$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa File: f25e2b6a-11b7-35e3-a462-57f557c7d879.roa (raw, json) Hash identifier: 5mDMbgCnUWc/miCzYR8MLv7dN8n/3UWBV949WMqcElE= Subject key identifier: FA:77:96:B3:01:EA:A2:6E:A9:68:88:A3:55:A0:43:C2:68:2F:52:B1 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BC2BAE60B10BA9FFE32100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa Signing time: Thu 24 Apr 2025 11:18:07 +0000 ROA not before: Thu 24 Apr 2025 11:18:07 +0000 ROA not after: Wed 23 Jul 2025 11:18:07 +0000 asID: 12041 IP address blocks: 199.254.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bc:2b:ae:60:b1:0b:a9:ff:e3:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:18:07 2025 GMT Not After : Jul 23 11:18:07 2025 GMT Subject: CN=5e7715eb-c640-4fcb-ba21-78c0824bc9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:92:09:a8:b5:75:27:f9:db:cb:be:89:03: 81:3f:29:2d:51:09:dd:3c:cd:80:c6:a0:14:93:14: be:a5:cb:a6:4c:ac:71:0f:62:7f:e7:49:5b:99:a2: cc:25:e1:ae:43:d3:f9:59:bd:0a:00:c5:18:f9:5a: 86:4b:49:2c:4b:7d:38:1c:3d:c2:ef:d1:bc:0d:b3: ac:52:6f:9a:6c:b3:61:8f:58:9d:ad:e0:96:2d:3b: ab:06:13:e8:cd:92:e3:15:a1:7c:71:38:50:cd:0e: c6:28:12:d2:a4:e7:95:68:02:ef:1f:d4:23:dd:b9: b1:78:91:12:03:79:04:63:fb:dc:35:1c:3c:3f:72: ca:20:a1:4a:5f:cf:e6:dd:42:81:43:03:0d:e1:bf: d9:76:ca:34:af:96:db:47:a2:42:b4:9a:ca:6b:b4: a6:7f:2c:1c:81:34:03:19:3b:3f:82:a8:73:78:c2: b4:0c:86:55:7f:a3:2f:3a:c0:e4:eb:c0:d6:90:48: df:7b:d8:88:41:dd:d4:a9:71:a3:2c:27:fa:0a:15: 55:65:70:97:34:78:14:50:88:48:d4:58:e9:8e:6c: ad:69:4a:5b:3a:8d:ca:e0:74:57:c2:56:e2:82:f7: 23:fb:16:49:1d:d0:fd:95:19:ef:ef:4b:f1:7e:39: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:77:96:B3:01:EA:A2:6E:A9:68:88:A3:55:A0:43:C2:68:2F:52:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f25e2b6a-11b7-35e3-a462-57f557c7d879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ca:57:51:5e:b5:29:50:72:08:9f:cf:a3:7a:51:e2:97:9c: df:0d:69:bf:f3:ba:9c:a4:f3:79:40:92:1f:3f:9d:86:a2:fc: 9c:a6:3a:3d:5a:0e:06:c0:27:6c:6b:e2:af:14:86:d9:60:40: 26:10:28:c7:2f:31:34:d2:ff:5f:07:a4:bf:96:19:47:7e:a8: 57:ba:21:c0:d6:9c:43:2e:6a:84:cb:4a:68:24:75:12:0a:b2: 20:45:dc:0e:f3:fd:93:fa:8f:6c:2a:07:3f:00:43:10:88:37: 34:28:f2:1b:f6:a8:ba:b4:cf:a9:8c:4b:fe:40:d6:7d:68:3a: f7:3e:c7:d7:36:be:90:1c:4b:ab:f0:d4:6b:fd:3d:c0:b3:69: 7a:95:82:9f:2a:1e:c1:be:72:7e:b0:7e:82:8e:8f:2e:62:bb: 3a:a2:f0:6a:20:a0:db:c2:40:e9:18:e4:0f:16:e8:b3:ee:e6: 4a:bf:cb:b4:a8:d3:bf:53:88:37:04:0e:cc:9f:13:13:7f:dc: 3b:2b:fe:ac:94:d6:b7:69:4f:b7:56:70:3e:ad:16:f2:ee:f3: 30:87:df:97:d0:47:45:95:ca:35:80:94:81:fb:da:be:fc:63: e4:1a:d3:0b:7d:5f:e0:f9:12:39:ec:f8:c6:de:37:2b:07:24: 5c:bd:8e:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhvCuuYLELqf/jIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTgwN1oXDTI1MDcyMzExMTgwN1owLzEtMCsGA1UEAxMk NWU3NzE1ZWItYzY0MC00ZmNiLWJhMjEtNzhjMDgyNGJjOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9ySCai1dSf528u+iQOBPyktUQndPM2AxqAU kxS+pcumTKxxD2J/50lbmaLMJeGuQ9P5Wb0KAMUY+VqGS0ksS304HD3C79G8DbOs Um+abLNhj1idreCWLTurBhPozZLjFaF8cThQzQ7GKBLSpOeVaALvH9Qj3bmxeJES A3kEY/vcNRw8P3LKIKFKX8/m3UKBQwMN4b/Zdso0r5bbR6JCtJrKa7SmfywcgTQD GTs/gqhzeMK0DIZVf6MvOsDk68DWkEjfe9iIQd3UqXGjLCf6ChVVZXCXNHgUUIhI 1FjpjmytaUpbOo3K4HRXwlbigvcj+xZJHdD9lRnv70vxfjkCPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPp3lrMB6qJuqWiIo1WgQ8JoL1KxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZjI1ZTJiNmEtMTFiNy0z NWUzLWE0NjItNTdmNTU3YzdkODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvKV1FetSlQcgifz6N6UeKXnN8Nab/zupyk83lAkh8/nYai/JymOj1a DgbAJ2xr4q8UhtlgQCYQKMcvMTTS/18HpL+WGUd+qFe6IcDWnEMuaoTLSmgkdRIK siBF3A7z/ZP6j2wqBz8AQxCINzQo8hv2qLq0z6mMS/5A1n1oOvc+x9c2vpAcS6vw 1Gv9PcCzaXqVgp8qHsG+cn6wfoKOjy5iuzqi8GogoNvCQOkY5A8W6LPu5kq/y7So 079TiDcEDsyfExN/3Dsr/qyU1rdpT7dWcD6tFvLu8zCH35fQR0WVyjWAlIH72r78 Y+Qa0wt9X+D5Ejns+MbeNysHJFy9jsI= -----END CERTIFICATE-----Generated at Fri May 9 12:38:28 2025 by rpki-client