$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31692578-c7db-3791-b336-6a0a47744baf.roa File: 31692578-c7db-3791-b336-6a0a47744baf.roa (raw, json) Hash identifier: 4Jk2a969mVpUo0Ms0/HlXrbFgt+UL4yIO0Si9eXrn0g= Subject key identifier: 37:ED:F2:B1:18:A2:EA:66:49:32:DE:F0:90:4A:BF:6B:F5:04:B1:45 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D24867CA7C130E27A09A0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31692578-c7db-3791-b336-6a0a47744baf.roa Signing time: Thu 06 Mar 2025 13:19:59 +0000 ROA not before: Thu 06 Mar 2025 13:19:59 +0000 ROA not after: Wed 04 Jun 2025 12:19:59 +0000 asID: 207266 IP address blocks: 199.249.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:24:86:7c:a7:c1:30:e2:7a:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:59 2025 GMT Not After : Jun 4 12:19:59 2025 GMT Subject: CN=d9de3c1e-4315-43c0-95c1-449d4ff7619b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4a:63:79:0b:4c:2e:c8:04:df:49:68:d1:fa: a4:0d:14:c5:2a:5b:7a:5e:fa:b8:a9:d7:92:74:fe: 5d:e2:f6:90:9e:85:5b:8d:ec:90:ce:db:59:7c:e1: eb:86:cf:cd:ac:0b:28:3f:16:df:8b:40:63:56:c6: ac:58:74:e4:bc:67:a4:f7:f9:af:76:63:23:d8:cd: 13:04:9e:ea:a3:b1:ea:e6:5f:96:d3:63:df:e1:5a: 42:d6:07:b7:b0:ec:58:32:a8:1f:c3:c8:50:a0:da: 5a:91:62:a0:e9:cc:1b:83:87:55:de:55:5e:b8:56: ce:b6:3e:e9:4e:a1:80:26:38:b8:fd:2e:d0:71:9c: 7e:e9:21:f2:91:1b:55:8e:1a:01:b6:6b:2b:50:19: a1:67:f7:11:80:87:e5:0d:15:d5:be:5f:2e:c0:41: 4d:c6:f7:34:7c:9c:27:a7:06:67:bc:cd:6e:46:1e: 5a:72:44:2d:aa:38:52:53:d9:b1:f3:a9:10:dd:8e: 2b:f4:64:2d:07:45:6c:75:10:cd:a3:36:6c:e3:a6: 99:44:38:ce:07:85:ce:dd:36:bd:f1:ad:75:cd:82: 9c:c9:93:7a:95:37:38:20:9a:eb:ca:f2:2d:5c:d9: 14:20:dd:f3:47:45:0a:37:ad:43:7d:ca:b2:ea:8c: 29:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:ED:F2:B1:18:A2:EA:66:49:32:DE:F0:90:4A:BF:6B:F5:04:B1:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/31692578-c7db-3791-b336-6a0a47744baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f5:17:d9:eb:f4:5b:de:1b:70:2e:38:c5:73:0a:05:2b:94: 3c:7e:a6:32:d7:6e:0a:f7:d2:90:a0:f3:e8:00:d6:af:9c:04: 55:5e:20:e1:97:fd:a8:b3:b8:8c:e4:fc:3d:92:78:80:4c:dc: c5:ad:f9:39:da:1d:00:a5:74:e8:f5:1f:ab:61:1f:56:54:cc: 67:7a:0f:da:c6:81:86:84:12:ff:11:9d:d7:56:07:fe:6f:33: c4:90:00:bb:84:d5:8c:27:6f:3e:4d:14:38:fd:da:e3:dd:4f: a5:d0:e5:d0:bd:66:39:4b:f6:fc:70:f8:b8:af:1d:e7:c5:6b: da:23:f4:98:2b:2d:01:0d:3b:46:fb:96:af:27:7c:3d:d6:25: 4d:0c:69:0a:73:bc:4e:2b:a0:d1:38:51:42:44:d8:90:59:e2: 64:f2:61:8f:64:73:44:80:82:d1:d4:f1:17:55:97:c3:a7:d7: d3:ca:9b:b7:6c:2a:84:28:f5:37:36:7d:29:81:d7:bc:69:d7: 47:36:f7:50:10:6a:3c:e9:ca:8e:a9:59:8a:ad:8c:30:aa:a3: 11:51:c2:b5:26:7e:c6:c9:de:f0:33:84:59:d4:b4:c5:41:59: a8:e1:37:fd:c2:94:5e:42:24:c3:db:d6:89:05:d6:87:ec:64: a6:66:47:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLSSGfKfBMOJ6CaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1OVoXDTI1MDYwNDEyMTk1OVowLzEtMCsGA1UEAxMk ZDlkZTNjMWUtNDMxNS00M2MwLTk1YzEtNDQ5ZDRmZjc2MTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkpjeQtMLsgE30lo0fqkDRTFKlt6Xvq4qdeS dP5d4vaQnoVbjeyQzttZfOHrhs/NrAsoPxbfi0BjVsasWHTkvGek9/mvdmMj2M0T BJ7qo7Hq5l+W02Pf4VpC1ge3sOxYMqgfw8hQoNpakWKg6cwbg4dV3lVeuFbOtj7p TqGAJji4/S7QcZx+6SHykRtVjhoBtmsrUBmhZ/cRgIflDRXVvl8uwEFNxvc0fJwn pwZnvM1uRh5ackQtqjhSU9mx86kQ3Y4r9GQtB0VsdRDNozZs46aZRDjOB4XO3Ta9 8a11zYKcyZN6lTc4IJrryvItXNkUIN3zR0UKN61Dfcqy6owpWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDft8rEYoupmSTLe8JBKv2v1BLFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzE2OTI1NzgtYzdkYi0z NzkxLWIzMzYtNmEwYTQ3NzQ0YmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/lyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT1F9nr9FveG3AuOMVzCgUrlDx+pjLXbgr30pCg8+gA1q+cBFVeIOGX /aizuIzk/D2SeIBM3MWt+TnaHQCldOj1H6thH1ZUzGd6D9rGgYaEEv8RnddWB/5v M8SQALuE1Ywnbz5NFDj92uPdT6XQ5dC9ZjlL9vxw+LivHefFa9oj9JgrLQENO0b7 lq8nfD3WJU0MaQpzvE4roNE4UUJE2JBZ4mTyYY9kc0SAgtHU8RdVl8On19PKm7ds KoQo9Tc2fSmB17xp10c291AQajzpyo6pWYqtjDCqoxFRwrUmfsbJ3vAzhFnUtMVB WajhN/3ClF5CJMPb1okF1ofsZKZmR/k= -----END CERTIFICATE-----Generated at Sat Mar 15 06:08:50 2025 by rpki-client