$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b85bf6cf-583e-3e5d-910c-1a6b342d9931.roa File: b85bf6cf-583e-3e5d-910c-1a6b342d9931.roa (raw, json) Hash identifier: F8YxEiKFnaC59JQqQUERDnbe5q32kluXFN52Ck8iwiY= Subject key identifier: BE:76:5E:61:39:C8:04:4B:A3:AB:E3:CC:B2:17:92:CC:BE:73:BA:39 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D27B99A6249AB2DA58D40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b85bf6cf-583e-3e5d-910c-1a6b342d9931.roa Signing time: Thu 06 Mar 2025 13:20:01 +0000 ROA not before: Thu 06 Mar 2025 13:20:01 +0000 ROA not after: Wed 04 Jun 2025 12:20:01 +0000 asID: 207266 IP address blocks: 199.249.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:27:b9:9a:62:49:ab:2d:a5:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:20:01 2025 GMT Not After : Jun 4 12:20:01 2025 GMT Subject: CN=491ded9a-7831-4ea9-a365-4911e18d5756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:88:4e:1c:60:9c:05:bf:bc:2b:91:82:69:34: 34:c0:76:d4:97:0a:c9:e7:31:57:5f:05:dc:6d:e0: 7f:09:22:82:5c:43:80:8f:a5:c8:bf:3e:bc:dd:a4: fa:73:00:f2:bc:7f:cc:1a:5c:ab:b9:ce:a2:ae:16: 5d:bf:c4:3f:22:51:14:53:65:d1:0d:9d:1c:27:7a: 47:7a:14:66:7b:dc:cd:be:05:0a:c4:ff:d5:cd:22: 7d:cd:8d:e3:30:c5:35:69:b0:6d:65:2d:70:32:6c: ff:0a:18:bd:e8:22:41:0e:57:06:5c:9d:92:99:62: 73:4d:15:c5:8c:ca:f5:ce:f6:b2:79:dc:ef:ee:c3: a7:1a:5e:9b:4b:8d:b6:11:98:39:0f:f2:1b:33:f9: c7:e9:23:13:82:3b:2b:b6:d7:5b:22:fa:07:28:0e: 70:3a:4d:64:f0:2a:5e:29:1e:91:b5:15:59:2f:da: 72:b1:db:f2:07:d3:7f:5a:44:ea:fa:01:b1:b4:f9: 80:80:e6:6a:c8:db:fd:58:f0:a6:6d:79:f8:cc:84: 4b:c9:66:8d:02:53:68:b4:f7:02:04:34:aa:a3:2d: c4:08:77:bd:39:97:92:47:48:5a:95:32:fe:5f:ea: 41:73:83:3e:1f:d2:4b:5b:ef:f6:4f:d8:1f:78:a0: 87:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:76:5E:61:39:C8:04:4B:A3:AB:E3:CC:B2:17:92:CC:BE:73:BA:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b85bf6cf-583e-3e5d-910c-1a6b342d9931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:04:c1:13:b6:8e:0b:6e:4b:88:27:10:62:ac:74:7e:d0:89: 43:9d:20:ff:aa:b2:c5:d1:f5:f1:af:bb:d7:89:83:ff:05:9a: c7:d6:3d:a2:18:9c:62:0f:07:03:8c:e8:1c:30:8f:8a:3c:08: 15:10:5d:aa:58:68:97:66:77:7f:95:c4:4f:07:cc:05:63:57: 45:cb:e3:24:6f:ac:e4:e3:cd:5f:da:df:4c:20:01:86:45:d0: 2b:1a:53:e7:72:0c:18:36:b3:b7:96:3c:18:8a:6b:27:8f:0a: c6:b4:1a:17:5c:ee:70:7d:2c:5d:fb:b4:24:45:a0:29:33:1a: 5c:44:9d:22:a1:89:30:ee:00:26:a8:28:c9:2a:9a:06:8a:5a: b8:be:f4:f8:09:5d:5a:9b:e0:9b:70:e6:2a:ea:67:8e:1c:1e: ca:4a:57:e4:d3:8c:4f:1a:21:9c:4c:77:ca:f9:64:46:ec:a8: 7b:9c:f1:4b:05:03:94:8b:d3:c4:b2:94:3d:e6:19:da:1a:0a: 67:06:2a:61:31:bb:80:d4:aa:2f:9a:3a:e9:58:d0:5f:d3:7f: 8f:2a:b4:51:cc:f7:a8:c7:ee:33:a3:3b:e1:4d:c2:78:e7:31: 54:6b:a7:3c:5c:d4:ac:8f:72:59:77:e1:10:98:61:36:ca:3e: 21:e5:7c:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLSe5mmJJqy2ljUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMjAwMVoXDTI1MDYwNDEyMjAwMVowLzEtMCsGA1UEAxMk NDkxZGVkOWEtNzgzMS00ZWE5LWEzNjUtNDkxMWUxOGQ1NzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YhOHGCcBb+8K5GCaTQ0wHbUlwrJ5zFXXwXc beB/CSKCXEOAj6XIvz683aT6cwDyvH/MGlyruc6irhZdv8Q/IlEUU2XRDZ0cJ3pH ehRme9zNvgUKxP/VzSJ9zY3jMMU1abBtZS1wMmz/Chi96CJBDlcGXJ2SmWJzTRXF jMr1zvayedzv7sOnGl6bS422EZg5D/IbM/nH6SMTgjsrttdbIvoHKA5wOk1k8Cpe KR6RtRVZL9pysdvyB9N/WkTq+gGxtPmAgOZqyNv9WPCmbXn4zIRLyWaNAlNotPcC BDSqoy3ECHe9OZeSR0halTL+X+pBc4M+H9JLW+/2T9gfeKCHQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL52XmE5yARLo6vjzLIXksy+c7o5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjg1YmY2Y2YtNTgzZS0z ZTVkLTkxMGMtMWE2YjM0MmQ5OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUEwRO2jgtuS4gnEGKsdH7QiUOdIP+qssXR9fGvu9eJg/8FmsfWPaIY nGIPBwOM6Bwwj4o8CBUQXapYaJdmd3+VxE8HzAVjV0XL4yRvrOTjzV/a30wgAYZF 0CsaU+dyDBg2s7eWPBiKayePCsa0Ghdc7nB9LF37tCRFoCkzGlxEnSKhiTDuACao KMkqmgaKWri+9PgJXVqb4Jtw5irqZ44cHspKV+TTjE8aIZxMd8r5ZEbsqHuc8UsF A5SL08SylD3mGdoaCmcGKmExu4DUqi+aOulY0F/Tf48qtFHM96jH7jOjO+FNwnjn MVRrpzxc1KyPcll34RCYYTbKPiHlfNI= -----END CERTIFICATE-----Generated at Sat Mar 15 06:18:44 2025 by rpki-client