$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa File: 3bfe9669-f1d3-319b-899b-0dc919583329.roa (raw, json) Hash identifier: nvRlconpkEux5SEA009sx+7ptBrJiW+qbUWataOx8Pg= Subject key identifier: 67:16:91:E7:6E:EB:AF:EB:1B:FC:A3:9F:56:40:3E:D2:74:4A:CF:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A38E2BD866466BD0B9880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 40.142.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:38:e2:bd:86:64:66:bd:0b:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=05546a62-0c23-4543-a98c-f0108fd45d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:26:a3:ea:c3:57:ff:d8:87:f3:95:45:f0: 87:ae:76:bf:ea:82:15:cc:da:0a:a1:da:b0:e1:92: 02:16:11:cb:74:8f:22:77:0a:85:3d:76:8d:19:22: 99:63:d6:c1:98:15:49:2c:75:a2:50:fd:14:ef:94: ab:8f:92:2c:36:19:e8:9c:83:5c:fe:2f:77:90:da: 7b:b3:d2:c1:5d:46:e4:a4:19:1c:58:f2:d9:5d:b8: 09:56:7e:58:b6:5c:6d:ad:5b:86:4e:b1:d5:a7:6a: f6:4b:91:fc:70:97:dd:13:84:9f:48:b7:a6:82:4f: 49:30:bf:55:2a:d3:e4:81:c8:d8:bc:bc:ee:23:73: ee:2e:d2:df:e5:fb:83:15:2b:10:f4:c1:f0:27:88: aa:b1:ff:45:9f:dc:95:f3:8b:25:72:f4:46:12:32: f7:1f:53:97:d3:15:34:81:0f:95:ce:b2:f9:1c:bc: 26:a4:ce:af:3a:e4:75:c8:63:c4:5b:1c:54:3c:eb: 4c:48:b1:dc:27:81:c3:0a:89:d0:26:01:13:24:64: 36:63:a1:5d:71:0f:44:c4:c7:ce:d6:40:ab:28:03: 17:e1:57:5d:2c:d7:d9:3a:b5:b3:dd:50:bb:1a:82: 06:99:93:78:26:0c:c8:37:c3:ed:1e:2b:fe:fb:52: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:16:91:E7:6E:EB:AF:EB:1B:FC:A3:9F:56:40:3E:D2:74:4A:CF:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2c:94:78:95:45:12:1c:ed:43:78:5b:55:76:5a:e8:c1:8b: ba:3c:28:18:0b:a2:ec:b7:4d:19:61:18:46:f1:08:57:a9:26: d1:22:62:7a:6f:5a:a1:70:58:ac:fb:c8:a1:2a:e6:a9:82:89: 0a:44:7d:f0:8d:f8:1b:41:33:7b:c9:37:dc:77:32:7c:a8:69: 09:5f:e7:43:07:32:ae:92:eb:d2:9f:34:69:de:2f:48:cd:e3: 35:02:62:4a:7a:b1:2f:e1:75:02:14:95:00:34:aa:12:65:2a: 7c:d4:21:fc:61:0c:73:d7:f1:9b:d2:49:9a:12:50:bd:3e:6f: d4:5a:d1:09:e4:5a:5d:da:e0:93:56:98:0e:dd:8d:c7:f5:d4: 4e:3d:d4:b4:3b:3b:42:74:ba:27:90:d9:6e:fe:a2:5a:fb:c0: a1:21:d7:8e:d2:9a:22:5c:ee:49:db:57:a7:64:cc:83:e2:26: b1:fc:f5:22:d6:30:2b:a1:cd:97:b2:1e:e3:e7:81:ae:b3:7b: d0:f2:3e:f4:c9:3b:72:46:27:b8:78:19:8f:aa:c4:c4:8c:9e: d4:c8:b0:37:1b:41:d7:04:7e:09:53:a9:b5:6e:3c:b4:4b:1f: 07:43:1b:88:f8:89:86:b3:67:c5:81:bc:9e:c3:d7:33:f6:03: 13:2c:f0:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjjivYZkZr0LmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDU1NDZhNjItMGMyMy00NTQzLWE5OGMtZjAxMDhmZDQ1ZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8wmo+rDV//Yh/OVRfCHrna/6oIVzNoKodqw 4ZICFhHLdI8idwqFPXaNGSKZY9bBmBVJLHWiUP0U75Srj5IsNhnonINc/i93kNp7 s9LBXUbkpBkcWPLZXbgJVn5YtlxtrVuGTrHVp2r2S5H8cJfdE4SfSLemgk9JML9V KtPkgcjYvLzuI3PuLtLf5fuDFSsQ9MHwJ4iqsf9Fn9yV84slcvRGEjL3H1OX0xU0 gQ+VzrL5HLwmpM6vOuR1yGPEWxxUPOtMSLHcJ4HDConQJgETJGQ2Y6FdcQ9ExMfO 1kCrKAMX4VddLNfZOrWz3VC7GoIGmZN4JgzIN8PtHiv++1LdMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcWkedu66/rG/yjn1ZAPtJ0Ss8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JmZTk2NjktZjFkMy0z MTliLTg5OWItMGRjOTE5NTgzMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkslHiVRRIc7UN4W1V2WujBi7o8KBgLouy3TRlhGEbxCFepJtEiYnpv WqFwWKz7yKEq5qmCiQpEffCN+BtBM3vJN9x3MnyoaQlf50MHMq6S69KfNGneL0jN 4zUCYkp6sS/hdQIUlQA0qhJlKnzUIfxhDHPX8ZvSSZoSUL0+b9Ra0QnkWl3a4JNW mA7djcf11E491LQ7O0J0uieQ2W7+olr7wKEh147SmiJc7knbV6dkzIPiJrH89SLW MCuhzZeyHuPnga6ze9DyPvTJO3JGJ7h4GY+qxMSMntTIsDcbQdcEfglTqbVuPLRL HwdDG4j4iYazZ8WBvJ7D1zP2AxMs8Oo= -----END CERTIFICATE-----Generated at Sun May 11 04:09:23 2025 by rpki-client