$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c3807a78-58fa-30c5-bc6c-8b8b8232dafd.roa File: c3807a78-58fa-30c5-bc6c-8b8b8232dafd.roa (raw, json) Hash identifier: 87cjfFzFfgWI6Lb3vDtoJrs91tq3BUJfoq7rGRAMEkg= Subject key identifier: 87:F6:60:57:8A:17:7D:80:C0:0A:95:52:F6:16:4C:86:E4:C8:0B:7A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849192D28EF27A144AB0EB71B80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c3807a78-58fa-30c5-bc6c-8b8b8232dafd.roa Signing time: Thu 06 Mar 2025 13:20:01 +0000 ROA not before: Thu 06 Mar 2025 13:20:01 +0000 ROA not after: Wed 04 Jun 2025 12:20:01 +0000 asID: 207266 IP address blocks: 199.249.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:2d:28:ef:27:a1:44:ab:0e:b7:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 6 13:20:01 2025 GMT Not After : Jun 4 12:20:01 2025 GMT Subject: CN=6bee12e1-ebff-433e-8803-1163b4c9f2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:99:e9:9b:fa:3a:aa:aa:82:28:01:10:b4:25: de:e7:55:8f:3f:4e:97:c4:dd:f4:72:54:b9:91:20: 7f:de:3a:02:3f:fd:b5:27:b1:15:bb:31:70:d2:83: f4:c0:2f:85:97:9c:4e:f4:24:28:7f:49:7f:b6:42: 7c:8f:4e:14:47:fe:fa:8d:41:63:a4:9b:59:e3:3a: 85:96:ba:a5:15:9f:77:26:95:f8:42:f8:08:a7:f4: 27:bf:01:1e:15:99:9e:3e:6b:ef:74:86:01:27:ce: af:b1:7d:c9:69:42:d5:14:5e:4d:f7:f4:36:64:d0: 37:e9:fb:54:86:a8:54:8b:35:62:c9:9c:3d:6d:95: 00:85:a7:3a:60:c0:51:22:23:b5:ec:56:60:d5:47: 94:16:47:f0:48:72:a7:f9:1a:d6:e6:3f:71:b0:f0: 08:23:8a:19:8d:b7:5b:e9:f0:41:f5:c3:73:08:d7: 97:da:0e:b1:d9:fd:62:e5:fd:04:fb:dc:d4:99:2f: 37:c6:b8:67:ad:cc:e9:8e:45:1a:f5:3d:e9:96:90: c1:7a:8c:60:55:56:1f:7b:13:fc:5b:11:06:48:7e: 7c:b5:c0:66:c1:fe:4d:08:38:80:d7:e4:52:54:90: 4d:4b:68:eb:9b:1f:09:b5:77:ff:65:59:9b:e1:3a: 80:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F6:60:57:8A:17:7D:80:C0:0A:95:52:F6:16:4C:86:E4:C8:0B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c3807a78-58fa-30c5-bc6c-8b8b8232dafd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e5:49:82:6d:5a:72:55:e1:29:83:dc:f0:d9:82:74:1c:1c: 56:3e:84:f3:54:7e:8d:3a:71:c7:86:29:dc:e5:a9:67:94:77: 5d:0e:cf:93:a5:ba:b5:8c:91:ef:0f:8b:f6:ba:d1:45:80:2c: db:b6:e3:5f:9b:9a:08:aa:48:53:1f:9f:13:75:d9:3b:6d:fe: 50:17:f3:88:dc:b5:0f:ce:32:d2:c8:0e:9f:41:09:e1:66:58: 37:18:f0:b4:8e:d3:f4:59:31:e8:47:e5:67:79:a3:4e:2c:ee: 54:a4:12:c3:7f:e8:7d:34:ce:de:c3:63:18:71:ee:ca:3e:8a: f2:60:de:e5:49:34:f5:ea:47:6b:c4:3e:69:73:7a:2a:a8:01: 0a:da:bb:93:d5:4c:3e:ed:d2:4e:45:d7:19:49:da:60:4c:20: 08:a9:89:99:b5:46:8c:db:78:a3:ab:04:2a:f5:9e:c8:e0:28: 29:de:bb:7a:7f:2d:15:d6:9a:16:d6:20:2c:0a:6a:41:86:bf: 91:6d:54:d2:77:56:85:51:ff:98:71:ac:e5:90:65:2c:93:1e: a8:78:21:03:b3:a6:6b:f2:c8:d5:f3:1e:04:63:2b:a6:d6:fe: 00:2e:23:92:65:80:a4:0e:6b:cb:54:77:0c:e5:f2:f5:12:89: 84:03:11:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZLSjvJ6FEqw63G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDMwNjEzMjAwMVoXDTI1MDYwNDEyMjAwMVowLzEtMCsGA1UEAxMk NmJlZTEyZTEtZWJmZi00MzNlLTg4MDMtMTE2M2I0YzlmMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJnpm/o6qqqCKAEQtCXe51WPP06XxN30clS5 kSB/3joCP/21J7EVuzFw0oP0wC+Fl5xO9CQof0l/tkJ8j04UR/76jUFjpJtZ4zqF lrqlFZ93JpX4QvgIp/QnvwEeFZmePmvvdIYBJ86vsX3JaULVFF5N9/Q2ZNA36ftU hqhUizViyZw9bZUAhac6YMBRIiO17FZg1UeUFkfwSHKn+RrW5j9xsPAII4oZjbdb 6fBB9cNzCNeX2g6x2f1i5f0E+9zUmS83xrhnrczpjkUa9T3plpDBeoxgVVYfexP8 WxEGSH58tcBmwf5NCDiA1+RSVJBNS2jrmx8JtXf/ZVmb4TqAfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf2YFeKF32AwAqVUvYWTIbkyAt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzM4MDdhNzgtNThmYS0z MGM1LWJjNmMtOGI4YjgyMzJkYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACblSYJtWnJV4SmD3PDZgnQcHFY+hPNUfo06cceGKdzlqWeUd10Oz5Ol urWMke8Pi/a60UWALNu241+bmgiqSFMfnxN12Ttt/lAX84jctQ/OMtLIDp9BCeFm WDcY8LSO0/RZMehH5Wd5o04s7lSkEsN/6H00zt7DYxhx7so+ivJg3uVJNPXqR2vE PmlzeiqoAQrau5PVTD7t0k5F1xlJ2mBMIAipiZm1RozbeKOrBCr1nsjgKCneu3p/ LRXWmhbWICwKakGGv5FtVNJ3VoVR/5hxrOWQZSyTHqh4IQOzpmvyyNXzHgRjK6bW /gAuI5JlgKQOa8tUdwzl8vUSiYQDEb0= -----END CERTIFICATE-----Generated at Sat Mar 15 06:18:44 2025 by rpki-client