$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1ddfede4-0f39-3628-83db-dba85ef2b030.roa File: 1ddfede4-0f39-3628-83db-dba85ef2b030.roa (raw, json) Hash identifier: MWIz3EIv3r2RNZe5sFyyDIZP6tqvV8ANp3MYDPcjEUw= Subject key identifier: 47:BC:52:80:85:19:9B:E9:64:FD:7E:FD:7F:0F:A1:3D:B5:B7:77:A0 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D242AE518B643ACE009C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1ddfede4-0f39-3628-83db-dba85ef2b030.roa Signing time: Thu 06 Mar 2025 13:19:59 +0000 ROA not before: Thu 06 Mar 2025 13:19:59 +0000 ROA not after: Wed 04 Jun 2025 12:19:59 +0000 asID: 207266 IP address blocks: 199.249.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:24:2a:e5:18:b6:43:ac:e0:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:59 2025 GMT Not After : Jun 4 12:19:59 2025 GMT Subject: CN=1fbdaa77-f151-4f3c-b8fe-0d10acf05699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:47:17:0b:84:00:6d:98:8c:31:a6:b2:56: 29:75:bc:e6:91:46:51:18:be:9c:c4:85:c4:df:05: 03:0d:ba:02:d1:f9:00:bf:10:b0:64:39:8f:74:2b: 1e:47:2f:94:df:fe:0e:db:c4:cf:df:ac:eb:ea:21: 23:cc:11:8d:f4:b6:f0:da:b9:d5:3e:9f:23:ca:1b: 7f:8c:59:83:4a:d1:92:1d:8f:aa:65:ef:2a:a3:3e: e3:33:6d:20:d6:4c:39:ff:6d:ac:8e:37:79:5b:b2: c2:09:01:28:fa:c7:f0:ad:b9:2b:16:9d:eb:63:d9: cb:58:0c:4f:0c:54:0a:47:f8:e0:57:f7:64:97:37: 3d:a4:dc:c5:3d:64:e0:2d:cf:d8:be:c8:68:df:52: 5a:ed:a8:87:93:e9:39:c2:69:db:82:70:a0:88:f0: 1f:8e:88:c5:5a:80:cd:12:55:ef:0e:e5:3d:79:65: f1:a0:80:33:1e:2c:c2:66:14:e7:92:8c:12:5f:d3: 65:4c:f6:94:3c:1f:9d:ef:ff:7f:79:6e:3a:81:64: 96:59:94:1c:04:63:0e:d6:e7:a0:e9:a7:57:d7:c7: b2:90:a0:55:3b:48:f2:b5:14:26:5f:92:60:a1:0f: 1c:4d:73:bf:02:75:25:88:30:8c:ab:96:fc:56:7f: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BC:52:80:85:19:9B:E9:64:FD:7E:FD:7F:0F:A1:3D:B5:B7:77:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1ddfede4-0f39-3628-83db-dba85ef2b030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:95:83:63:33:29:6d:84:e5:f7:bc:0c:32:10:0b:30:f1:37: 18:e9:31:0b:0a:0d:b0:3a:f5:57:fe:af:c2:6d:b6:93:34:8b: 36:0d:c6:0e:3b:85:94:09:33:45:6c:80:b3:ac:20:af:16:26: 45:00:6c:d4:98:17:71:74:55:90:13:ee:63:5a:23:02:09:3f: 41:fd:6e:87:30:83:a9:67:2c:72:96:fb:4f:73:ca:7b:30:70: d6:c1:2f:d3:44:13:5c:d1:28:03:68:69:b7:8a:ca:6b:b5:09: 22:ae:b0:d6:d0:39:24:c3:15:93:77:8d:19:cd:0e:ed:12:85: 81:c8:99:e2:93:8b:c0:f4:07:66:12:b6:87:89:8f:76:89:65: 24:3d:64:3a:b5:8a:35:37:55:43:e5:40:a4:ff:42:90:e3:e8: 56:f0:d5:c0:33:b6:47:70:b6:81:03:2e:c5:55:31:13:54:7f: ff:96:04:5b:ed:3f:e4:4b:67:2a:5a:0d:2a:b6:64:de:a8:47: 39:b8:af:34:35:c9:39:4c:11:e4:a1:29:3a:29:e1:b6:d0:bd: cd:0f:dc:50:0a:21:96:80:ba:4f:32:d0:5c:00:91:6b:f1:d0: ec:29:1a:fd:19:aa:a3:ba:b9:93:1d:04:28:d1:9e:b7:45:9d: ac:66:08:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLSQq5Ri2Q6zgCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1OVoXDTI1MDYwNDEyMTk1OVowLzEtMCsGA1UEAxMk MWZiZGFhNzctZjE1MS00ZjNjLWI4ZmUtMGQxMGFjZjA1Njk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz9HFwuEAG2YjDGmslYpdbzmkUZRGL6cxIXE 3wUDDboC0fkAvxCwZDmPdCseRy+U3/4O28TP36zr6iEjzBGN9Lbw2rnVPp8jyht/ jFmDStGSHY+qZe8qoz7jM20g1kw5/22sjjd5W7LCCQEo+sfwrbkrFp3rY9nLWAxP DFQKR/jgV/dklzc9pNzFPWTgLc/Yvsho31Ja7aiHk+k5wmnbgnCgiPAfjojFWoDN ElXvDuU9eWXxoIAzHizCZhTnkowSX9NlTPaUPB+d7/9/eW46gWSWWZQcBGMO1ueg 6adX18eykKBVO0jytRQmX5JgoQ8cTXO/AnUliDCMq5b8Vn/dCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe8UoCFGZvpZP1+/X8PoT21t3egMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWRkZmVkZTQtMGYzOS0z NjI4LTgzZGItZGJhODVlZjJiMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6Vg2MzKW2E5fe8DDIQCzDxNxjpMQsKDbA69Vf+r8JttpM0izYNxg47 hZQJM0VsgLOsIK8WJkUAbNSYF3F0VZAT7mNaIwIJP0H9bocwg6lnLHKW+09zynsw cNbBL9NEE1zRKANoabeKymu1CSKusNbQOSTDFZN3jRnNDu0ShYHImeKTi8D0B2YS toeJj3aJZSQ9ZDq1ijU3VUPlQKT/QpDj6Fbw1cAztkdwtoEDLsVVMRNUf/+WBFvt P+RLZypaDSq2ZN6oRzm4rzQ1yTlMEeShKTop4bbQvc0P3FAKIZaAuk8y0FwAkWvx 0OwpGv0ZqqO6uZMdBCjRnrdFnaxmCC8= -----END CERTIFICATE-----Generated at Sat Mar 15 06:20:01 2025 by rpki-client