$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04284a45-ba49-39fb-8df7-0db25a542afb.roa File: 04284a45-ba49-39fb-8df7-0db25a542afb.roa (raw, json) Hash identifier: bspjn/AUFC/sxEN2v7SaE/lNiqggt8vSGMLBArNzG3o= Subject key identifier: 7E:74:A1:BA:39:DE:80:52:5B:2E:16:58:43:B0:4A:45:B4:CA:F4:74 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A38B309F30E25A0032380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04284a45-ba49-39fb-8df7-0db25a542afb.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 40.136.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:38:b3:09:f3:0e:25:a0:03:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1bbbc3b9-e073-4768-8dfa-f877a9068736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:da:4d:d6:f3:2a:c6:53:96:85:b7:74:7e:65: eb:1f:31:f8:2d:1f:c9:e0:48:b4:92:f0:c2:55:ea: c3:cc:3a:ca:2e:11:91:67:65:6a:e5:46:51:73:a5: 93:7d:c0:af:38:35:b2:1d:e0:ce:1d:93:73:46:d5: 3f:2b:09:58:c4:a9:da:71:59:e3:23:b2:1d:f7:86: ee:80:75:8f:71:ba:6d:78:29:01:8c:95:52:51:5e: 07:b6:f7:71:16:91:23:6c:44:42:21:2f:56:66:2b: c3:51:ee:09:e8:b4:1c:82:1b:11:cb:5a:ea:60:2c: 1a:55:0d:25:af:68:c9:ad:c4:43:2a:8f:21:24:ed: bf:55:26:65:ad:80:ab:46:b4:70:a1:25:78:93:e6: e9:fd:f1:80:ac:d3:37:d8:65:01:a3:6c:64:70:70: 82:16:1c:47:a2:b8:62:fd:e7:72:db:82:85:f0:1b: 84:9a:5c:90:1e:42:d7:ce:43:d8:2b:67:3d:21:66: 3c:ad:84:86:46:5f:46:53:6d:22:88:ed:cc:5d:2c: 4f:28:e4:63:b9:c3:af:82:e3:f0:1a:e3:62:74:b5: 8b:59:b2:d5:0f:4b:f4:14:4b:57:f9:67:ea:4a:70: 07:46:52:ed:3c:01:63:df:c5:c0:98:fc:94:da:37: 62:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:74:A1:BA:39:DE:80:52:5B:2E:16:58:43:B0:4A:45:B4:CA:F4:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04284a45-ba49-39fb-8df7-0db25a542afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:7f:26:e6:15:45:0d:39:b4:b8:1c:9d:d1:4f:b6:70:72:eb: 45:f6:05:30:42:e7:b7:41:6d:aa:54:42:d6:1b:a1:12:42:e7: 06:82:4e:cf:ae:2f:70:c5:3d:10:39:d4:e8:03:65:f1:59:a1: 0e:8f:58:a6:11:34:9b:77:8e:1b:b2:b0:0e:9c:d8:71:f2:34: d3:8d:d7:cc:a4:23:1f:21:21:28:a5:bd:45:65:e0:eb:d7:6f: 1b:10:d7:42:a0:82:70:ae:c3:a7:07:66:50:76:dc:3f:d9:ec: f2:31:0b:21:73:5a:17:f4:63:2b:6f:75:00:2b:33:09:08:fa: 50:03:4e:7e:df:48:be:66:1d:d4:db:33:a3:dd:ad:61:62:81: 66:bc:98:9e:2d:44:1c:62:41:f7:66:7a:8c:85:cd:0a:b1:46: 41:30:4f:a0:ea:53:63:f2:a5:63:5c:5b:51:00:37:87:93:5b: f7:04:25:6d:10:a7:1f:2a:f7:42:3e:1a:c8:36:cc:1b:f3:d1: 92:bd:97:e3:22:eb:98:ba:83:a4:80:e8:0b:75:73:a4:9a:88: 7d:95:35:71:ce:9e:63:9b:fa:2a:70:61:9e:d2:3a:55:8b:d0: 17:80:d7:cb:a2:65:10:e6:d9:bd:15:f9:d7:9f:2b:24:ae:14: a8:ad:e6:8a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSjizCfMOJaADI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWJiYmMzYjktZTA3My00NzY4LThkZmEtZjg3N2E5MDY4NzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9pN1vMqxlOWhbd0fmXrHzH4LR/J4Ei0kvDC VerDzDrKLhGRZ2Vq5UZRc6WTfcCvODWyHeDOHZNzRtU/KwlYxKnacVnjI7Id94bu gHWPcbpteCkBjJVSUV4HtvdxFpEjbERCIS9WZivDUe4J6LQcghsRy1rqYCwaVQ0l r2jJrcRDKo8hJO2/VSZlrYCrRrRwoSV4k+bp/fGArNM32GUBo2xkcHCCFhxHorhi /edy24KF8BuEmlyQHkLXzkPYK2c9IWY8rYSGRl9GU20iiO3MXSxPKORjucOvguPw GuNidLWLWbLVD0v0FEtX+WfqSnAHRlLtPAFj38XAmPyU2jdiwwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH50obo53oBSWy4WWEOwSkW0yvR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQyODRhNDUtYmE0OS0z OWZiLThkZjctMGRiMjVhNTQyYWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBKIgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXX8m5hVFDTm0uByd0U+2cHLrRfYFMELnt0FtqlRC1huhEkLnBoJOz64v cMU9EDnU6ANl8VmhDo9YphE0m3eOG7KwDpzYcfI0043XzKQjHyEhKKW9RWXg69dv GxDXQqCCcK7DpwdmUHbcP9ns8jELIXNaF/RjK291ACszCQj6UANOft9IvmYd1Nsz o92tYWKBZryYni1EHGJB92Z6jIXNCrFGQTBPoOpTY/KlY1xbUQA3h5Nb9wQlbRCn Hyr3Qj4ayDbMG/PRkr2X4yLrmLqDpIDoC3VzpJqIfZU1cc6eY5v6KnBhntI6VYvQ F4DXy6JlEObZvRX5158rJK4UqK3mig== -----END CERTIFICATE-----Generated at Sat May 10 02:24:43 2025 by rpki-client