$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa File: 51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa (raw, json) Hash identifier: esUVUjp1xRZ+lsbhLrBr64VZr8hZm04yNTFc2vHLzu4= Subject key identifier: CD:B5:15:5E:04:DA:33:20:22:54:46:21:8A:1B:AD:AE:D7:88:94:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB48E4F34A8EE27A3970A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 40.136.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:8e:4f:34:a8:ee:27:a3:97:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=b3d37942-98d8-4a9d-8a72-e19fd16add5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:6b:cd:be:8d:8f:08:33:66:1d:e7:06:66: 3a:cf:e1:f4:b4:ea:46:a0:64:a9:eb:20:c5:c8:f3: 6d:74:d7:48:9d:9c:9b:94:e2:f8:a0:90:7d:3b:04: 24:c3:30:6f:a6:88:f3:e4:ee:3d:07:9a:eb:53:cc: 73:c6:9a:eb:28:aa:a7:a5:34:dd:b5:7a:b4:a6:14: f9:5a:d1:f4:1c:85:d7:bb:bf:af:88:79:3a:94:a3: cb:16:d3:d0:76:98:e9:5d:e9:3a:78:72:74:4d:52: 91:5c:ae:fd:30:c2:9a:7f:11:4d:7f:7b:ae:4a:a0: 0d:d5:0b:84:5b:60:61:5d:de:7d:a7:d8:cc:e1:99: 28:52:f7:0e:05:e3:3e:3f:9c:75:b7:e7:70:e4:40: 5e:97:6f:8b:b5:2c:e6:7d:7b:7b:4f:81:5c:b2:de: fa:f5:57:b4:a6:49:e8:2b:c7:0b:0d:cd:42:75:d6: f1:cc:2d:38:d1:0b:6a:60:ac:ed:89:66:18:30:96: d2:1d:65:9b:03:39:0e:69:fe:9d:63:35:bf:8d:c2: a5:cf:95:9f:93:7d:04:82:c4:dd:de:14:90:18:64: 3b:22:1f:97:33:7e:ef:11:05:c3:de:77:af:e0:01: 29:2d:04:c5:e0:a3:54:1f:59:88:8e:ca:7d:d1:18: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B5:15:5E:04:DA:33:20:22:54:46:21:8A:1B:AD:AE:D7:88:94:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a0:80:86:b4:ed:5d:c5:3d:13:92:b9:ba:d2:ef:2b:4a:59: 26:04:69:33:e8:9b:f6:60:5b:6b:fe:43:66:1e:be:6e:0b:1e: a1:8e:9c:f5:8f:76:11:b1:4c:8d:fa:24:9c:04:d0:f9:f3:2e: 87:15:9b:f1:dd:1a:a1:ca:a4:65:44:74:38:b5:69:99:e0:44: 5a:f0:6e:b6:b8:22:d5:4b:d7:04:86:de:65:a0:47:ae:90:d3: c1:ad:a1:9c:4e:f3:f1:8b:0c:da:42:91:e8:39:f7:be:02:27: af:fa:55:56:66:1b:43:70:49:b4:9a:ce:93:94:7b:d0:83:5c: ac:40:a0:ab:b8:e4:28:54:15:9d:98:c0:9e:96:76:2e:45:a2: 2c:e9:31:f6:83:f5:f1:7d:33:67:9e:c9:95:53:b9:18:1c:80: 1b:fc:6c:53:68:92:7e:1d:ac:0b:5e:dc:6c:50:76:e7:e0:4d: ec:89:df:39:c8:fe:3e:e4:06:d4:17:a4:dd:ab:cf:36:e2:22: e1:68:ff:6b:05:32:e0:59:b4:bd:6f:0b:2d:20:5d:5d:e2:10: 8f:82:40:74:e3:e5:61:48:33:66:b9:7b:9b:fe:c9:73:1b:df: 85:c5:32:de:77:2c:0d:37:28:8f:fe:80:be:74:83:fe:8a:b3: 71:5d:c2:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtI5PNKjuJ6OXCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YjNkMzc5NDItOThkOC00YTlkLThhNzItZTE5ZmQxNmFkZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU1rzb6NjwgzZh3nBmY6z+H0tOpGoGSp6yDF yPNtdNdInZyblOL4oJB9OwQkwzBvpojz5O49B5rrU8xzxprrKKqnpTTdtXq0phT5 WtH0HIXXu7+viHk6lKPLFtPQdpjpXek6eHJ0TVKRXK79MMKafxFNf3uuSqAN1QuE W2BhXd59p9jM4ZkoUvcOBeM+P5x1t+dw5EBel2+LtSzmfXt7T4Fcst769Ve0pkno K8cLDc1CddbxzC040QtqYKztiWYYMJbSHWWbAzkOaf6dYzW/jcKlz5Wfk30EgsTd 3hSQGGQ7Ih+XM37vEQXD3nev4AEpLQTF4KNUH1mIjsp90RhtrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM21FV4E2jMgIlRGIYobra7XiJRAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTFmYTcwMzYtNWRkMi0z ZjY5LTg2ZmYtN2Q5NTNiOWY2YjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiggIa07V3FPROSubrS7ytKWSYEaTPom/ZgW2v+Q2Yevm4LHqGOnPWP dhGxTI36JJwE0PnzLocVm/HdGqHKpGVEdDi1aZngRFrwbra4ItVL1wSG3mWgR66Q 08GtoZxO8/GLDNpCkeg5974CJ6/6VVZmG0NwSbSazpOUe9CDXKxAoKu45ChUFZ2Y wJ6Wdi5FoizpMfaD9fF9M2eeyZVTuRgcgBv8bFNokn4drAte3GxQdufgTeyJ3znI /j7kBtQXpN2rzzbiIuFo/2sFMuBZtL1vCy0gXV3iEI+CQHTj5WFIM2a5e5v+yXMb 34XFMt53LA03KI/+gL50g/6Ks3FdwhQ= -----END CERTIFICATE-----Generated at Sun May 11 00:42:39 2025 by rpki-client