$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0866f524-d9d4-3406-8c4b-94f6c357db6e.roa File: 0866f524-d9d4-3406-8c4b-94f6c357db6e.roa (raw, json) Hash identifier: 281fsf5ZAxyar9HbxTrf/bKNbp8r6gqAqnh49+jRdFs= Subject key identifier: 6D:8C:64:30:85:31:11:BA:3D:68:DE:3C:B8:BC:94:04:C5:25:43:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A2812FD3D1E5F54BBAC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0866f524-d9d4-3406-8c4b-94f6c357db6e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 393278 IP address blocks: 40.136.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:28:12:fd:3d:1e:5f:54:bb:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1f269cba-5906-4437-b6e0-a89881aabdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:1a:10:64:c9:66:bc:1b:92:0e:de:16:11: 8d:31:8f:cb:13:10:57:e2:dd:a3:ad:39:70:d0:6c: a3:a2:1d:74:e2:db:c2:fe:0d:f7:15:35:81:ca:ff: 3b:b0:3c:c5:42:20:7c:f0:c7:91:f8:54:f9:7a:0e: c9:93:42:d5:fd:df:02:75:75:61:a8:52:76:7c:57: 16:3a:4a:dd:1d:ab:4a:68:71:55:9d:96:16:56:2c: 2f:5b:9e:95:8a:93:4b:8e:1e:46:88:82:a8:c2:23: ef:92:b1:4b:b2:33:24:50:ee:d6:8c:b7:fa:d7:4c: ee:18:cf:cf:f5:35:b7:9f:7c:1c:be:20:ce:c2:ef: 9d:69:b7:12:3d:bf:51:be:8a:52:a0:1e:82:e8:12: 76:1e:cb:55:66:bf:b6:9d:fe:af:e1:23:3a:42:ed: 91:94:cf:2c:90:6d:a3:d8:8f:00:47:03:75:b3:1b: df:16:f7:08:86:05:b8:af:15:2a:63:9e:7f:93:f9: 74:07:69:bc:b7:5a:38:fa:b6:7b:3a:ad:c6:0e:30: 71:4c:0b:eb:64:27:07:80:ab:ed:48:da:a7:5a:9e: 12:1f:13:1e:85:67:b0:ba:f4:ce:c1:d7:8f:5c:3c: 7c:4d:e4:15:16:e4:1c:75:2e:a5:ef:ec:68:c6:54: e4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8C:64:30:85:31:11:BA:3D:68:DE:3C:B8:BC:94:04:C5:25:43:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0866f524-d9d4-3406-8c4b-94f6c357db6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:28:8f:af:d8:70:0f:8a:1b:1d:4f:a4:ff:a8:29:98:61:62: 46:45:61:7a:b1:23:4c:97:04:84:3d:4c:dc:ff:dd:0f:3b:ea: a3:3c:fb:9b:f9:35:63:f4:42:8a:31:81:82:c4:59:63:46:22: ab:56:2b:2d:00:99:57:e8:e2:d5:18:cd:8c:78:79:d1:0f:07: ea:28:08:3c:90:62:be:38:6e:90:d3:7e:6a:80:06:36:46:52: 60:86:ca:49:c0:f9:29:b4:e1:de:71:e0:b0:10:c1:e1:b4:47: 0a:d1:5f:9b:89:4e:c2:5f:99:df:82:97:ca:52:c9:1d:36:c2: fc:4b:a3:4b:a2:18:22:d4:29:b8:de:81:88:fc:39:89:2f:d0: 30:b5:3c:60:21:b0:cd:05:41:45:9a:b7:3a:da:38:1f:e2:1c: e2:31:d0:b4:4e:bd:3b:ba:81:07:6b:ee:05:23:66:fc:b1:6e: c9:36:6b:15:62:af:fa:14:46:f9:eb:a5:ef:08:fe:86:dc:84: d8:6d:f4:a8:c9:45:43:61:72:41:76:f8:ff:ca:d4:02:1a:ef: 1d:4e:56:3a:2c:bc:21:20:43:5d:6d:b1:d6:5a:41:d2:1a:91: 79:a5:72:db:f5:fc:5e:00:e8:cf:2f:3f:92:e0:fa:42:dc:31: 9b:3b:bd:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSigS/T0eX1S7rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWYyNjljYmEtNTkwNi00NDM3LWI2ZTAtYTg5ODgxYWFiZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSkaEGTJZrwbkg7eFhGNMY/LExBX4t2jrTlw 0Gyjoh104tvC/g33FTWByv87sDzFQiB88MeR+FT5eg7Jk0LV/d8CdXVhqFJ2fFcW OkrdHatKaHFVnZYWViwvW56VipNLjh5GiIKowiPvkrFLsjMkUO7WjLf610zuGM/P 9TW3n3wcviDOwu+dabcSPb9RvopSoB6C6BJ2HstVZr+2nf6v4SM6Qu2RlM8skG2j 2I8ARwN1sxvfFvcIhgW4rxUqY55/k/l0B2m8t1o4+rZ7Oq3GDjBxTAvrZCcHgKvt SNqnWp4SHxMehWewuvTOwdePXDx8TeQVFuQcdS6l7+xoxlTkawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2MZDCFMRG6PWjePLi8lATFJUPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDg2NmY1MjQtZDlkNC0z NDA2LThjNGItOTRmNmMzNTdkYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcoj6/YcA+KGx1PpP+oKZhhYkZFYXqxI0yXBIQ9TNz/3Q876qM8+5v5 NWP0QooxgYLEWWNGIqtWKy0AmVfo4tUYzYx4edEPB+ooCDyQYr44bpDTfmqABjZG UmCGyknA+Sm04d5x4LAQweG0RwrRX5uJTsJfmd+Cl8pSyR02wvxLo0uiGCLUKbje gYj8OYkv0DC1PGAhsM0FQUWatzraOB/iHOIx0LROvTu6gQdr7gUjZvyxbsk2axVi r/oURvnrpe8I/obchNht9KjJRUNhckF2+P/K1AIa7x1OVjosvCEgQ11tsdZaQdIa kXmlctv1/F4A6M8vP5Lg+kLcMZs7vf8= -----END CERTIFICATE-----Generated at Sat May 10 13:36:00 2025 by rpki-client