$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7a255adc-c4bc-3fa7-8709-34ab6c39a57d.roa File: 7a255adc-c4bc-3fa7-8709-34ab6c39a57d.roa (raw, json) Hash identifier: dkslzQXUnephS72YncP7mDryySKWBruCTaoBx6fS/o8= Subject key identifier: 55:43:1A:EC:55:D4:CB:02:F2:62:83:5D:69:07:92:7E:43:74:5E:97 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D28200FEC58E2284E7E60 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7a255adc-c4bc-3fa7-8709-34ab6c39a57d.roa Signing time: Thu 06 Mar 2025 13:20:01 +0000 ROA not before: Thu 06 Mar 2025 13:20:01 +0000 ROA not after: Wed 04 Jun 2025 12:20:01 +0000 asID: 207266 IP address blocks: 199.249.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:28:20:0f:ec:58:e2:28:4e:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:20:01 2025 GMT Not After : Jun 4 12:20:01 2025 GMT Subject: CN=783a1e2f-7a2e-4fbd-9da4-84278261b01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2b:7e:54:da:8c:ef:63:84:b3:d9:98:55:4b: 20:b8:93:ef:0e:e8:70:f2:b3:04:39:c6:d6:bd:4f: 7e:ef:04:50:18:e6:57:13:cc:cf:7d:8f:60:d2:16: 0a:31:4c:e4:f1:9c:51:63:76:4c:fb:9e:fd:ab:dd: 40:60:b7:d9:71:de:58:56:a9:25:aa:91:69:e7:3e: b1:4e:c0:1c:be:6b:2c:8e:4e:b1:71:df:09:6d:f6: 78:d1:23:6d:81:a5:fa:b1:fe:a1:86:31:a6:de:92: fa:c5:19:ce:a1:3d:14:32:c7:fa:f0:65:67:75:f0: 4d:2c:a1:79:63:2e:ca:18:a8:4d:ef:7f:73:83:1e: 1d:24:8d:1e:f3:3d:87:dc:83:cc:79:38:4a:22:cf: 51:b0:43:6b:8d:3d:15:ec:f0:f6:fd:32:87:87:82: 48:12:59:a3:91:37:1a:67:a2:f6:30:59:65:3a:66: a6:3d:3d:01:2d:cb:78:b3:65:7b:4b:6e:20:dc:51: 2a:05:dc:9e:97:53:7b:73:60:fa:3e:8d:a6:59:95: 6b:be:55:d5:b6:72:11:d3:39:63:7b:f4:ef:c9:7b: 1e:1c:ea:09:e8:3e:de:1c:5e:22:de:16:a1:17:29: e9:f8:ff:b5:9f:eb:1f:88:f4:2b:2d:63:97:8c:d5: f0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:43:1A:EC:55:D4:CB:02:F2:62:83:5D:69:07:92:7E:43:74:5E:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/7a255adc-c4bc-3fa7-8709-34ab6c39a57d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:dc:98:ce:69:52:1b:13:27:5f:af:3f:46:73:35:1e:38:bc: 0f:dd:19:fe:4a:70:ab:6c:65:eb:fd:7b:4d:9b:ed:08:2e:00: 0e:56:62:b9:6a:9c:ad:cc:48:b3:fe:fc:57:0d:e4:93:54:e8: ba:2b:f1:48:8d:a7:5b:d5:be:be:a8:3d:dc:b5:ec:ea:44:64: 08:a4:a6:7d:f5:f7:83:23:ac:d4:c9:c4:32:79:58:1c:6c:af: 37:41:04:98:9a:0f:7c:cf:32:01:bb:4f:c5:f9:16:fa:fd:f6: 76:b1:60:34:10:d8:35:80:cb:99:6e:2c:53:49:58:e3:27:47: b8:c7:64:e6:92:98:95:49:59:d5:e9:c8:30:6c:d2:9d:a1:4f: b7:b6:51:66:0e:96:08:06:b0:e2:2f:ac:06:21:2c:4e:52:d1: 67:6e:cc:72:d2:f5:d0:50:cc:08:a3:6b:47:08:69:1c:c0:c0: 82:5a:d9:a3:e6:d7:3d:bc:d9:0b:41:60:d1:66:37:9b:27:6d: bb:b9:16:ca:a2:7a:be:0d:69:5a:d8:92:e3:7f:5c:ea:39:a5: 04:13:5f:9a:44:56:33:cf:79:dc:64:06:c5:06:50:cc:df:94: d7:5f:41:ce:4d:da:75:4c:13:16:29:8f:a8:68:fa:ed:60:a4: d9:bb:13:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLSggD+xY4ihOfmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMjAwMVoXDTI1MDYwNDEyMjAwMVowLzEtMCsGA1UEAxMk NzgzYTFlMmYtN2EyZS00ZmJkLTlkYTQtODQyNzgyNjFiMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyt+VNqM72OEs9mYVUsguJPvDuhw8rMEOcbW vU9+7wRQGOZXE8zPfY9g0hYKMUzk8ZxRY3ZM+579q91AYLfZcd5YVqklqpFp5z6x TsAcvmssjk6xcd8JbfZ40SNtgaX6sf6hhjGm3pL6xRnOoT0UMsf68GVndfBNLKF5 Yy7KGKhN739zgx4dJI0e8z2H3IPMeThKIs9RsENrjT0V7PD2/TKHh4JIElmjkTca Z6L2MFllOmamPT0BLct4s2V7S24g3FEqBdyel1N7c2D6Po2mWZVrvlXVtnIR0zlj e/TvyXseHOoJ6D7eHF4i3hahFynp+P+1n+sfiPQrLWOXjNXwOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVDGuxV1MsC8mKDXWkHkn5DdF6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvN2EyNTVhZGMtYzRiYy0z ZmE3LTg3MDktMzRhYjZjMzlhNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3cmM5pUhsTJ1+vP0ZzNR44vA/dGf5KcKtsZev9e02b7QguAA5WYrlq nK3MSLP+/FcN5JNU6Lor8UiNp1vVvr6oPdy17OpEZAikpn3194MjrNTJxDJ5WBxs rzdBBJiaD3zPMgG7T8X5Fvr99naxYDQQ2DWAy5luLFNJWOMnR7jHZOaSmJVJWdXp yDBs0p2hT7e2UWYOlggGsOIvrAYhLE5S0WduzHLS9dBQzAija0cIaRzAwIJa2aPm 1z282QtBYNFmN5snbbu5Fsqier4NaVrYkuN/XOo5pQQTX5pEVjPPedxkBsUGUMzf lNdfQc5N2nVMExYpj6ho+u1gpNm7E0M= -----END CERTIFICATE-----Generated at Sat Mar 15 06:08:49 2025 by rpki-client