$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d92d618-4695-31ec-8d42-9e5914753604.roa File: 0d92d618-4695-31ec-8d42-9e5914753604.roa (raw, json) Hash identifier: WGIaqWPrfX1TITn7skcsFEyafZYI3P3ElIkxATpL6U0= Subject key identifier: 23:08:83:0B:FD:F2:61:C1:96:A5:7C:F7:F7:36:A0:34:D3:41:D6:29 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D259EC9245C5D76EEFB80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d92d618-4695-31ec-8d42-9e5914753604.roa Signing time: Thu 06 Mar 2025 13:20:00 +0000 ROA not before: Thu 06 Mar 2025 13:20:00 +0000 ROA not after: Wed 04 Jun 2025 12:20:00 +0000 asID: 207266 IP address blocks: 199.249.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:25:9e:c9:24:5c:5d:76:ee:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:20:00 2025 GMT Not After : Jun 4 12:20:00 2025 GMT Subject: CN=edff9d05-b540-4c6d-b87f-4c46a22a743b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:05:45:04:61:d3:6e:fc:83:2d:3b:26:8b: 8d:d4:0b:f2:59:e9:59:d2:18:de:d8:8a:9f:9f:05: 8a:4d:ef:46:83:6b:1d:40:0f:ee:86:ce:25:00:be: 55:af:89:d8:83:4d:19:be:00:03:59:2c:1c:6f:68: 76:ac:36:09:7f:42:22:01:50:ff:91:15:87:fa:a2: b7:53:72:96:fc:ee:60:d7:1c:a2:37:4b:be:47:3f: 73:e6:5f:61:e0:40:78:61:61:af:1f:df:37:e6:1c: 44:8f:be:9b:63:b7:ef:87:45:24:38:ec:47:ec:a7: 76:6d:9b:d4:ee:c4:7c:1f:06:50:a5:23:ab:b3:e2: 90:36:6f:7c:26:a1:08:34:14:f4:64:58:ab:1a:db: 35:33:1f:ce:12:b5:45:e0:1a:40:c8:c0:c7:5f:6c: a8:68:b3:94:e4:71:94:07:68:7f:5c:18:71:3a:15: ca:4d:28:7c:30:08:93:43:82:e7:38:79:55:5c:c9: c7:51:09:d7:9a:00:bd:22:2f:e9:43:45:4b:f5:73: 44:6b:e9:27:f2:e4:ed:52:49:73:be:6a:a6:9b:ae: 8f:c4:d6:e2:f4:cc:34:ee:91:83:38:66:df:49:66: 60:02:90:c9:b1:8b:8a:f2:9b:ac:b8:60:26:8a:dd: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:08:83:0B:FD:F2:61:C1:96:A5:7C:F7:F7:36:A0:34:D3:41:D6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0d92d618-4695-31ec-8d42-9e5914753604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:51:94:2e:97:be:96:f3:e0:fc:30:ad:1c:c3:60:c7:4a:2f: 1d:9a:c4:a7:72:1e:55:3c:bd:76:dd:72:5b:7b:ce:0f:7b:60: 42:b9:1f:53:ab:5d:5c:ac:d5:48:38:32:94:84:c3:54:4f:5d: a6:36:96:19:4a:09:d7:96:b6:6b:5e:01:19:71:02:fa:8e:2d: d7:23:63:54:0b:11:04:c0:a2:b2:20:bd:d6:cd:c2:b0:0b:71: b0:b1:49:f7:17:b6:39:41:c7:68:27:52:5e:21:45:e4:1a:d6: f7:d8:11:43:ab:7f:4b:de:00:29:f1:40:d9:49:1a:f7:aa:fb: 24:e8:e9:e8:b3:6d:ab:ab:96:5f:48:ee:3d:59:3c:c5:94:8f: 86:ee:04:8c:af:dd:26:73:3d:a9:38:14:f2:35:1c:e8:b6:52: d6:2d:dc:05:c2:48:3b:2c:8a:c9:73:03:bb:0f:6d:3a:bc:cd: 95:9d:3f:a8:59:37:34:c3:a6:e2:03:35:7e:d7:db:e5:f6:2f: 20:e6:ae:b4:37:bb:7d:1e:81:e4:c6:b5:74:b5:09:79:1a:8a: 60:21:47:c5:29:59:55:a6:b3:ba:62:aa:fd:05:9d:7e:21:d1: 57:ee:30:b2:d2:58:25:f0:55:4c:c4:79:36:5f:86:e9:21:12: 35:50:72:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLSWeySRcXXbu+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMjAwMFoXDTI1MDYwNDEyMjAwMFowLzEtMCsGA1UEAxMk ZWRmZjlkMDUtYjU0MC00YzZkLWI4N2YtNGM0NmEyMmE3NDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr00FRQRh0278gy07JouN1AvyWelZ0hje2Iqf nwWKTe9Gg2sdQA/uhs4lAL5Vr4nYg00ZvgADWSwcb2h2rDYJf0IiAVD/kRWH+qK3 U3KW/O5g1xyiN0u+Rz9z5l9h4EB4YWGvH9835hxEj76bY7fvh0UkOOxH7Kd2bZvU 7sR8HwZQpSOrs+KQNm98JqEINBT0ZFirGts1Mx/OErVF4BpAyMDHX2yoaLOU5HGU B2h/XBhxOhXKTSh8MAiTQ4LnOHlVXMnHUQnXmgC9Ii/pQ0VL9XNEa+kn8uTtUklz vmqmm66PxNbi9Mw07pGDOGbfSWZgApDJsYuK8pusuGAmit17+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMIgwv98mHBlqV89/c2oDTTQdYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMGQ5MmQ2MTgtNDY5NS0z MWVjLThkNDItOWU1OTE0NzUzNjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJRlC6Xvpbz4PwwrRzDYMdKLx2axKdyHlU8vXbdclt7zg97YEK5H1Or XVys1Ug4MpSEw1RPXaY2lhlKCdeWtmteARlxAvqOLdcjY1QLEQTAorIgvdbNwrAL cbCxSfcXtjlBx2gnUl4hReQa1vfYEUOrf0veACnxQNlJGveq+yTo6eizbaurll9I 7j1ZPMWUj4buBIyv3SZzPak4FPI1HOi2UtYt3AXCSDssislzA7sPbTq8zZWdP6hZ NzTDpuIDNX7X2+X2LyDmrrQ3u30egeTGtXS1CXkaimAhR8UpWVWms7piqv0FnX4h 0VfuMLLSWCXwVUzEeTZfhukhEjVQcng= -----END CERTIFICATE-----Generated at Sat Mar 15 06:20:01 2025 by rpki-client