$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/718af13e-a931-33d1-82d3-4991b7f36dea.roa File: 718af13e-a931-33d1-82d3-4991b7f36dea.roa (raw, json) Hash identifier: mN5XDlW/Kg2eIihXCNS/LSdOCfZL3m5RvHcHYXVxD2k= Subject key identifier: 6F:5C:DB:C7:6D:B1:50:ED:CC:F6:1E:4A:CC:AD:B3:CB:B7:A0:67:CE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F432858489BDCD75D967D7DEFD2ED4540 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/718af13e-a931-33d1-82d3-4991b7f36dea.roa Signing time: Mon 20 Jan 2025 16:02:09 +0000 ROA not before: Mon 20 Jan 2025 16:02:09 +0000 ROA not after: Sun 20 Apr 2025 15:02:09 +0000 asID: 198260 IP address blocks: 199.10.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:dc:d7:5d:96:7d:7d:ef:d2:ed:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jan 20 16:02:09 2025 GMT Not After : Apr 20 15:02:09 2025 GMT Subject: CN=a6245420-c105-46a2-b63a-09c367f1462e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:86:bc:64:0b:1f:a8:d4:31:99:1f:d5:21:63: 9e:cb:b3:e0:94:2b:e9:6b:84:4a:34:ec:b8:e8:05: db:bf:03:cd:66:fb:65:3a:68:b2:97:af:bf:87:f5: d4:89:b7:20:84:21:40:01:29:be:b9:9f:34:2e:6b: c7:a2:f4:3e:06:00:02:48:c3:ec:4d:17:f7:5c:a8: 26:ce:fd:cb:7f:95:20:40:3b:d6:66:98:8a:eb:74: f6:46:27:13:b8:8c:5c:0f:e9:94:66:e8:c1:70:8f: 76:ca:ec:3b:51:f0:0c:62:38:a7:98:61:ca:d4:64: b6:bc:97:e7:c1:6c:d2:2f:3e:48:3b:18:92:a7:a1: ad:f5:a3:9e:30:94:d9:81:d4:9f:fb:75:ab:e4:21: bf:6a:5b:9d:b1:e4:db:77:66:2b:5e:3d:5a:c3:e4: 6e:5d:72:3f:c3:ef:1d:c6:b3:34:70:c8:97:3e:77: 24:81:f6:25:08:ed:14:49:74:ad:48:f2:6a:f2:c5: 7c:cd:fd:8c:01:f5:59:33:58:3d:85:e8:03:7a:26: 2e:2f:d6:8e:39:83:47:e5:40:bd:83:d2:c1:ec:f3: 17:03:38:15:cf:26:b5:10:2d:4a:e3:f5:81:53:31: 33:81:f6:19:79:f5:f6:6f:6a:4e:3c:da:54:d5:4a: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5C:DB:C7:6D:B1:50:ED:CC:F6:1E:4A:CC:AD:B3:CB:B7:A0:67:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/718af13e-a931-33d1-82d3-4991b7f36dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.10.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c4:75:aa:38:45:60:d4:8e:11:df:10:e9:72:1b:bc:e1:75: cb:e3:4f:c8:05:98:a6:5d:30:91:bf:e6:97:bd:7a:82:76:a2: df:18:09:06:fe:b8:b6:3c:8d:17:dd:e2:72:7f:43:ea:b9:43: 6a:9b:88:8f:3c:b4:8e:bb:1c:cf:71:ce:df:39:22:4c:4b:f4: e3:46:d4:be:7d:e4:11:33:37:5a:b0:9c:61:0a:ea:e9:60:e2: 84:de:fb:66:4e:45:d4:99:1a:81:32:2a:f4:fd:30:af:fb:6a: 86:b7:c6:3b:e6:46:6f:62:c8:30:0c:70:bd:9e:8a:f9:ff:68: 09:bf:c5:7c:d7:f7:d5:44:88:80:31:c1:a6:12:48:55:d6:a4: db:33:c1:85:d0:0d:47:1a:29:78:36:b6:d9:2d:2e:1d:ac:12: 9e:6e:29:44:d2:e8:ff:17:c9:9a:60:1e:4a:43:a6:39:7b:5d: 2c:0d:62:2f:76:c6:ff:27:35:df:06:28:bd:2b:03:95:56:22: 22:55:f4:09:02:9a:7a:30:d2:10:6e:6f:ad:61:8e:b2:0d:1b: 86:67:5f:e4:c5:20:c2:a5:b2:b4:48:4c:cf:9b:49:75:e4:d0: cb:8a:40:02:b3:36:18:5a:4b:85:cb:09:4b:7b:8e:3c:54:24: 11:ad:75:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEib3Nddln1979LtRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDEyMDE2MDIwOVoXDTI1MDQyMDE1MDIwOVowLzEtMCsGA1UEAxMk YTYyNDU0MjAtYzEwNS00NmEyLWI2M2EtMDljMzY3ZjE0NjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIa8ZAsfqNQxmR/VIWOey7PglCvpa4RKNOy4 6AXbvwPNZvtlOmiyl6+/h/XUibcghCFAASm+uZ80LmvHovQ+BgACSMPsTRf3XKgm zv3Lf5UgQDvWZpiK63T2RicTuIxcD+mUZujBcI92yuw7UfAMYjinmGHK1GS2vJfn wWzSLz5IOxiSp6Gt9aOeMJTZgdSf+3Wr5CG/aludseTbd2YrXj1aw+RuXXI/w+8d xrM0cMiXPnckgfYlCO0USXStSPJq8sV8zf2MAfVZM1g9hegDeiYuL9aOOYNH5UC9 g9LB7PMXAzgVzya1EC1K4/WBUzEzgfYZefX2b2pOPNpU1UrTNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9c28dtsVDtzPYeSsyts8u3oGfOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzE4YWYxM2UtYTkzMS0z M2QxLTgyZDMtNDk5MWI3ZjM2ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXEdao4RWDUjhHfEOlyG7zhdcvjT8gFmKZdMJG/5pe9eoJ2ot8YCQb+ uLY8jRfd4nJ/Q+q5Q2qbiI88tI67HM9xzt85IkxL9ONG1L595BEzN1qwnGEK6ulg 4oTe+2ZORdSZGoEyKvT9MK/7aoa3xjvmRm9iyDAMcL2eivn/aAm/xXzX99VEiIAx waYSSFXWpNszwYXQDUcaKXg2ttktLh2sEp5uKUTS6P8XyZpgHkpDpjl7XSwNYi92 xv8nNd8GKL0rA5VWIiJV9AkCmnow0hBub61hjrING4ZnX+TFIMKlsrRITM+bSXXk 0MuKQAKzNhhaS4XLCUt7jjxUJBGtdUA= -----END CERTIFICATE-----Generated at Sat Mar 15 06:08:49 2025 by rpki-client