$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa File: ea5646e1-1195-382d-8eec-de8a18c25b3c.roa (raw, json) Hash identifier: rX9lHuzNelL558CefYFQlUrLlAeVHeQV10IRb9dlzMc= Subject key identifier: CD:37:DC:96:B3:06:EC:54:FF:6C:D1:D3:17:5F:F2:99:7A:94:5F:E9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BBC517B915B3C3946B7F43 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa Signing time: Thu 24 Apr 2025 11:17:18 +0000 ROA not before: Thu 24 Apr 2025 11:17:18 +0000 ROA not after: Wed 23 Jul 2025 11:17:18 +0000 asID: 12041 IP address blocks: 199.182.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:c5:17:b9:15:b3:c3:94:6b:7f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:17:18 2025 GMT Not After : Jul 23 11:17:18 2025 GMT Subject: CN=87cfe3e1-6f30-4310-a620-af39cca4ca6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:71:cc:fb:43:95:56:25:85:9d:df:51:ab: bf:36:c8:58:00:de:10:74:9b:67:f0:1f:a8:89:45: 17:18:2a:04:db:e0:2c:0e:11:96:d1:d5:aa:ff:60: 08:88:c8:39:c1:ef:cc:16:bc:3e:aa:be:f8:76:42: 26:4e:13:2f:a2:06:f3:34:81:ae:9a:a2:60:0d:bd: fb:fa:76:d6:8f:d7:2e:95:d7:c7:01:c0:ce:75:e3: 76:ce:57:2b:33:ab:84:6a:15:d2:dd:57:4c:cd:7e: f3:78:12:1e:83:36:9e:ce:3d:36:fe:1f:6b:4e:62: 0b:7e:60:64:2c:1b:55:2e:7f:44:fe:20:2b:8b:5c: cd:20:ae:fa:63:98:86:17:c7:7b:23:ca:09:c4:65: 4d:7f:60:a4:09:b8:74:93:b1:16:2e:21:be:fb:2e: 87:87:33:26:77:2d:a8:f9:a5:b7:02:8b:ff:27:0c: 3f:87:96:42:44:37:f6:00:30:e2:d8:d4:92:ab:93: 41:3b:12:c6:7f:06:44:f8:e9:07:76:89:ba:90:82: da:04:5c:6b:51:5b:77:9c:48:87:95:df:70:ce:4c: c5:f4:d6:67:d8:95:23:f4:3e:4c:2f:74:25:f1:6c: 03:3d:b2:43:c5:53:36:fb:f3:3a:1e:ea:cb:f9:72: 2d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:37:DC:96:B3:06:EC:54:FF:6C:D1:D3:17:5F:F2:99:7A:94:5F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ea5646e1-1195-382d-8eec-de8a18c25b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:18:32:33:60:8e:82:4c:ee:d7:21:63:f1:0a:68:ee:d1:9b: 7c:d6:81:b4:15:b6:32:29:da:26:8f:b4:c7:f7:9a:59:6a:52: 86:61:92:3a:a9:d6:e2:6a:54:0d:c8:b2:69:af:62:47:8f:d4: 08:78:95:a7:4c:a5:d2:18:bf:fe:bf:a0:76:3d:db:e9:24:3f: fe:b4:99:a0:f2:e7:39:27:cb:81:c1:7b:4a:a0:47:13:1a:7d: d2:bf:7d:3e:5a:ff:73:d2:89:55:2b:8e:86:89:6e:71:6a:cd: c4:9b:30:48:5e:ed:80:a7:01:19:d3:2c:bc:d8:fb:d6:d8:33: f7:cf:da:b1:15:6f:7b:61:3a:5c:95:5c:fc:c7:98:c7:33:bb: 00:36:67:7f:a2:95:cb:e7:77:63:f6:d5:30:4d:90:6a:13:67: ae:5a:f4:7f:04:58:53:7b:61:e4:28:e7:64:96:8f:a5:e5:29: 46:b5:dc:8d:a9:cd:87:93:59:da:3e:c9:46:a2:eb:09:fe:2c: 1b:00:83:91:7d:6a:be:92:ef:e3:33:72:3b:a4:bb:86:7e:16: 32:84:51:06:e6:8d:ea:19:65:2b:d1:a2:97:68:37:7e:bc:44: bb:e5:c9:2f:74:a0:51:60:26:fe:d6:ff:66:5e:db:41:11:6f: fe:04:20:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu8UXuRWzw5Rrf0MwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTcxOFoXDTI1MDcyMzExMTcxOFowLzEtMCsGA1UEAxMk ODdjZmUzZTEtNmYzMC00MzEwLWE2MjAtYWYzOWNjYTRjYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKtxzPtDlVYlhZ3fUau/NshYAN4QdJtn8B+o iUUXGCoE2+AsDhGW0dWq/2AIiMg5we/MFrw+qr74dkImThMvogbzNIGumqJgDb37 +nbWj9culdfHAcDOdeN2zlcrM6uEahXS3VdMzX7zeBIegzaezj02/h9rTmILfmBk LBtVLn9E/iAri1zNIK76Y5iGF8d7I8oJxGVNf2CkCbh0k7EWLiG++y6HhzMmdy2o +aW3Aov/Jww/h5ZCRDf2ADDi2NSSq5NBOxLGfwZE+OkHdom6kILaBFxrUVt3nEiH ld9wzkzF9NZn2JUj9D5ML3Ql8WwDPbJDxVM2+/M6HurL+XItlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM033JazBuxU/2zR0xdf8pl6lF/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWE1NjQ2ZTEtMTE5NS0z ODJkLThlZWMtZGU4YTE4YzI1YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwYMjNgjoJM7tchY/EKaO7Rm3zWgbQVtjIp2iaPtMf3mllqUoZhkjqp 1uJqVA3IsmmvYkeP1Ah4ladMpdIYv/6/oHY92+kkP/60maDy5zkny4HBe0qgRxMa fdK/fT5a/3PSiVUrjoaJbnFqzcSbMEhe7YCnARnTLLzY+9bYM/fP2rEVb3thOlyV XPzHmMczuwA2Z3+ilcvnd2P21TBNkGoTZ65a9H8EWFN7YeQo52SWj6XlKUa13I2p zYeTWdo+yUai6wn+LBsAg5F9ar6S7+Mzcjuku4Z+FjKEUQbmjeoZZSvRopdoN368 RLvlyS90oFFgJv7W/2Ze20ERb/4EILw= -----END CERTIFICATE-----Generated at Sat May 10 03:55:08 2025 by rpki-client