$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6048c5bb-5f70-341f-b6d7-3fb4934293bb.roa File: 6048c5bb-5f70-341f-b6d7-3fb4934293bb.roa (raw, json) Hash identifier: g/qLQNatiNn6rchLoGoF7Qq2joZkjap99LGholf9aAk= Subject key identifier: 53:B8:B5:1B:D5:FD:B3:F4:54:AA:31:86:B0:85:27:6A:6F:FD:FF:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A2459F5CD89999263A240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6048c5bb-5f70-341f-b6d7-3fb4934293bb.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 23045 IP address blocks: 40.128.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:24:59:f5:cd:89:99:92:63:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=331e26ac-217a-4f44-b6a4-57ba681d0f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:4b:c1:c9:a8:ba:80:17:9f:7a:d7:32:35: f5:7d:77:76:46:ff:16:81:a0:8e:e4:ab:ff:23:0d: 4e:e2:81:a2:0b:2a:9a:33:32:a1:ed:3f:3b:e6:63: 68:69:e4:34:5f:ec:f3:dc:4e:2d:c1:0e:f0:88:47: 0c:39:92:03:4c:4a:cb:2e:e9:53:b6:ce:3b:5a:14: a1:91:c5:2d:4b:ef:ac:f5:e1:4b:88:c0:59:ec:dd: 38:ab:13:6f:08:84:c3:8f:7d:e1:18:48:66:84:f6: d1:42:ec:cc:7d:48:4a:8f:17:3c:9d:2e:82:e5:e2: c9:5b:92:ca:65:87:ec:ae:a9:a2:ee:33:e5:74:bd: 07:cb:70:72:a9:99:d1:1b:bd:bd:10:7a:d0:4b:86: a2:a7:f5:1b:05:59:d9:a3:0a:98:52:61:d4:8c:50: 4e:42:66:3e:9d:2d:81:fb:06:65:12:20:27:2a:52: 6e:6b:9b:90:39:29:55:92:6a:7f:cb:5c:b2:48:0c: 0d:99:97:3c:51:0e:f8:6f:08:9d:8d:49:e0:90:d9: a5:df:a3:f4:5d:30:df:fd:5b:b7:14:9e:4b:c8:55: 2a:10:85:b2:60:b2:c3:63:ff:b7:c3:a6:bb:cd:c0: 7b:ee:d2:a5:94:de:21:ce:bb:9b:86:a8:6d:d2:dc: 56:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B8:B5:1B:D5:FD:B3:F4:54:AA:31:86:B0:85:27:6A:6F:FD:FF:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6048c5bb-5f70-341f-b6d7-3fb4934293bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.128.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ef:a4:7a:72:4e:a1:c6:fa:57:2a:ce:39:8f:ce:4d:19:a2: 92:0d:66:20:f0:6a:1a:70:31:80:13:49:90:01:17:ca:15:83: 99:dd:90:19:f1:82:42:c0:f5:6a:24:33:29:0a:9d:d2:56:ba: ac:f8:63:bb:c1:9a:49:3d:60:7e:1f:be:af:40:02:e4:b0:65: 3c:1d:c2:c9:a0:82:b2:03:da:0c:c6:ab:bd:b1:09:73:ff:42: 1c:c5:67:79:d0:9f:af:ba:f3:40:68:66:7a:dc:ff:7c:b1:de: 81:18:63:7d:de:7e:52:52:bc:fe:48:d9:93:73:c1:fc:35:85: d2:e2:59:a1:d3:4a:71:bd:5f:5c:ea:5b:7f:b4:4c:5d:eb:ca: 01:3a:1c:f9:05:96:f8:1f:71:fe:4c:af:26:25:e4:3f:70:32: 91:3b:09:58:c9:d3:4c:47:0d:3f:5a:d4:b8:67:d7:ef:4c:0a: 89:55:3a:81:04:b5:9f:a3:c8:84:bb:2e:63:e3:80:71:af:54: 69:65:f3:d7:a0:b1:c5:69:f7:dc:79:de:fc:49:ad:2e:26:b5: c5:72:99:cc:a1:85:b7:5e:73:ab:36:74:3b:f3:d5:7d:e4:56: bf:4e:fa:8b:63:81:b7:08:b9:39:0b:32:27:59:62:a9:d3:6a: cd:bd:84:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiRZ9c2JmZJjokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzMxZTI2YWMtMjE3YS00ZjQ0LWI2YTQtNTdiYTY4MWQwZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmctLwcmouoAXn3rXMjX1fXd2Rv8WgaCO5Kv/ Iw1O4oGiCyqaMzKh7T875mNoaeQ0X+zz3E4twQ7wiEcMOZIDTErLLulTts47WhSh kcUtS++s9eFLiMBZ7N04qxNvCITDj33hGEhmhPbRQuzMfUhKjxc8nS6C5eLJW5LK ZYfsrqmi7jPldL0Hy3ByqZnRG729EHrQS4aip/UbBVnZowqYUmHUjFBOQmY+nS2B +wZlEiAnKlJua5uQOSlVkmp/y1yySAwNmZc8UQ74bwidjUngkNml36P0XTDf/Vu3 FJ5LyFUqEIWyYLLDY/+3w6a7zcB77tKllN4hzrubhqht0txWEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFO4tRvV/bP0VKoxhrCFJ2pv/f8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjA0OGM1YmItNWY3MC0z NDFmLWI2ZDctM2ZiNDkzNDI5M2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIANMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDvpHpyTqHG+lcqzjmPzk0ZopINZiDwahpwMYATSZABF8oVg5ndkBnx gkLA9WokMykKndJWuqz4Y7vBmkk9YH4fvq9AAuSwZTwdwsmggrID2gzGq72xCXP/ QhzFZ3nQn6+680BoZnrc/3yx3oEYY33eflJSvP5I2ZNzwfw1hdLiWaHTSnG9X1zq W3+0TF3rygE6HPkFlvgfcf5MryYl5D9wMpE7CVjJ00xHDT9a1Lhn1+9MColVOoEE tZ+jyIS7LmPjgHGvVGll89egscVp99x53vxJrS4mtcVymcyhhbdec6s2dDvz1X3k Vr9O+otjgbcIuTkLMidZYqnTas29hGc= -----END CERTIFICATE-----Generated at Sat May 10 12:56:40 2025 by rpki-client