$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8a6ef096-11f9-3f0f-8486-5bebb32fb082.roa File: 8a6ef096-11f9-3f0f-8486-5bebb32fb082.roa (raw, json) Hash identifier: /6rJQ9/zon+ZdiqF5G30zUtusyEbKr84MPMAKaB8+DM= Subject key identifier: DE:CF:80:F1:F8:3C:34:5F:37:71:57:AD:8B:0B:2A:02:A9:78:2C:31 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D224A94D9CCC72C7B24C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8a6ef096-11f9-3f0f-8486-5bebb32fb082.roa Signing time: Thu 06 Mar 2025 13:19:58 +0000 ROA not before: Thu 06 Mar 2025 13:19:58 +0000 ROA not after: Wed 04 Jun 2025 12:19:58 +0000 asID: 207266 IP address blocks: 199.115.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:22:4a:94:d9:cc:c7:2c:7b:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:19:58 2025 GMT Not After : Jun 4 12:19:58 2025 GMT Subject: CN=bd4a164d-93fd-40e0-bb07-25fdc04faea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ab:65:1c:d2:d3:bc:bc:39:2c:48:a1:a2:dc: e4:76:db:d5:ce:fd:92:53:f3:22:6d:51:64:ff:cf: 3e:ba:ab:d5:fa:d6:25:ab:94:80:db:e3:ac:ee:57: 42:97:2b:39:c5:61:31:9d:21:68:1f:91:9f:01:a2: 5a:ad:1e:c5:60:44:a9:56:47:c0:a3:d9:8b:c6:7d: 24:1b:05:c3:fd:56:c5:cb:2d:15:fb:bf:a8:86:dc: e0:21:1b:2e:7c:3e:39:26:10:58:83:f1:6a:3b:d5: a0:84:48:da:c3:37:9a:45:ab:f1:c1:cc:da:27:06: c6:21:99:e4:10:9e:7b:12:db:bb:04:48:88:13:a6: 56:7d:b4:42:69:07:5a:c5:11:84:79:b0:2e:2b:76: 20:98:6f:8e:e7:43:47:e9:ef:4b:67:4e:37:0d:7d: 9c:d8:a4:37:e5:9a:3f:21:e9:d0:32:82:b2:48:12: d7:71:c3:1e:e9:8f:28:12:93:72:3f:cc:10:51:ec: 91:ad:0b:3d:71:12:fb:48:e5:97:58:c8:f8:a4:22: c9:45:4a:1a:a2:56:f6:c0:1d:93:7d:31:37:f0:1e: 65:33:24:c2:8c:d2:d3:9d:ec:4a:38:10:68:d0:7d: ec:1a:e3:61:fc:2f:81:f7:36:21:ea:7f:80:65:39: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CF:80:F1:F8:3C:34:5F:37:71:57:AD:8B:0B:2A:02:A9:78:2C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8a6ef096-11f9-3f0f-8486-5bebb32fb082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:6e:4c:94:a9:30:08:e5:06:0c:cd:f5:2c:70:79:19:71:a7: 4a:97:b5:c1:45:61:d8:3d:9d:9d:60:bd:d9:94:c1:c7:5f:40: d5:43:72:09:bc:49:30:9f:0c:15:0a:fd:e0:52:76:59:84:49: 92:22:cc:f7:21:3c:56:9b:56:b4:85:71:db:c5:67:f8:11:7c: e2:65:0f:5a:b1:2b:c2:6c:ff:fc:71:7a:8e:ab:39:68:9b:b6: 1b:b4:b4:b0:e3:ea:dc:22:10:14:5a:50:49:19:6c:40:ab:2e: da:f6:53:6f:c4:17:5f:68:75:4c:f5:e3:85:24:8f:f4:15:eb: b1:b0:4c:09:9c:f9:e0:5a:2c:05:57:0b:da:17:d7:02:c6:9e: 55:10:c0:92:1a:8d:b3:96:a1:0d:2c:96:f7:64:d7:89:f5:5b: fc:7f:48:c3:09:16:2d:e6:a8:54:35:d3:02:61:d8:aa:fa:00: 41:7c:2b:f6:6f:86:9d:7b:14:4b:14:25:a5:91:8e:10:ff:dd: db:a4:2a:50:57:05:04:13:8e:ce:b1:aa:e6:33:73:04:0f:83: a3:6b:b5:83:62:db:64:f9:3b:59:60:c4:b2:39:36:b4:b6:c1: 0e:66:72:18:2f:10:63:0c:63:6f:40:fc:72:00:09:7e:b7:45: 3c:2e:61:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLSJKlNnMxyx7JMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMTk1OFoXDTI1MDYwNDEyMTk1OFowLzEtMCsGA1UEAxMk YmQ0YTE2NGQtOTNmZC00MGUwLWJiMDctMjVmZGMwNGZhZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6tlHNLTvLw5LEihotzkdtvVzv2SU/MibVFk /88+uqvV+tYlq5SA2+Os7ldClys5xWExnSFoH5GfAaJarR7FYESpVkfAo9mLxn0k GwXD/VbFyy0V+7+ohtzgIRsufD45JhBYg/FqO9WghEjawzeaRavxwczaJwbGIZnk EJ57Etu7BEiIE6ZWfbRCaQdaxRGEebAuK3YgmG+O50NH6e9LZ043DX2c2KQ35Zo/ IenQMoKySBLXccMe6Y8oEpNyP8wQUeyRrQs9cRL7SOWXWMj4pCLJRUoaolb2wB2T fTE38B5lMyTCjNLTnexKOBBo0H3sGuNh/C+B9zYh6n+AZTnXGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7PgPH4PDRfN3FXrYsLKgKpeCwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGE2ZWYwOTYtMTFmOS0z ZjBmLTg0ODYtNWJlYmIzMmZiMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRuTJSpMAjlBgzN9SxweRlxp0qXtcFFYdg9nZ1gvdmUwcdfQNVDcgm8 STCfDBUK/eBSdlmESZIizPchPFabVrSFcdvFZ/gRfOJlD1qxK8Js//xxeo6rOWib thu0tLDj6twiEBRaUEkZbECrLtr2U2/EF19odUz144Ukj/QV67GwTAmc+eBaLAVX C9oX1wLGnlUQwJIajbOWoQ0slvdk14n1W/x/SMMJFi3mqFQ10wJh2Kr6AEF8K/Zv hp17FEsUJaWRjhD/3dukKlBXBQQTjs6xquYzcwQPg6NrtYNi22T5O1lgxLI5NrS2 wQ5mchgvEGMMY29A/HIACX63RTwuYf0= -----END CERTIFICATE-----Generated at Sat Mar 15 06:13:44 2025 by rpki-client