$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa File: de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa (raw, json) Hash identifier: D9ws68w4UQg/E5qrZEY52UMgKJcPO3IAgaTSEXBb8m0= Subject key identifier: 87:FC:76:0D:CA:3F:9C:17:4A:10:82:4C:D1:43:BF:67:CF:E7:94:6A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBF8228CC9C0A7E98E3EC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa Signing time: Thu 24 Apr 2025 11:17:42 +0000 ROA not before: Thu 24 Apr 2025 11:17:42 +0000 ROA not after: Wed 23 Jul 2025 11:17:42 +0000 asID: 12041 IP address blocks: 199.249.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:f8:22:8c:c9:c0:a7:e9:8e:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:42 2025 GMT Not After : Jul 23 11:17:42 2025 GMT Subject: CN=78f64458-b0ef-4168-b1fd-a4da9b294036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:68:a1:6d:fa:78:a6:ee:31:78:83:42:19:67: 6b:6f:d5:c1:5c:4d:40:3a:f4:c4:7d:15:e3:ea:69: 05:3e:3f:a2:f5:b9:09:32:93:14:f9:cc:46:13:d2: 82:3e:98:80:6d:62:43:f3:87:b2:44:49:4d:8a:c4: 5a:41:c9:d5:b7:a0:71:e8:24:a9:c4:37:40:24:ff: 0d:b1:00:de:f4:fd:82:34:5b:7f:e4:81:3e:6c:c7: 0b:de:b8:2b:60:bc:8b:7c:6d:f5:fa:c5:bf:12:cc: 82:2c:69:5d:70:c8:de:ba:99:12:86:a4:02:f2:cc: 86:f7:43:5d:8d:d4:6e:df:57:ec:38:19:24:f5:46: b2:cd:cd:4f:18:09:71:ba:fa:85:c1:c5:77:c4:66: e8:3d:fd:a8:4f:c8:7d:3e:38:0d:e2:53:96:e6:ed: 30:a6:18:bb:3e:d6:5c:1c:d3:5d:65:b1:db:52:23: 41:f8:50:d5:c4:38:88:b8:94:a9:5d:b1:29:9d:40: 26:4a:7f:a4:b3:3d:20:b7:5a:24:e9:20:62:fa:08: 0a:6c:ef:97:17:32:0b:5e:a8:d5:8d:b5:f6:96:7a: eb:a2:0f:56:9c:bd:cc:6a:5d:f5:06:cc:de:5c:9c: bd:bd:de:e7:6c:c9:44:31:50:5d:1c:72:a3:91:36: 3f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FC:76:0D:CA:3F:9C:17:4A:10:82:4C:D1:43:BF:67:CF:E7:94:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/de7c8731-9ba8-3a9a-bc2e-1cf9b9e0235e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:0b:c9:6d:0f:ef:98:69:a5:f3:8d:a8:17:16:79:dc:74:44: 30:ef:f6:d1:79:b6:d2:ef:e6:9a:3a:7e:ba:4e:25:2c:be:90: a4:80:be:13:27:b2:b4:14:67:bb:0b:9e:63:af:8d:e0:1c:1f: f3:6c:b3:8b:f0:3c:c0:58:d1:e4:07:cc:43:35:02:c6:d8:cb: 46:b0:85:c5:1a:4d:57:1e:1d:ee:12:d4:de:c5:38:0f:e0:79: 1c:d6:e6:19:86:e2:1d:af:d2:75:19:df:0a:3b:2b:3a:f0:6d: 1b:01:0c:b9:66:93:ff:36:b9:1d:50:cc:de:b7:73:2d:a8:86: 00:4a:29:37:5e:c6:2f:57:bd:4a:49:64:53:56:97:2b:c3:89: 35:cb:fb:a2:d1:b1:93:26:e3:ef:63:29:0a:36:3c:a3:28:61: 16:8a:be:da:58:bc:b3:e0:30:cd:4c:86:8c:d9:15:76:d2:96: 51:96:1c:14:96:03:1f:bd:10:50:9e:8a:7f:83:51:fd:c6:00: 6f:2a:53:f5:7c:2f:c4:1f:1f:b1:5b:a0:55:44:e1:4e:27:1e: f8:c0:aa:79:2e:57:f2:9e:0a:c3:db:bc:b9:4c:e9:37:e6:d6: ba:da:1d:ba:78:40:80:57:5a:20:e3:fe:1d:ae:99:ca:fb:fa: 41:e9:c1:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu/gijMnAp+mOPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTc0MloXDTI1MDcyMzExMTc0MlowLzEtMCsGA1UEAxMk NzhmNjQ0NTgtYjBlZi00MTY4LWIxZmQtYTRkYTliMjk0MDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmihbfp4pu4xeINCGWdrb9XBXE1AOvTEfRXj 6mkFPj+i9bkJMpMU+cxGE9KCPpiAbWJD84eyRElNisRaQcnVt6Bx6CSpxDdAJP8N sQDe9P2CNFt/5IE+bMcL3rgrYLyLfG31+sW/EsyCLGldcMjeupkShqQC8syG90Nd jdRu31fsOBkk9Uayzc1PGAlxuvqFwcV3xGboPf2oT8h9PjgN4lOW5u0wphi7PtZc HNNdZbHbUiNB+FDVxDiIuJSpXbEpnUAmSn+ksz0gt1ok6SBi+ggKbO+XFzILXqjV jbX2lnrrog9WnL3Mal31BszeXJy9vd7nbMlEMVBdHHKjkTY/gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf8dg3KP5wXShCCTNFDv2fP55RqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGU3Yzg3MzEtOWJhOC0z YTlhLWJjMmUtMWNmOWI5ZTAyMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABULyW0P75hppfONqBcWedx0RDDv9tF5ttLv5po6frpOJSy+kKSAvhMn srQUZ7sLnmOvjeAcH/Nss4vwPMBY0eQHzEM1AsbYy0awhcUaTVceHe4S1N7FOA/g eRzW5hmG4h2v0nUZ3wo7KzrwbRsBDLlmk/82uR1QzN63cy2ohgBKKTdexi9XvUpJ ZFNWlyvDiTXL+6LRsZMm4+9jKQo2PKMoYRaKvtpYvLPgMM1MhozZFXbSllGWHBSW Ax+9EFCein+DUf3GAG8qU/V8L8QfH7FboFVE4U4nHvjAqnkuV/KeCsPbvLlM6Tfm 1rraHbp4QIBXWiDj/h2umcr7+kHpwVo= -----END CERTIFICATE-----Generated at Fri May 9 06:15:54 2025 by rpki-client