$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c416a0e-c8a9-327d-8ca0-fc562292becf.roa File: 1c416a0e-c8a9-327d-8ca0-fc562292becf.roa (raw, json) Hash identifier: 3tI06iBju5dOEHgg5aJZiPyLMQPzdshsFfVPW3KcpMU= Subject key identifier: 04:AA:13:1C:87:A7:2A:FF:D9:C7:E8:9A:8B:4F:CF:EF:D8:27:DC:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3F8E66C4D95DD7C9FD9280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c416a0e-c8a9-327d-8ca0-fc562292becf.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 40.129.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8e:66:c4:d9:5d:d7:c9:fd:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=6a8be3b7-13fd-4f08-9ccc-ac283b09dfc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:60:b9:70:be:3a:29:fe:eb:58:39:14:7c: 11:06:e1:ec:85:9b:c3:47:b3:c7:ee:7c:a7:ed:18: 0b:21:83:e7:fa:fe:90:ae:e0:85:54:e8:eb:55:38: 0a:37:a2:50:9b:ea:cc:26:b8:25:a4:e6:35:fc:d5: 56:e1:83:f4:ba:07:04:b6:46:e6:4a:70:7f:29:b6: 41:ee:e4:de:ff:fb:29:7f:28:74:6d:0e:df:11:2e: ad:56:66:e3:84:61:17:ad:37:6b:f2:d8:d7:f6:fb: 3f:4c:04:17:79:59:0c:4b:d5:10:5e:06:14:57:f7: 61:0b:90:1b:94:0b:6a:ed:c2:0d:17:8f:77:ea:71: 5c:89:36:9d:80:38:9f:57:3d:80:e1:fe:92:de:9e: 26:c3:a1:25:66:58:20:f2:d1:95:9f:f5:6f:b7:9b: 37:7d:82:6a:29:33:04:7a:bc:47:4f:4e:c4:84:d0: 96:2e:7b:41:16:42:02:cb:67:06:0f:d0:10:d8:eb: 47:6a:f5:78:9e:bc:b3:76:75:77:bc:2d:67:f8:f4: e8:5e:3d:33:08:6b:b7:75:34:ce:b6:8f:54:fd:1f: d5:7c:69:ec:e7:06:b9:dc:93:4f:45:8e:2e:b4:d5: 38:a6:af:e3:bd:10:d3:34:41:3d:11:7d:59:89:cf: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AA:13:1C:87:A7:2A:FF:D9:C7:E8:9A:8B:4F:CF:EF:D8:27:DC:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c416a0e-c8a9-327d-8ca0-fc562292becf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.129.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:8a:8e:e2:15:e1:9c:50:d7:a5:a5:b0:d9:95:3b:61:56:3b: a7:a6:5a:64:a8:17:4e:1e:a3:48:49:41:43:a1:ce:42:26:1d: 41:47:bf:8f:f2:9d:b9:7f:b4:f7:c8:8c:78:e1:09:35:69:a2: 17:59:fb:7a:cb:05:e2:22:b3:b8:b2:81:da:f0:9b:3b:51:17: ba:33:83:0e:13:67:a6:1d:48:f5:46:e0:3a:a3:b4:ea:e6:6a: 5c:8d:ee:fb:54:3f:51:a3:69:aa:b1:44:1f:fa:6c:93:d6:56: f1:4b:77:1a:10:22:da:13:a6:2f:36:6a:f8:dd:bb:15:97:63: 05:5b:f6:bb:c4:82:08:26:8b:42:2c:b0:2f:2f:b3:76:94:62: 5f:b4:8f:62:f2:ee:82:f9:28:ad:00:00:37:dc:aa:91:a1:88: d8:53:3d:70:f1:4a:a8:67:d6:5c:af:6f:af:b6:fe:1e:bd:71: 26:b2:6f:3e:55:28:81:00:74:aa:c0:e3:6f:2d:9a:b7:a6:ed: 90:ee:8d:4a:95:71:b1:b9:e7:f7:eb:35:b0:a8:a5:3d:16:01: 86:5b:40:e3:db:86:f1:7d:1c:65:2f:96:c9:0a:fb:9d:0a:ab: 2a:3c:e6:99:2c:e7:14:7e:50:81:d0:57:0b:35:a1:47:a1:a2: 04:0e:c9:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P45mxNld18n9koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NmE4YmUzYjctMTNmZC00ZjA4LTljY2MtYWMyODNiMDlkZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCNguXC+Oin+61g5FHwRBuHshZvDR7PH7nyn 7RgLIYPn+v6QruCFVOjrVTgKN6JQm+rMJrglpOY1/NVW4YP0ugcEtkbmSnB/KbZB 7uTe//spfyh0bQ7fES6tVmbjhGEXrTdr8tjX9vs/TAQXeVkMS9UQXgYUV/dhC5Ab lAtq7cINF4936nFciTadgDifVz2A4f6S3p4mw6ElZlgg8tGVn/Vvt5s3fYJqKTME erxHT07EhNCWLntBFkICy2cGD9AQ2OtHavV4nryzdnV3vC1n+PToXj0zCGu3dTTO to9U/R/VfGns5wa53JNPRY4utNU4pq/jvRDTNEE9EX1Zic+DEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASqExyHpyr/2cfomotPz+/YJ9yWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWM0MTZhMGUtYzhhOS0z MjdkLThjYTAtZmM1NjIyOTJiZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIGPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeKjuIV4ZxQ16WlsNmVO2FWO6emWmSoF04eo0hJQUOhzkImHUFHv4/y nbl/tPfIjHjhCTVpohdZ+3rLBeIis7iygdrwmztRF7ozgw4TZ6YdSPVG4DqjtOrm alyN7vtUP1GjaaqxRB/6bJPWVvFLdxoQItoTpi82avjduxWXYwVb9rvEgggmi0Is sC8vs3aUYl+0j2Ly7oL5KK0AADfcqpGhiNhTPXDxSqhn1lyvb6+2/h69cSaybz5V KIEAdKrA428tmrem7ZDujUqVcbG55/frNbCopT0WAYZbQOPbhvF9HGUvlskK+50K qyo85pks5xR+UIHQVws1oUehogQOybY= -----END CERTIFICATE-----Generated at Sat May 10 13:57:37 2025 by rpki-client