$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a6328ddd-3d5a-34d0-af93-231c9c4cf9a4.roa File: a6328ddd-3d5a-34d0-af93-231c9c4cf9a4.roa (raw, json) Hash identifier: nzL4GR9NRVyFXhhqScBfDHP3vXvcTQ2uM7LgRhlLdEI= Subject key identifier: 69:52:2F:4C:A8:85:48:A5:7D:2B:0F:01:42:43:F4:CA:A4:E6:B4:E3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D25FC91D46CC165E98F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a6328ddd-3d5a-34d0-af93-231c9c4cf9a4.roa Signing time: Thu 06 Mar 2025 13:20:00 +0000 ROA not before: Thu 06 Mar 2025 13:20:00 +0000 ROA not after: Wed 04 Jun 2025 12:20:00 +0000 asID: 207266 IP address blocks: 199.249.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:25:fc:91:d4:6c:c1:65:e9:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:20:00 2025 GMT Not After : Jun 4 12:20:00 2025 GMT Subject: CN=35329961-3643-4a74-b92e-5e8303fdc30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:50:8e:82:1f:96:4e:3f:ae:e7:cb:d3:ad:2f: 92:ae:ee:0a:57:27:84:ba:09:0f:14:9e:c8:27:fc: bd:be:46:80:90:58:13:dc:82:ac:53:f7:be:b2:85: 95:f2:ac:c5:82:43:c0:ca:96:12:9b:b8:91:75:62: 3c:d3:74:b0:c8:53:65:59:7e:62:f8:d9:f2:c2:b9: 60:55:d3:69:62:f8:cf:b5:bc:60:a6:cb:d6:2a:c5: f7:89:5c:75:1a:ee:34:bc:53:70:7c:0d:57:e2:24: 67:a0:90:20:4a:ec:79:b2:2a:ed:2a:5a:4a:d1:a4: db:8c:46:64:92:d5:1e:11:d6:a4:34:d1:bf:06:4d: ca:6c:20:54:79:35:2a:36:11:31:24:7a:e8:11:f7: a8:e2:4f:b6:d0:39:49:e1:a5:95:57:ae:69:cb:49: f2:7c:3f:6b:42:0e:ae:d8:2f:83:52:52:ef:13:9c: 16:af:07:5f:79:a2:60:ad:47:b7:15:4c:ad:97:4a: 8f:fd:da:a8:76:04:7f:45:58:6f:e0:df:ba:44:45: 5b:e0:89:a2:de:07:77:27:07:67:a7:22:2b:03:06: 19:7a:ed:a4:ad:12:a3:5d:37:bb:7b:78:5f:19:5a: b5:69:91:bc:8d:87:3b:7f:d4:fa:39:11:ce:4a:32: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:52:2F:4C:A8:85:48:A5:7D:2B:0F:01:42:43:F4:CA:A4:E6:B4:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a6328ddd-3d5a-34d0-af93-231c9c4cf9a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a0:be:67:6b:04:01:2b:09:51:2d:a3:d1:31:ae:1c:52:1d: f9:cd:e2:17:c3:a8:b7:2e:0e:c0:aa:34:19:c1:b0:f3:53:41: ba:8a:04:03:2a:c4:10:50:f4:cd:58:28:51:1d:95:97:e5:14: 3a:3a:cb:36:7b:16:eb:86:8c:4a:99:cd:be:f9:cd:cf:25:c8: 20:ea:82:ec:ae:44:4f:b0:3c:12:e3:d5:45:6f:93:72:b9:58: 34:e8:07:3d:c1:07:70:7b:03:88:bd:44:32:1f:53:05:3c:41: cf:a7:08:a9:0a:7b:55:2d:7c:58:b9:a1:2a:af:61:75:20:5d: d6:a4:0f:d9:5c:be:94:21:67:2b:30:df:de:3a:3b:54:c6:ab: dc:a6:59:2f:22:b5:d8:e6:d8:1e:36:4b:82:71:05:07:43:8d: 6d:fa:d9:31:0b:8d:2f:e7:6e:bd:99:28:90:7c:8c:a8:c4:06: 52:f4:43:49:2e:86:1a:e9:92:f3:55:d1:be:ad:5d:11:94:91: 8a:c1:9d:a2:65:42:95:3f:19:f2:34:10:3c:f8:84:eb:2e:c1: 08:65:b6:dc:61:00:18:02:34:19:66:e3:2e:58:27:d4:8f:20: ae:dd:34:dc:27:bd:25:57:a4:92:b3:6f:1e:ac:99:d2:c6:16: 7a:71:11:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLSX8kdRswWXpj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMjAwMFoXDTI1MDYwNDEyMjAwMFowLzEtMCsGA1UEAxMk MzUzMjk5NjEtMzY0My00YTc0LWI5MmUtNWU4MzAzZmRjMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lCOgh+WTj+u58vTrS+Sru4KVyeEugkPFJ7I J/y9vkaAkFgT3IKsU/e+soWV8qzFgkPAypYSm7iRdWI803SwyFNlWX5i+Nnywrlg VdNpYvjPtbxgpsvWKsX3iVx1Gu40vFNwfA1X4iRnoJAgSux5sirtKlpK0aTbjEZk ktUeEdakNNG/Bk3KbCBUeTUqNhExJHroEfeo4k+20DlJ4aWVV65py0nyfD9rQg6u 2C+DUlLvE5wWrwdfeaJgrUe3FUytl0qP/dqodgR/RVhv4N+6REVb4Imi3gd3Jwdn pyIrAwYZeu2krRKjXTe7e3hfGVq1aZG8jYc7f9T6ORHOSjKmcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlSL0yohUilfSsPAUJD9Mqk5rTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTYzMjhkZGQtM2Q1YS0z NGQwLWFmOTMtMjMxYzljNGNmOWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGygvmdrBAErCVEto9ExrhxSHfnN4hfDqLcuDsCqNBnBsPNTQbqKBAMq xBBQ9M1YKFEdlZflFDo6yzZ7FuuGjEqZzb75zc8lyCDqguyuRE+wPBLj1UVvk3K5 WDToBz3BB3B7A4i9RDIfUwU8Qc+nCKkKe1UtfFi5oSqvYXUgXdakD9lcvpQhZysw 3946O1TGq9ymWS8itdjm2B42S4JxBQdDjW362TELjS/nbr2ZKJB8jKjEBlL0Q0ku hhrpkvNV0b6tXRGUkYrBnaJlQpU/GfI0EDz4hOsuwQhlttxhABgCNBlm4y5YJ9SP IK7dNNwnvSVXpJKzbx6smdLGFnpxEfU= -----END CERTIFICATE-----Generated at Sat Mar 15 06:13:44 2025 by rpki-client