$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64eab06a-7ceb-3420-94b9-b229128b9869.roa File: 64eab06a-7ceb-3420-94b9-b229128b9869.roa (raw, json) Hash identifier: gQecbx8YU+pDF8gi/2dShpEaMjeAbvZbEfCxpuboYHU= Subject key identifier: 1B:52:E7:12:35:E8:94:1B:05:09:1A:4F:AE:35:46:A8:7A:7D:DD:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1067ED02629943223100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64eab06a-7ceb-3420-94b9-b229128b9869.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 40.138.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:10:67:ed:02:62:99:43:22:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=85ac0330-9dd4-4ca8-a8de-5ff4555765af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:1b:7a:11:da:77:98:19:48:fa:24:b6:20: ce:fa:36:11:de:58:dd:5d:d0:3d:c7:48:5e:a9:ab: 6f:b9:05:a7:e6:47:f4:14:b3:2e:57:35:be:ad:c5: 85:86:84:a7:4d:c5:b8:67:94:32:95:97:d9:68:70: 91:15:fd:a5:2f:e2:fd:a4:d4:7d:58:49:f7:c9:7c: 36:56:72:32:f8:88:b7:7c:bc:96:78:5d:8a:e1:5a: 65:35:4c:d0:61:b0:32:cc:44:19:a6:67:31:f7:e0: 7a:37:14:9e:9c:52:3c:a0:92:b5:cd:ad:fa:ba:90: 4d:36:ec:14:62:8b:46:98:35:32:60:5a:77:57:e6: b0:08:c8:61:86:a6:8a:50:9b:78:df:35:41:b4:df: 6e:ec:bb:a7:8f:79:8b:26:1d:e0:a8:f8:b6:2b:dc: 63:7c:e1:e5:1c:22:ab:a3:51:68:a8:e7:04:a9:a1: fb:e7:64:86:5e:3b:f2:0e:1e:04:dc:b3:57:15:eb: 7f:e5:ee:5d:9f:a1:a8:bb:96:7f:87:4a:52:d6:d8: 42:0a:00:a1:6a:f7:85:2d:97:9d:1b:61:9f:b5:2b: c5:91:ad:65:e4:30:59:08:97:87:c3:6f:7b:9b:45: bf:bf:e1:ae:9f:44:d8:97:66:b4:a8:c6:1e:6e:d7: 0e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:52:E7:12:35:E8:94:1B:05:09:1A:4F:AE:35:46:A8:7A:7D:DD:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64eab06a-7ceb-3420-94b9-b229128b9869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:40:4c:fe:45:c3:29:6f:d7:8f:3f:60:91:25:02:ae:fb:de: 86:2d:10:b0:24:c9:c8:35:23:40:2b:a1:97:be:56:16:df:4c: c8:76:58:ea:76:64:fe:ed:0a:70:85:f4:17:f5:a3:5f:7a:52: 0f:c1:84:f7:cd:b1:45:9f:11:56:d5:93:dc:0f:ec:c8:86:6e: 9b:54:90:43:ca:16:85:5d:d3:60:d3:be:f2:85:8b:b0:5b:12: 1c:49:ba:91:02:d1:02:9b:5e:08:a2:92:bb:19:1a:01:ad:38: 6b:e9:83:fc:76:8d:55:64:ae:40:d0:43:fb:4b:38:2b:a1:e0: e3:9c:1b:b3:d7:74:7e:e4:34:b5:72:a6:a6:a4:42:10:a0:57: 7c:b5:43:41:f2:02:4b:4a:81:7f:18:6a:a5:b7:ad:18:b1:f9: 3c:aa:63:8b:ce:42:2a:d3:d1:23:7b:2f:bb:44:f1:bd:05:49: 01:7a:ed:1f:52:dd:e0:fb:1c:f3:d6:68:19:65:93:4e:25:9f: 2e:a7:af:72:03:f3:5f:de:a8:37:41:20:d9:d4:61:29:f1:e5: 4b:d1:4d:e9:bf:0f:ab:93:54:82:08:58:e1:6f:a4:76:14:9b: 13:4d:80:53:38:ed:97:44:48:3f:3f:bb:06:10:48:13:03:b8: 5e:f7:c1:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShBn7QJimUMiMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODVhYzAzMzAtOWRkNC00Y2E4LWE4ZGUtNWZmNDU1NTc2NWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd4behHad5gZSPoktiDO+jYR3ljdXdA9x0he qatvuQWn5kf0FLMuVzW+rcWFhoSnTcW4Z5QylZfZaHCRFf2lL+L9pNR9WEn3yXw2 VnIy+Ii3fLyWeF2K4VplNUzQYbAyzEQZpmcx9+B6NxSenFI8oJK1za36upBNNuwU YotGmDUyYFp3V+awCMhhhqaKUJt43zVBtN9u7Lunj3mLJh3gqPi2K9xjfOHlHCKr o1FoqOcEqaH752SGXjvyDh4E3LNXFet/5e5dn6Gou5Z/h0pS1thCCgChaveFLZed G2GftSvFka1l5DBZCJeHw297m0W/v+Gun0TYl2a0qMYebtcO7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtS5xI16JQbBQkaT641Rqh6fd0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRlYWIwNmEtN2NlYi0z NDIwLTk0YjktYjIyOTEyOGI5ODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJATP5Fwylv148/YJElAq773oYtELAkycg1I0AroZe+VhbfTMh2WOp2 ZP7tCnCF9Bf1o196Ug/BhPfNsUWfEVbVk9wP7MiGbptUkEPKFoVd02DTvvKFi7Bb EhxJupEC0QKbXgiikrsZGgGtOGvpg/x2jVVkrkDQQ/tLOCuh4OOcG7PXdH7kNLVy pqakQhCgV3y1Q0HyAktKgX8YaqW3rRix+TyqY4vOQirT0SN7L7tE8b0FSQF67R9S 3eD7HPPWaBllk04lny6nr3ID81/eqDdBINnUYSnx5UvRTem/D6uTVIIIWOFvpHYU mxNNgFM47ZdESD8/uwYQSBMDuF73wfY= -----END CERTIFICATE-----Generated at Sun May 11 12:06:04 2025 by rpki-client