$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20728a6e-9cdb-3de8-85fd-8cff7014d6fd.roa File: 20728a6e-9cdb-3de8-85fd-8cff7014d6fd.roa (raw, json) Hash identifier: cFzGn/ny3L0sQE6poKU64bYVepn03DcsvawNfRArpCY= Subject key identifier: FD:DB:8D:21:BE:4E:41:22:18:EC:B9:0D:3E:D5:CD:5A:7D:EC:34:F7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1B67888F3DE62832D580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20728a6e-9cdb-3de8-85fd-8cff7014d6fd.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 162.40.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1b:67:88:8f:3d:e6:28:32:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=3cc7c3a2-f3e9-45ed-b70d-2cd35a4393dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3e:04:d8:3c:f2:8d:c9:3b:11:bb:9d:5a:f7: 4b:01:37:e0:64:8c:3e:f9:41:25:53:8d:33:84:b9: 4b:d3:31:de:a0:58:41:48:3b:35:7b:0e:ae:7a:4f: 9c:98:4e:80:1e:8b:46:86:94:69:69:2f:9b:a4:a1: e6:79:e0:21:13:d8:78:53:29:2e:58:81:cf:75:11: dc:80:cd:dd:25:f4:a8:99:50:c1:98:5f:96:41:2c: a8:5d:9f:34:64:d1:83:d2:24:e3:f9:42:a5:07:0f: d1:71:ea:33:98:1d:df:0f:4d:5b:17:c2:f6:dc:08: b3:0a:5a:50:fb:20:31:ce:0e:c9:c4:95:6b:6e:65: db:c9:91:4d:a0:54:57:6a:a7:bd:f2:98:c1:eb:17: 6f:d1:a5:96:07:27:f1:ab:89:c3:db:87:55:09:2d: e1:69:cb:99:03:6b:60:ff:e1:8d:8f:9a:0f:00:c9: 02:8c:96:5e:29:94:e6:75:39:5d:ef:b4:c3:14:b1: c1:b8:75:51:30:cd:32:b0:fb:74:85:55:de:a4:33: de:f0:9a:c3:71:9b:06:95:d7:5b:eb:1c:c4:56:da: 23:45:d8:7e:9e:13:c6:45:1f:ca:6d:35:7d:9a:03: 48:4c:a4:74:1c:e1:ba:4a:14:da:71:de:37:16:53: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DB:8D:21:BE:4E:41:22:18:EC:B9:0D:3E:D5:CD:5A:7D:EC:34:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20728a6e-9cdb-3de8-85fd-8cff7014d6fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:3a:f6:15:70:71:61:32:92:97:e4:78:11:bb:0b:73:5e:41: a9:04:22:7a:75:95:de:b7:a6:0e:40:39:34:e9:1a:6e:6f:27: 36:aa:71:46:a0:35:d9:e2:bc:90:08:83:de:db:82:1e:6e:8c: 43:4c:2d:1a:4a:a7:f0:51:b3:cb:26:17:6b:c8:3d:f0:3d:52: c4:23:29:0c:7d:be:f0:3f:69:89:e2:b0:c5:d3:16:b9:e2:21: 18:7a:8c:e4:33:21:d8:8c:bb:f4:5d:15:0e:e4:3c:41:98:ea: eb:ea:a1:cd:d2:bf:c8:53:86:24:36:f5:85:b0:e9:1b:2a:c4: a3:6b:9f:99:56:e6:69:ac:f6:2b:ba:97:1d:78:e9:bc:3c:6a: b4:2c:a8:0e:d3:02:4c:fa:96:e6:d7:7f:4e:d8:d1:58:91:31: 53:68:4c:19:15:02:bc:0d:09:12:f9:88:46:ae:c7:11:b0:d6: e8:9a:0e:49:31:71:be:4f:66:5d:95:e9:f4:33:65:f4:4c:db: 76:81:ff:31:25:3e:ff:dc:7a:17:11:15:ef:ce:08:81:14:f4: 80:d6:f7:33:7f:b3:44:3c:c2:30:1b:21:6c:11:ee:36:5b:dd: 3c:ee:02:ca:bd:68:b8:7f:a5:91:66:33:fb:4c:64:e2:a3:14: a6:28:85:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhtniI895igy1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk M2NjN2MzYTItZjNlOS00NWVkLWI3MGQtMmNkMzVhNDM5M2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z4E2Dzyjck7EbudWvdLATfgZIw++UElU40z hLlL0zHeoFhBSDs1ew6uek+cmE6AHotGhpRpaS+bpKHmeeAhE9h4UykuWIHPdRHc gM3dJfSomVDBmF+WQSyoXZ80ZNGD0iTj+UKlBw/RceozmB3fD01bF8L23AizClpQ +yAxzg7JxJVrbmXbyZFNoFRXaqe98pjB6xdv0aWWByfxq4nD24dVCS3hacuZA2tg /+GNj5oPAMkCjJZeKZTmdTld77TDFLHBuHVRMM0ysPt0hVXepDPe8JrDcZsGlddb 6xzEVtojRdh+nhPGRR/KbTV9mgNITKR0HOG6ShTacd43FlPWOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3bjSG+TkEiGOy5DT7VzVp97DT3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjA3MjhhNmUtOWNkYi0z ZGU4LTg1ZmQtOGNmZjcwMTRkNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoigwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABI69hVwcWEykpfkeBG7C3NeQakEInp1ld63pg5AOTTpGm5vJzaqcUag NdnivJAIg97bgh5ujENMLRpKp/BRs8smF2vIPfA9UsQjKQx9vvA/aYnisMXTFrni IRh6jOQzIdiMu/RdFQ7kPEGY6uvqoc3Sv8hThiQ29YWw6RsqxKNrn5lW5mms9iu6 lx146bw8arQsqA7TAkz6lubXf07Y0ViRMVNoTBkVArwNCRL5iEauxxGw1uiaDkkx cb5PZl2V6fQzZfRM23aB/zElPv/cehcRFe/OCIEU9IDW9zN/s0Q8wjAbIWwR7jZb 3TzuAsq9aLh/pZFmM/tMZOKjFKYohaA= -----END CERTIFICATE-----Generated at Wed May 7 08:17:06 2025 by rpki-client