$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50e08332-a8b7-35ad-8b20-712772d10aad.roa File: 50e08332-a8b7-35ad-8b20-712772d10aad.roa (raw, json) Hash identifier: mie/bjh0tlPb7GJ7pdvpkPxq/98zGEQSyQ5eim4pceQ= Subject key identifier: 71:C2:B2:D0:3B:C1:81:74:29:EF:DC:B3:1C:88:5A:0C:1F:0A:FA:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB48FB582BF0AFB9B313AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50e08332-a8b7-35ad-8b20-712772d10aad.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 40.133.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:8f:b5:82:bf:0a:fb:9b:31:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=17b9e421-66c7-4d69-bd68-5b98b92143bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:84:62:23:f6:ec:d3:12:28:6d:1b:5f:53: 83:1d:d9:6c:4a:f9:cf:c1:d4:47:ae:b7:9b:9c:3d: 30:0e:8b:8c:2d:07:88:39:e1:a5:03:cb:ce:dd:ec: 3e:b9:b3:ed:37:cc:e1:46:7a:ae:44:b7:38:a5:b0: 40:6c:20:86:7a:56:5d:ff:07:30:85:f3:3f:f9:67: ce:47:8b:c1:86:ba:db:3d:f0:1a:44:0c:27:46:8f: c1:58:5d:df:f0:3b:80:8b:be:bc:d1:af:1e:30:55: 82:89:5a:9d:3b:0d:93:18:ae:32:20:cd:e4:fb:b1: 3d:cb:97:fd:65:a2:8b:99:e8:35:7c:13:d7:0d:ea: 9a:11:6e:f9:6c:78:41:54:a6:1f:0e:4c:ad:68:26: 38:13:1c:c9:48:e9:92:b3:9e:f3:c9:09:84:dd:3d: 62:88:75:4c:a6:fe:3c:a3:ae:f0:07:ce:7e:30:2c: 8d:fe:03:1b:42:57:85:ac:a2:a4:74:1c:54:d1:2d: 0f:e7:a7:f5:f5:2c:39:fa:fa:28:2d:41:4e:4d:ed: dd:e7:5b:f4:82:45:35:b4:05:4f:d4:50:c8:90:a4: 68:5f:38:d0:d5:b0:10:24:d9:67:4d:04:55:c0:a0: fa:2b:41:9c:21:9a:e2:7e:59:64:96:ef:7e:b6:57: 2d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C2:B2:D0:3B:C1:81:74:29:EF:DC:B3:1C:88:5A:0C:1F:0A:FA:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50e08332-a8b7-35ad-8b20-712772d10aad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.133.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:df:38:64:cd:4d:39:0f:7a:8d:18:0b:78:56:da:40:90:24: 92:d7:7d:17:6c:e6:06:43:ea:93:6a:b7:7e:01:62:48:94:71: bd:96:b1:05:cc:43:1b:64:95:cb:bd:bc:35:65:0e:89:d3:47: 6e:c4:43:e2:1e:58:9a:39:bc:0f:2e:68:7e:a8:6b:46:07:24: 4f:b2:92:3c:2c:c9:16:c5:94:91:42:4a:a5:91:cd:9f:d5:47: 8d:1f:55:dd:e9:35:d5:1e:d0:17:2d:93:bc:c1:a1:f7:14:93: 43:ee:47:31:6f:1a:ac:83:93:a6:de:f9:c3:ed:72:d3:f6:86: 38:94:e5:59:7c:ca:03:0c:e1:34:56:74:2d:ee:8a:c4:59:2a: 34:ad:14:37:c8:23:55:db:54:35:49:3d:4d:48:b4:50:b6:6c: c2:73:db:ec:33:a8:14:0b:81:24:b8:85:49:83:e5:8e:f0:98: 0c:d1:1c:45:a4:d2:9b:c4:5e:fd:e9:1c:f8:8e:32:b5:2b:ca: d1:e1:c5:1e:24:5b:cb:70:43:44:77:b2:f4:f2:e3:38:6c:de: 45:37:bc:77:f2:7a:ce:68:de:4d:c7:de:97:f6:3f:df:60:40: a3:03:87:c0:9e:bc:0c:8b:f3:69:88:e4:0d:6b:78:94:a2:8c: 81:06:cb:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtI+1gr8K+5sxOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MTdiOWU0MjEtNjZjNy00ZDY5LWJkNjgtNWI5OGI5MjE0M2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniOEYiP27NMSKG0bX1ODHdlsSvnPwdRHrreb nD0wDouMLQeIOeGlA8vO3ew+ubPtN8zhRnquRLc4pbBAbCCGelZd/wcwhfM/+WfO R4vBhrrbPfAaRAwnRo/BWF3f8DuAi7680a8eMFWCiVqdOw2TGK4yIM3k+7E9y5f9 ZaKLmeg1fBPXDeqaEW75bHhBVKYfDkytaCY4ExzJSOmSs57zyQmE3T1iiHVMpv48 o67wB85+MCyN/gMbQleFrKKkdBxU0S0P56f19Sw5+vooLUFOTe3d51v0gkU1tAVP 1FDIkKRoXzjQ1bAQJNlnTQRVwKD6K0GcIZrifllklu9+tlctlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHCstA7wYF0Ke/csxyIWgwfCvoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTBlMDgzMzItYThiNy0z NWFkLThiMjAtNzEyNzcyZDEwYWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjfOGTNTTkPeo0YC3hW2kCQJJLXfRds5gZD6pNqt34BYkiUcb2WsQXM Qxtklcu9vDVlDonTR27EQ+IeWJo5vA8uaH6oa0YHJE+ykjwsyRbFlJFCSqWRzZ/V R40fVd3pNdUe0Bctk7zBofcUk0PuRzFvGqyDk6be+cPtctP2hjiU5Vl8ygMM4TRW dC3uisRZKjStFDfII1XbVDVJPU1ItFC2bMJz2+wzqBQLgSS4hUmD5Y7wmAzRHEWk 0pvEXv3pHPiOMrUrytHhxR4kW8twQ0R3svTy4zhs3kU3vHfyes5o3k3H3pf2P99g QKMDh8CevAyL82mI5A1reJSijIEGy3M= -----END CERTIFICATE-----Generated at Fri May 9 07:59:14 2025 by rpki-client