$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa File: 4c7661b5-4727-3944-9cf3-442581b9861b.roa (raw, json) Hash identifier: oGQuZzU9YViv78ttmInE0EfmDUOhi0JXtfGzmYSeWp4= Subject key identifier: 7E:CA:AB:45:A8:51:A7:33:F7:1B:76:82:FC:35:4F:C2:B7:FC:FD:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A104CD1E9E21EFEF89680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 40.138.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:10:4c:d1:e9:e2:1e:fe:f8:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c2d48528-59fb-4762-aec8-ca02ae24eade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8c:b9:a6:ba:98:b0:08:35:12:b7:ca:2f:0b: 25:fe:cf:f3:55:31:dd:e4:b4:77:7c:54:32:23:e8: 14:84:ac:56:9c:d7:91:5f:d6:2f:3a:33:7c:49:a9: 2c:78:5c:94:4c:58:2b:60:c5:9a:c1:14:9f:a5:b6: cb:64:93:f2:07:5d:1c:a5:2b:ad:9f:8b:3b:d9:c8: e0:90:4d:45:83:d6:2c:a8:b7:94:ab:1c:de:56:6e: f2:c6:17:6f:53:d7:4c:86:23:55:83:e5:02:c7:27: c8:f3:ea:15:44:62:b8:82:4b:99:8b:40:74:ad:3e: e4:b3:a0:d8:9b:42:43:1a:1a:98:90:b6:77:15:f7: 77:a0:54:07:3c:8c:50:5c:73:dd:01:71:50:45:8f: 57:cb:33:8c:ac:77:00:3c:97:d9:b5:d7:e1:88:71: 18:69:0a:7f:04:e8:e3:41:f3:0e:3d:3e:cc:5a:91: f4:4c:35:a2:3c:f9:1a:84:3c:9e:b5:34:c4:39:0b: a6:dc:0e:6b:6c:76:c1:3c:3a:52:9b:71:7b:28:79: 25:9c:bb:c8:e5:f0:d5:f8:24:d3:25:db:11:86:27: 90:b1:81:54:d7:7b:18:3f:72:7a:c3:34:6b:ec:0c: 19:29:f2:37:d8:9f:1c:ce:16:f5:ee:e4:23:3a:d2: d7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CA:AB:45:A8:51:A7:33:F7:1B:76:82:FC:35:4F:C2:B7:FC:FD:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:24:e3:0b:61:35:80:89:5b:73:e7:66:c9:08:6f:13:65:32: 95:11:a2:0c:95:a8:53:d6:f1:ed:e8:54:1f:ad:81:6f:e7:60: 1f:94:34:80:fb:2c:eb:24:f3:2b:01:c1:99:2d:87:48:de:04: c4:22:ec:60:62:9f:76:c7:2e:a6:bc:e0:aa:60:75:dd:33:a9: a7:ef:06:13:15:e1:4c:e7:49:a8:fc:c8:41:df:f9:d7:d7:1a: 5e:bc:ca:07:88:03:bb:f4:3c:0d:55:4d:28:80:c3:01:b6:06: a9:e5:81:5c:06:a4:76:fb:bb:77:7e:ab:48:f0:0b:82:8d:a5: 1c:82:26:51:7a:75:53:3e:54:2b:b6:54:46:6c:7f:b8:23:78: bd:b4:8e:ea:be:2b:a4:2c:fa:57:3d:d9:37:d7:af:ab:3d:b1: e7:ea:db:80:c4:e7:2b:a6:6d:c7:4c:88:c0:48:c0:7d:df:cd: 5c:d5:cf:2a:ed:e0:04:4b:94:30:77:8b:d0:8e:60:43:cb:1d: ba:33:05:c2:f8:36:54:cc:a3:40:b2:99:79:8d:59:7c:14:69: e9:aa:e7:5b:d6:4a:25:0b:ca:4c:ea:9f:d9:08:bd:a8:fd:2e: 33:6d:98:77:0e:50:20:60:6c:19:22:78:13:7b:eb:a1:2c:82: 53:ac:44:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShBM0eniHv74loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzJkNDg1MjgtNTlmYi00NzYyLWFlYzgtY2EwMmFlMjRlYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIy5prqYsAg1ErfKLwsl/s/zVTHd5LR3fFQy I+gUhKxWnNeRX9YvOjN8SakseFyUTFgrYMWawRSfpbbLZJPyB10cpSutn4s72cjg kE1Fg9YsqLeUqxzeVm7yxhdvU9dMhiNVg+UCxyfI8+oVRGK4gkuZi0B0rT7ks6DY m0JDGhqYkLZ3Ffd3oFQHPIxQXHPdAXFQRY9XyzOMrHcAPJfZtdfhiHEYaQp/BOjj QfMOPT7MWpH0TDWiPPkahDyetTTEOQum3A5rbHbBPDpSm3F7KHklnLvI5fDV+CTT JdsRhieQsYFU13sYP3J6wzRr7AwZKfI32J8czhb17uQjOtLX7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7Kq0WoUacz9xt2gvw1T8K3/P3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM3NjYxYjUtNDcyNy0z OTQ0LTljZjMtNDQyNTgxYjk4NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIk4wthNYCJW3PnZskIbxNlMpURogyVqFPW8e3oVB+tgW/nYB+UNID7 LOsk8ysBwZkth0jeBMQi7GBin3bHLqa84Kpgdd0zqafvBhMV4UznSaj8yEHf+dfX Gl68ygeIA7v0PA1VTSiAwwG2BqnlgVwGpHb7u3d+q0jwC4KNpRyCJlF6dVM+VCu2 VEZsf7gjeL20juq+K6Qs+lc92TfXr6s9sefq24DE5yumbcdMiMBIwH3fzVzVzyrt 4ARLlDB3i9COYEPLHbozBcL4NlTMo0CymXmNWXwUaemq51vWSiULykzqn9kIvaj9 LjNtmHcOUCBgbBkieBN766EsglOsRHA= -----END CERTIFICATE-----Generated at Sun May 11 10:11:39 2025 by rpki-client