$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b30c6eaa-13b2-3ed9-b674-c25c392a6a28.roa File: b30c6eaa-13b2-3ed9-b674-c25c392a6a28.roa (raw, json) Hash identifier: ouN1tVPzAcpDHejWU4O2MVU4ujacb1Wh+HyeoV6fEsg= Subject key identifier: A2:A4:2B:80:A6:7D:F4:E4:CC:4F:A3:D1:7C:FA:3B:61:A8:0D:4A:68 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB9E33891D12F250015200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b30c6eaa-13b2-3ed9-b674-c25c392a6a28.roa Signing time: Thu 24 Apr 2025 11:17:00 +0000 ROA not before: Thu 24 Apr 2025 11:17:00 +0000 ROA not after: Wed 23 Jul 2025 11:17:00 +0000 asID: 12041 IP address blocks: 199.115.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:9e:33:89:1d:12:f2:50:01:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:00 2025 GMT Not After : Jul 23 11:17:00 2025 GMT Subject: CN=bfa49fb7-9d99-4d12-8609-6fcc1af372c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b4:f7:dc:09:e7:01:8e:81:bc:21:07:95:7c: 6d:43:30:73:27:3f:7b:5c:20:44:12:5b:93:91:e4: 83:55:9d:ae:5a:90:95:62:3f:6d:0b:69:73:17:99: 63:31:33:0b:8f:e6:9b:e8:50:f5:6e:3d:1e:b8:42: f2:49:c0:84:e5:37:9b:7d:b1:ad:6d:e6:99:d3:8b: 63:df:c6:1c:c3:41:46:f0:e3:2a:40:83:65:c7:62: a4:40:63:30:92:fc:13:ba:45:c6:54:cd:ee:9a:a3: 34:60:6b:95:57:f9:4f:98:17:fb:08:2b:4c:f2:ed: 6f:c9:67:5f:e4:dd:5b:f1:7a:08:45:ba:65:ea:3e: a8:5e:b4:4d:c3:38:0a:90:9e:b8:cb:38:dd:9c:15: d3:85:63:d0:d2:be:e2:56:9d:3d:dd:db:23:63:76: bc:83:50:b4:9b:18:e3:22:f6:3e:71:88:30:8f:bc: c0:f2:89:13:69:16:e2:6e:81:f5:30:25:c8:1d:dd: 33:84:e8:42:5a:d8:f8:ee:b1:7f:f5:04:6d:d2:ab: ca:7a:c8:17:f4:d8:33:8b:55:fb:86:38:8b:6d:bb: 1b:04:c8:3f:fb:21:65:ba:5d:5d:ac:e4:38:76:5f: 82:a8:d1:b2:d7:98:3f:da:38:41:36:86:6e:6e:f7: 7d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A4:2B:80:A6:7D:F4:E4:CC:4F:A3:D1:7C:FA:3B:61:A8:0D:4A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b30c6eaa-13b2-3ed9-b674-c25c392a6a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:4c:4d:38:94:c9:fa:8d:b6:81:8e:60:fc:b6:b8:70:6a:b6: 8c:ae:59:10:92:37:23:d0:a5:0f:94:93:be:a5:ad:75:8c:dc: 34:cc:9a:6f:42:db:1a:7f:0f:c1:95:7d:88:1a:37:c0:a0:e5: ed:c7:f9:a7:91:b2:92:29:6d:be:70:d9:29:7e:13:71:0d:8d: 62:4b:83:13:78:bc:1b:75:2f:0a:10:cd:60:c8:6b:ba:c1:4c: 46:a7:92:52:be:6b:92:b9:ab:dc:07:f7:b3:ca:db:22:26:41: 5a:9c:c8:2e:ab:c6:32:9b:d8:18:b6:ae:8a:33:bb:06:f3:45: f9:3f:59:c1:52:8d:61:42:f0:52:ed:b4:d2:5f:48:d2:cc:d0: 0e:ba:02:30:2d:0c:9a:8e:49:f1:56:4d:76:c0:87:0c:a0:3e: 58:7a:c1:46:10:d7:21:30:0b:35:b1:19:a9:9a:dd:6d:d2:39: 47:48:04:5d:05:de:03:35:bf:ee:9b:50:63:73:53:63:65:8e: bc:26:33:81:a3:ff:d1:8e:f4:ce:c4:da:16:a2:0c:94:b2:8c: 1d:fc:b4:a2:b0:d8:22:b2:e8:40:b7:be:46:ad:1a:90:8d:a2: bf:5d:23:01:6f:76:89:0e:7f:84:60:1f:23:b5:ba:c2:21:13: 27:67:7a:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu54ziR0S8lABUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcwMFoXDTI1MDcyMzExMTcwMFowLzEtMCsGA1UEAxMk YmZhNDlmYjctOWQ5OS00ZDEyLTg2MDktNmZjYzFhZjM3MmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17T33AnnAY6BvCEHlXxtQzBzJz97XCBEEluT keSDVZ2uWpCVYj9tC2lzF5ljMTMLj+ab6FD1bj0euELyScCE5TebfbGtbeaZ04tj 38Ycw0FG8OMqQINlx2KkQGMwkvwTukXGVM3umqM0YGuVV/lPmBf7CCtM8u1vyWdf 5N1b8XoIRbpl6j6oXrRNwzgKkJ64yzjdnBXThWPQ0r7iVp093dsjY3a8g1C0mxjj IvY+cYgwj7zA8okTaRbiboH1MCXIHd0zhOhCWtj47rF/9QRt0qvKesgX9Ngzi1X7 hjiLbbsbBMg/+yFlul1drOQ4dl+CqNGy15g/2jhBNoZubvd9RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKkK4CmffTkzE+j0Xz6O2GoDUpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjMwYzZlYWEtMTNiMi0z ZWQ5LWI2NzQtYzI1YzM5MmE2YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlMTTiUyfqNtoGOYPy2uHBqtoyuWRCSNyPQpQ+Uk76lrXWM3DTMmm9C 2xp/D8GVfYgaN8Cg5e3H+aeRspIpbb5w2Sl+E3ENjWJLgxN4vBt1LwoQzWDIa7rB TEanklK+a5K5q9wH97PK2yImQVqcyC6rxjKb2Bi2roozuwbzRfk/WcFSjWFC8FLt tNJfSNLM0A66AjAtDJqOSfFWTXbAhwygPlh6wUYQ1yEwCzWxGama3W3SOUdIBF0F 3gM1v+6bUGNzU2NljrwmM4Gj/9GO9M7E2haiDJSyjB38tKKw2CKy6EC3vkatGpCN or9dIwFvdokOf4RgHyO1usIhEydneo4= -----END CERTIFICATE-----Generated at Thu May 8 12:11:27 2025 by rpki-client