$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/654dd9cc-b166-3061-853e-a33f75bc0504.roa File: 654dd9cc-b166-3061-853e-a33f75bc0504.roa (raw, json) Hash identifier: wosKY07aWS/6xKp6YxO/0pYiK0Aizsc2BKSnPEbSiG8= Subject key identifier: 2A:9A:4E:3B:21:58:55:B5:B3:E7:7E:13:42:29:8E:9D:10:7B:78:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D431CD834367C571480BC200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/654dd9cc-b166-3061-853e-a33f75bc0504.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 40.133.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:cd:83:43:67:c5:71:48:0b:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=bd706a58-c3ee-4fe0-b401-ed6ee2e27274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a0:fa:b9:dc:1c:09:73:1e:1a:d5:d9:a2:c6: 13:7a:70:f9:d5:a5:9c:15:58:aa:cf:bc:bd:c0:63: 2f:37:f8:d6:ea:ff:5b:b3:d3:bd:a7:77:cb:46:fb: c8:e6:7c:14:8f:5f:c0:86:e7:ae:ef:1c:2a:69:bd: ea:c5:62:08:1b:a3:07:bb:9a:f1:d0:a6:de:19:a0: 7e:2b:4d:ab:59:f5:27:f4:fe:97:ac:45:3e:65:dd: 6b:aa:c3:16:b3:c0:78:75:03:2c:78:66:8a:5c:ac: c0:63:1b:1f:a9:41:d8:ee:58:7d:aa:a0:b7:de:9d: 67:64:fb:78:e3:68:ad:31:1d:96:d8:cc:d4:34:0d: cc:8e:c9:b5:a3:1b:ab:9b:47:01:c8:bd:35:3c:ea: d1:62:b9:69:ee:fd:f4:ec:ba:ac:3b:e2:c6:54:58: 8d:e2:d7:b9:34:9e:53:eb:01:e7:06:f3:cb:eb:3c: a1:e0:95:4c:f1:16:13:d9:ee:30:c6:5c:f9:0d:82: 4a:bc:3d:85:4b:ac:a3:9b:f1:3e:b8:c8:e0:e4:af: 3f:bc:aa:59:df:22:d2:30:17:43:10:86:29:7d:38: 3b:c1:4c:c6:9f:ad:fe:11:30:37:e9:8c:c3:d4:78: 03:2f:07:d3:5f:af:bf:80:45:68:a4:91:3b:8f:03: 6f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9A:4E:3B:21:58:55:B5:B3:E7:7E:13:42:29:8E:9D:10:7B:78:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/654dd9cc-b166-3061-853e-a33f75bc0504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.133.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:57:e6:25:6d:af:cd:0f:23:1f:8e:9b:d5:e6:af:77:ac:0a: 80:57:81:59:f7:98:0d:d9:4d:f8:c3:fc:e1:01:3d:7f:e7:9c: 5a:fb:f4:ca:ac:cd:c6:9f:e3:ee:fa:2d:c2:03:b3:92:8c:90: d1:32:ed:bc:e4:a6:cb:dc:13:2e:50:93:8f:34:52:77:36:ab: 04:92:90:c2:ef:93:d3:95:f4:e5:cc:de:f1:3e:88:0d:23:fc: b5:53:d9:12:44:05:e8:d4:25:ce:8f:7f:9c:8d:f3:b7:ba:e1: f4:26:8d:c8:53:6a:2a:11:dd:71:89:40:45:d3:ad:8c:1b:42: 58:b7:9e:23:6d:fb:f6:75:41:9c:a7:ca:98:cb:34:3c:c7:b9: 63:33:e6:ad:7b:19:9c:c6:0d:e4:5c:03:65:5c:59:31:62:2f: cf:47:e7:08:cf:bb:25:6f:a7:c3:4c:2b:5c:3a:c3:74:76:41: 4c:52:5a:9e:e0:6e:64:8a:9a:19:11:a1:6d:3b:a4:06:99:17: c7:fa:13:b1:a1:6e:b5:f7:37:26:67:22:92:87:54:c9:d0:a1: 2b:5d:76:9e:a0:f2:fb:c4:15:b0:44:57:c4:4d:25:73:80:8f: 23:2f:dc:b7:c5:35:83:51:34:c9:48:14:c6:30:a6:66:a3:aa: b2:ff:19:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMc2DQ2fFcUgLwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmQ3MDZhNTgtYzNlZS00ZmUwLWI0MDEtZWQ2ZWUyZTI3Mjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqD6udwcCXMeGtXZosYTenD51aWcFViqz7y9 wGMvN/jW6v9bs9O9p3fLRvvI5nwUj1/Ahueu7xwqab3qxWIIG6MHu5rx0KbeGaB+ K02rWfUn9P6XrEU+Zd1rqsMWs8B4dQMseGaKXKzAYxsfqUHY7lh9qqC33p1nZPt4 42itMR2W2MzUNA3Mjsm1oxurm0cByL01POrRYrlp7v307LqsO+LGVFiN4te5NJ5T 6wHnBvPL6zyh4JVM8RYT2e4wxlz5DYJKvD2FS6yjm/E+uMjg5K8/vKpZ3yLSMBdD EIYpfTg7wUzGn63+ETA36YzD1HgDLwfTX6+/gEVopJE7jwNv0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqaTjshWFW1s+d+E0Ipjp0Qe3iTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjU0ZGQ5Y2MtYjE2Ni0z MDYxLTg1M2UtYTMzZjc1YmMwNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZX5iVtr80PIx+Om9Xmr3esCoBXgVn3mA3ZTfjD/OEBPX/nnFr79Mqs zcaf4+76LcIDs5KMkNEy7bzkpsvcEy5Qk480Unc2qwSSkMLvk9OV9OXM3vE+iA0j /LVT2RJEBejUJc6Pf5yN87e64fQmjchTaioR3XGJQEXTrYwbQli3niNt+/Z1QZyn ypjLNDzHuWMz5q17GZzGDeRcA2VcWTFiL89H5wjPuyVvp8NMK1w6w3R2QUxSWp7g bmSKmhkRoW07pAaZF8f6E7GhbrX3NyZnIpKHVMnQoStddp6g8vvEFbBEV8RNJXOA jyMv3LfFNYNRNMlIFMYwpmajqrL/GSk= -----END CERTIFICATE-----Generated at Tue Jul 1 01:10:28 2025 by rpki-client