$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa File: ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa (raw, json) Hash identifier: gb9BUZpgZjfG2zjEaaTwCAMEUFRSGDdJvXSdb2pbfYM= Subject key identifier: 2C:9C:40:7D:B4:C1:3B:FF:C7:85:90:B4:F8:F6:57:18:ED:C8:16:DB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBAA82C63159F42F61FB00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa Signing time: Thu 24 Apr 2025 11:17:06 +0000 ROA not before: Thu 24 Apr 2025 11:17:06 +0000 ROA not after: Wed 23 Jul 2025 11:17:06 +0000 asID: 12041 IP address blocks: 199.182.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:aa:82:c6:31:59:f4:2f:61:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:06 2025 GMT Not After : Jul 23 11:17:06 2025 GMT Subject: CN=bc9e4a81-fe6c-4f25-a745-8449dcfeafe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:3f:83:a6:20:5d:3e:a1:09:ef:90:ce:18: 48:b9:15:ac:dd:30:a8:01:d9:00:b3:bf:b4:b1:df: 4a:60:51:9f:1e:6e:46:8c:9e:64:4c:43:0d:e8:1b: 86:67:f7:48:79:2a:29:ae:b4:82:d1:3d:6d:d3:5c: 12:6f:5e:1f:9d:35:69:78:57:b1:a7:a5:91:9c:c1: 34:d5:cd:1f:2d:a6:6d:d0:cb:03:94:71:7c:cc:b1: 93:ad:95:d8:ca:81:a5:60:92:c1:b7:51:6e:11:a5: 8b:2e:01:ca:d5:a4:82:f8:cb:03:c7:37:f7:a5:2d: d8:e0:1a:4a:28:b2:0d:4f:8f:21:28:b6:c2:a7:19: a7:40:81:9a:ce:6a:22:3a:2d:27:33:00:6e:35:b8: b7:3b:86:13:b8:96:67:eb:d4:01:31:19:ce:53:5f: 7c:eb:b2:d5:9d:b6:c1:92:1b:30:69:3d:9f:bb:fc: 29:d5:41:a6:f3:1b:5e:fa:3d:e6:84:e2:06:08:0b: f9:2a:41:6f:05:d6:1f:04:12:46:93:0c:91:67:8e: de:fd:19:86:d0:72:b5:0c:ea:44:cb:ab:68:83:fa: da:ab:2c:09:fa:1d:6b:50:53:ce:ab:bc:49:fb:da: e3:b2:a2:01:6d:6e:fc:44:c1:85:c3:23:19:d5:42: 46:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9C:40:7D:B4:C1:3B:FF:C7:85:90:B4:F8:F6:57:18:ED:C8:16:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ded73657-b5bc-30ea-b7c1-e85a5edb9a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:5d:38:85:58:4f:59:4a:04:e3:73:88:0b:50:fd:a5:44:24: 4b:01:69:26:ee:2a:dc:08:98:08:fc:49:3f:87:a0:5b:92:15: 72:fa:18:19:7e:47:5a:8d:05:bc:06:23:7b:c7:45:7c:d8:33: e1:2c:e3:8f:b9:23:2f:cc:ce:fa:50:de:ea:03:fb:da:f6:60: db:40:87:90:b2:36:82:c9:19:c0:a1:70:90:74:88:32:bb:24: 79:6e:43:7f:0c:a2:8c:79:81:13:50:5b:01:cd:46:eb:59:4b: 1f:7e:95:ce:da:30:22:38:08:16:c3:a5:b7:3f:01:84:da:df: b1:b2:e9:fc:ce:04:74:0d:e5:b4:46:31:f4:9a:4e:11:42:39: 5d:7e:2b:0e:6d:a1:23:4b:6c:12:8d:4f:0e:87:2e:9b:de:9f: c2:b5:41:f4:6a:ec:51:de:90:02:57:d9:54:93:49:d4:1c:2c: a0:c8:c2:a6:93:f5:11:6b:92:da:6c:1b:18:55:23:69:87:10: aa:48:0e:7a:b2:b2:5a:00:53:1f:32:dd:64:3c:45:7d:69:d2: e4:61:9b:2d:cd:84:9b:52:a4:17:18:1c:63:32:cb:bd:a0:32: c1:d5:60:c0:39:3b:0f:ae:bb:48:2d:83:82:21:77:25:2a:91: 08:40:1f:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu6qCxjFZ9C9h+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcwNloXDTI1MDcyMzExMTcwNlowLzEtMCsGA1UEAxMk YmM5ZTRhODEtZmU2Yy00ZjI1LWE3NDUtODQ0OWRjZmVhZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz8/g6YgXT6hCe+QzhhIuRWs3TCoAdkAs7+0 sd9KYFGfHm5GjJ5kTEMN6BuGZ/dIeSoprrSC0T1t01wSb14fnTVpeFexp6WRnME0 1c0fLaZt0MsDlHF8zLGTrZXYyoGlYJLBt1FuEaWLLgHK1aSC+MsDxzf3pS3Y4BpK KLINT48hKLbCpxmnQIGazmoiOi0nMwBuNbi3O4YTuJZn69QBMRnOU19867LVnbbB khswaT2fu/wp1UGm8xte+j3mhOIGCAv5KkFvBdYfBBJGkwyRZ47e/RmG0HK1DOpE y6tog/raqywJ+h1rUFPOq7xJ+9rjsqIBbW78RMGFwyMZ1UJGOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCycQH20wTv/x4WQtPj2VxjtyBbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGVkNzM2NTctYjViYy0z MGVhLWI3YzEtZTg1YTVlZGI5YTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1dOIVYT1lKBONziAtQ/aVEJEsBaSbuKtwImAj8ST+HoFuSFXL6GBl+ R1qNBbwGI3vHRXzYM+Es44+5Iy/MzvpQ3uoD+9r2YNtAh5CyNoLJGcChcJB0iDK7 JHluQ38Moox5gRNQWwHNRutZSx9+lc7aMCI4CBbDpbc/AYTa37Gy6fzOBHQN5bRG MfSaThFCOV1+Kw5toSNLbBKNTw6HLpven8K1QfRq7FHekAJX2VSTSdQcLKDIwqaT 9RFrktpsGxhVI2mHEKpIDnqysloAUx8y3WQ8RX1p0uRhmy3NhJtSpBcYHGMyy72g MsHVYMA5Ow+uu0gtg4IhdyUqkQhAHz8= -----END CERTIFICATE-----Generated at Sat May 10 05:09:15 2025 by rpki-client