$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa File: cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa (raw, json) Hash identifier: f/xDrDIwtMwDPcPb2jiqUjFfA4oHwwxaw2FdbHid1Y8= Subject key identifier: C7:44:D0:77:39:22:26:2C:CF:51:5B:7E:13:39:EA:28:A6:67:20:EF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC02D31455DA7E29746440 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa Signing time: Thu 24 Apr 2025 11:17:47 +0000 ROA not before: Thu 24 Apr 2025 11:17:47 +0000 ROA not after: Wed 23 Jul 2025 11:17:47 +0000 asID: 12041 IP address blocks: 199.249.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:02:d3:14:55:da:7e:29:74:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:47 2025 GMT Not After : Jul 23 11:17:47 2025 GMT Subject: CN=4be9810a-aa23-418c-93d8-e287e6b71376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:46:dc:e1:2a:55:cb:66:ed:87:61:81:27: 89:86:a5:35:61:d4:99:b3:75:4d:97:43:58:a2:93: a7:89:07:fb:65:0c:a4:43:39:03:4e:5d:31:07:80: 9b:22:58:66:9f:4f:28:bf:c5:97:c4:9f:ea:d8:f8: 66:0c:7e:51:41:48:ca:b0:de:cc:d2:f5:5d:0c:91: a1:00:04:d6:41:b6:dd:b5:78:93:88:51:2c:11:27: 86:43:dd:a0:1f:24:7e:7e:b4:64:05:61:0e:8d:d8: d6:e9:f2:8f:46:3e:d1:7f:7c:79:38:22:e1:be:bf: 6e:db:2d:41:d8:68:b5:08:71:6a:ad:8a:1d:cc:55: b1:39:bb:53:0b:8c:29:cd:1a:5d:24:ef:8d:28:7d: 30:04:35:4b:f8:32:bd:f8:01:ca:12:17:55:03:d8: 4f:c3:8f:1e:b1:0a:d0:e7:c3:37:3f:e6:e8:e2:fe: 42:b1:fa:b8:d7:af:4c:7e:71:34:0e:08:34:27:f4: 17:a0:44:75:09:00:11:36:b1:da:3f:83:e6:7d:6d: f4:fa:a7:8b:eb:7e:81:59:d7:78:8d:53:da:79:7b: e1:ce:0d:9e:db:0d:7a:ac:66:31:44:38:d4:76:8a: 6f:ef:48:2d:36:50:7c:74:68:cd:4b:0d:ea:35:5f: 9c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:44:D0:77:39:22:26:2C:CF:51:5B:7E:13:39:EA:28:A6:67:20:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/cdc3dc94-43c0-3e5e-90f4-4911c299c73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:4a:82:13:9c:16:4c:83:3b:9c:57:64:95:92:5d:b8:0a:13: 1e:da:6f:f6:d0:5c:88:01:01:0f:4e:76:39:96:9a:af:a0:a2: 6f:a8:5b:39:57:9d:cd:b7:8d:7b:0a:b1:ee:58:99:86:12:09: b4:4d:c2:fc:e6:a5:c7:b9:56:a8:b3:b4:0e:d1:e4:4c:82:a9: 3f:0e:8e:e7:e2:11:00:84:a5:02:cc:7c:18:71:98:f8:a5:37: 0e:65:d3:b7:25:4d:2a:92:12:90:c2:e9:2d:f0:19:64:72:ca: 70:61:63:87:61:63:e0:e7:a1:84:dd:22:54:4f:12:bd:ce:ba: 2b:33:22:21:70:dc:cf:44:55:f6:91:e5:af:92:10:f1:45:a6: bf:c3:b6:32:04:1a:78:6a:16:b9:78:f9:72:dc:b7:18:9c:c2: 47:70:79:e3:9e:3f:12:00:e7:42:29:b3:8e:c0:bb:3f:84:b8: e3:11:a5:27:36:a2:44:83:ae:81:ad:d7:2f:e4:5d:ed:fb:7e: bb:15:21:8b:0f:5c:5f:93:53:7b:38:9f:9a:12:17:10:dd:34: 1e:89:00:ea:2c:25:80:e1:14:c1:b8:95:85:ad:66:fd:dc:b1: 67:e5:22:b1:a3:a7:1a:d4:ff:5f:6e:a8:b1:23:08:8c:28:e2: 5b:39:6b:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvALTFFXafil0ZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc0N1oXDTI1MDcyMzExMTc0N1owLzEtMCsGA1UEAxMk NGJlOTgxMGEtYWEyMy00MThjLTkzZDgtZTI4N2U2YjcxMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyxG3OEqVctm7YdhgSeJhqU1YdSZs3VNl0NY opOniQf7ZQykQzkDTl0xB4CbIlhmn08ov8WXxJ/q2PhmDH5RQUjKsN7M0vVdDJGh AATWQbbdtXiTiFEsESeGQ92gHyR+frRkBWEOjdjW6fKPRj7Rf3x5OCLhvr9u2y1B 2Gi1CHFqrYodzFWxObtTC4wpzRpdJO+NKH0wBDVL+DK9+AHKEhdVA9hPw48esQrQ 58M3P+bo4v5Csfq4169MfnE0Dgg0J/QXoER1CQARNrHaP4PmfW30+qeL636BWdd4 jVPaeXvhzg2e2w16rGYxRDjUdopv70gtNlB8dGjNSw3qNV+c8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdE0Hc5IiYsz1FbfhM56iimZyDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2RjM2RjOTQtNDNjMC0z ZTVlLTkwZjQtNDkxMWMyOTljNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpKghOcFkyDO5xXZJWSXbgKEx7ab/bQXIgBAQ9OdjmWmq+gom+oWzlX nc23jXsKse5YmYYSCbRNwvzmpce5VqiztA7R5EyCqT8OjufiEQCEpQLMfBhxmPil Nw5l07clTSqSEpDC6S3wGWRyynBhY4dhY+DnoYTdIlRPEr3OuiszIiFw3M9EVfaR 5a+SEPFFpr/DtjIEGnhqFrl4+XLctxicwkdweeOePxIA50Ips47Auz+EuOMRpSc2 okSDroGt1y/kXe37frsVIYsPXF+TU3s4n5oSFxDdNB6JAOosJYDhFMG4lYWtZv3c sWflIrGjpxrU/19uqLEjCIwo4ls5a18= -----END CERTIFICATE-----Generated at Sat May 10 06:29:45 2025 by rpki-client