:bf:5a:1d: 64:c1:de:dd:58:8c:1a:c9:48:01:ec:94:e9:a5:97:e9:fd:14: a0:9f:a7:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu+iV58f7h7FY0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTczNVoXDTI1MDcyMzExMTczNVowLzEtMCsGA1UEAxMk NTEwOWQ5MTgtNGFlMy00YzlkLTgzODAtOGM2MjBkM2RiYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQNUIodod6KsG8MGaBQ46MM/cWj90RSz010q oo6IDinSzUoP32vP7cVNLa9Ixsmj4fG6eMe+cX8kftmJ+AnXndpWVp++S0DK8MbX o3zQ9PzX9HTltz8xlqOVPsX5xsq6ZYVh9V7A52vytia/lQThGUi5C5FTEBWZzP/4 s864qp28cMgdY3/6ADBX/Lfo8N6tZPZtuXTf8fMLiHSJyS0dEZMyV3PcMZE+CQ3K JuaQn8FPjrOxaX1VBSmyzjl79XNas77Ii75PzzKDNcv1u2Z36d8CG5FWor9yWn91 fAdZL4mEyT+tuqjOV58lWekiefF7klVT56Q7pd2WVFXMU70mOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMF+Pl6OpX5K7YOG7UoxT2lFFuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTU1NWU1NmMtNjA1Ni0z MDY5LThlZWYtZWU5YTM4NDczZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+h1APKaO1VNiV6yjvSRpkEcGmJguh65QgdUQc4QYRY2NIYaFkZMvJb l11G9TLt00ovUPgijhncYJAyItdVVN6unE47KVluSwtGuy3WpuIXzK4Tk1WM42J1 ZyhI5rtjhF+H/U4SrKw7G3iXva7l42XerFJIgT+3pyixECpD0wCDHM14AbYQm5GA a+d/uQmx0oI4IhaD/05ugqLgq6kjw73k3YN17x6Q0CE6bRSqpCP2Yf/gup0wH0de rnSrbmSQkZLLv3/n8NGTYaAzNb3cED31EPjVzQ9Me2My0qTUdIgqwKTChGQB679a HWTB3t1YjBrJSAHslOmll+n9FKCfp7U= -----END CERTIFICATE-----Generated at Thu May 8 23:30:07 2025 by rpki-client