$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa File: 34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa (raw, json) Hash identifier: kUj252JDVXw6ckErjsCZuTcU/xYZmq4JwGTZNXIdVPM= Subject key identifier: F3:C0:33:DC:46:18:F5:E2:32:EC:80:5A:1C:53:4E:14:48:2B:B0:BE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285848ED3E6B0EF90AC2AC3B0B8300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa Signing time: Tue 18 Feb 2025 19:39:14 +0000 ROA not before: Tue 18 Feb 2025 19:39:14 +0000 ROA not after: Mon 19 May 2025 18:39:14 +0000 asID: 393246 IP address blocks: 199.115.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:3e:6b:0e:f9:0a:c2:ac:3b:0b:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Feb 18 19:39:14 2025 GMT Not After : May 19 18:39:14 2025 GMT Subject: CN=e300d352-c9f7-4909-84e7-4816957ac18f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d3:01:94:df:49:1d:cd:bf:d3:d3:14:1c:16: 80:f7:f5:54:8d:e1:cd:96:14:fa:fc:24:94:0f:9e: bc:c2:87:17:e7:1a:e1:39:7a:00:5a:cb:99:f9:a9: 0f:d6:d5:f6:18:53:79:89:40:4e:04:79:82:0f:b6: 60:46:c4:62:73:e7:5a:ae:05:72:8b:f6:e1:6e:bb: b9:d0:a4:5b:da:5d:d4:32:ca:47:f3:9c:6f:bc:0f: 0f:73:8f:01:ca:9e:d4:d6:fb:0b:88:08:ac:c9:7f: 91:f2:ba:8a:a8:fe:70:c7:ee:0a:eb:01:db:37:2f: af:9c:e3:2b:e7:93:88:9f:74:64:7a:3d:27:e5:1b: 9b:42:bf:c6:5f:0e:71:53:f1:37:5e:5c:c3:58:93: 9e:cc:bc:52:c6:bd:84:8e:7f:b1:e6:ce:4d:20:ff: 16:50:69:9c:ef:8a:a9:17:55:b2:2c:e8:01:dc:61: a6:6c:6b:50:98:d1:39:ab:c0:3a:71:61:4e:5d:67: 11:f4:e6:88:c8:8f:b0:96:9d:06:af:e8:f9:32:3d: a1:76:a6:88:3e:03:fb:1b:eb:ab:b3:25:db:38:18: 5d:4b:a1:2c:99:ab:03:c3:cf:e4:7b:e3:c5:7b:1a: ba:0f:05:76:59:37:ca:da:27:54:c7:be:1c:51:b7: 79:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C0:33:DC:46:18:F5:E2:32:EC:80:5A:1C:53:4E:14:48:2B:B0:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/34c2fbcf-37b5-3983-8e82-5b7b3343f0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:32:9e:7c:c7:51:f3:24:38:d7:3b:60:ce:c3:40:de:f4:2d: 90:23:a4:54:11:67:b2:20:09:52:a8:52:c2:d5:64:cf:7a:61: 08:0f:9c:a5:a3:5d:f7:ea:f1:85:72:21:c4:20:bb:d7:ba:c4: 07:67:88:2e:88:4d:ce:46:d0:ff:82:47:aa:68:15:1b:c4:de: 39:f6:aa:5d:48:d0:67:d0:aa:c0:35:a9:9d:8f:8d:f7:1b:0b: ea:62:87:7b:2a:5e:73:1a:ed:8e:b9:fa:de:9e:7f:20:87:4e: 34:63:af:ca:27:b9:97:aa:c1:39:9b:46:01:7a:c7:30:1d:ab: 77:df:09:6b:7d:1a:62:d6:87:17:79:c5:ad:3c:fc:e2:71:c8: 82:9e:3c:a3:36:ba:56:bd:1b:bf:c4:f8:6d:49:39:c5:59:35: 3f:d2:fe:11:b3:97:c1:b8:88:8d:ed:4a:dc:24:26:f2:54:44: fd:e8:fb:9f:78:6a:a4:ae:d1:45:e6:3e:63:42:7f:5b:0a:53: 63:b7:7b:15:44:64:13:bd:87:46:2c:ae:1d:a7:07:ee:9c:7b: 61:0b:e1:e3:ed:90:1c:c3:c7:2c:e8:86:7e:16:52:5f:dd:73: a2:40:a9:5a:d7:64:9f:bb:99:55:55:1e:23:20:9a:75:a2:99: 0b:d1:bd:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjtPmsO+QrCrDsLgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDIxODE5MzkxNFoXDTI1MDUxOTE4MzkxNFowLzEtMCsGA1UEAxMk ZTMwMGQzNTItYzlmNy00OTA5LTg0ZTctNDgxNjk1N2FjMThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNMBlN9JHc2/09MUHBaA9/VUjeHNlhT6/CSU D568wocX5xrhOXoAWsuZ+akP1tX2GFN5iUBOBHmCD7ZgRsRic+dargVyi/bhbru5 0KRb2l3UMspH85xvvA8Pc48Byp7U1vsLiAisyX+R8rqKqP5wx+4K6wHbNy+vnOMr 55OIn3Rkej0n5RubQr/GXw5xU/E3XlzDWJOezLxSxr2Ejn+x5s5NIP8WUGmc74qp F1WyLOgB3GGmbGtQmNE5q8A6cWFOXWcR9OaIyI+wlp0Gr+j5Mj2hdqaIPgP7G+ur syXbOBhdS6EsmasDw8/ke+PFexq6DwV2WTfK2idUx74cUbd5CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPAM9xGGPXiMuyAWhxTThRIK7C+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzRjMmZiY2YtMzdiNS0z OTgzLThlODItNWI3YjMzNDNmMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMynnzHUfMkONc7YM7DQN70LZAjpFQRZ7IgCVKoUsLVZM96YQgPnKWj Xffq8YVyIcQgu9e6xAdniC6ITc5G0P+CR6poFRvE3jn2ql1I0GfQqsA1qZ2Pjfcb C+pih3sqXnMa7Y65+t6efyCHTjRjr8onuZeqwTmbRgF6xzAdq3ffCWt9GmLWhxd5 xa08/OJxyIKePKM2ula9G7/E+G1JOcVZNT/S/hGzl8G4iI3tStwkJvJURP3o+594 aqSu0UXmPmNCf1sKU2O3exVEZBO9h0Ysrh2nB+6ce2EL4ePtkBzDxyzohn4WUl/d c6JAqVrXZJ+7mVVVHiMgmnWimQvRveQ= -----END CERTIFICATE-----Generated at Fri Mar 14 21:15:38 2025 by rpki-client