$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa File: 757bd253-cf95-3776-a157-b88b50e26f1b.roa (raw, json) Hash identifier: Xfgbr6P/WMNf30tWLY1O66g8InXsdG1jsqSbqwjCvjc= Subject key identifier: D1:5F:48:B6:E4:1F:57:AE:F6:B2:36:F9:72:A3:58:A0:CE:84:54:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A38BEEB28203B8D9E8430 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 40.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:38:be:eb:28:20:3b:8d:9e:84:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=f4acf1c9-a73d-407d-8158-ede814997e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:79:1f:3f:1a:cc:b4:05:34:7e:41:28:f8:ab: 83:ce:e1:bd:8a:34:4e:3e:47:12:85:fa:2b:a8:7c: 0f:45:f4:10:a1:c2:dc:ed:7c:f1:89:64:f1:01:ab: fb:35:c4:e1:63:23:ec:34:71:3c:98:92:66:8a:25: 8e:1a:33:8e:22:86:c6:f4:42:a4:74:d2:2c:18:e3: 2b:f9:ea:03:66:8d:91:d9:ce:4c:4c:2d:a3:17:b7: 4b:01:d5:10:17:be:65:ca:f4:71:61:e2:33:19:ab: 0d:de:67:9c:df:d8:79:65:1c:2d:54:2a:63:ca:43: ab:79:97:8d:df:7c:72:0b:7f:bb:37:51:29:29:b1: bb:ed:3e:a6:ec:c3:25:bb:69:6a:f2:26:97:85:9a: 29:f7:c3:f1:04:49:f6:af:39:23:14:21:df:01:96: 45:6a:ff:ba:ca:b9:08:3e:af:22:23:e7:c2:38:49: 18:28:13:67:e1:3a:1b:58:ff:86:45:82:c3:83:84: db:99:40:a7:ed:26:92:a4:b4:49:a7:65:17:5f:69: c4:8e:30:b5:5d:1d:de:cd:59:76:10:e0:48:a6:83: 2a:52:ab:ae:74:0e:e5:62:48:b2:b9:e7:f5:d3:86: da:1b:e3:c2:a5:94:0a:63:e6:43:e1:fd:7f:66:b3: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5F:48:B6:E4:1F:57:AE:F6:B2:36:F9:72:A3:58:A0:CE:84:54:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0e:09:21:77:59:94:4a:d0:d9:94:40:4a:34:ac:12:aa:f3: 5c:fa:66:2d:ab:d2:9f:2f:30:e5:44:aa:14:36:64:66:a5:32: b6:b4:5f:1f:e0:cd:cd:d5:a8:98:14:a8:16:89:d2:e7:b4:af: 16:bd:58:e9:20:23:0b:d1:f3:1a:6a:08:d8:e8:ef:fd:a2:9b: 36:b2:aa:c7:53:58:10:65:7a:f4:ca:59:27:da:7a:3b:37:38: 67:0c:1a:f0:96:95:92:99:4e:c1:52:a2:9b:ac:b2:49:b2:42: 37:1f:47:5d:6c:9f:f9:06:ea:d9:85:9c:17:ad:6c:08:a1:49: 23:d4:2a:c7:42:dc:72:1f:40:37:1d:7a:ec:35:ae:48:83:b6: bb:c4:c6:99:f0:b2:56:61:15:73:12:a2:04:76:cd:58:ff:c5: ac:70:02:e2:27:0f:60:db:39:58:1a:29:38:af:41:e8:b5:94: 39:09:35:d7:a6:f2:d6:29:0e:70:e7:ca:85:df:1a:b4:67:8d: c3:b5:22:09:50:f8:32:cd:cd:52:a3:bd:d0:45:24:e2:e1:e9: 14:ea:1e:33:f7:49:75:17:c9:29:98:4b:8d:2a:74:58:a7:41: b9:6a:ca:52:6e:ba:df:99:80:a3:a8:8c:51:5f:f7:a2:f0:5c: 26:fe:45:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSji+6yggO42ehDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjRhY2YxYzktYTczZC00MDdkLTgxNTgtZWRlODE0OTk3ZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHkfPxrMtAU0fkEo+KuDzuG9ijROPkcShfor qHwPRfQQocLc7XzxiWTxAav7NcThYyPsNHE8mJJmiiWOGjOOIobG9EKkdNIsGOMr +eoDZo2R2c5MTC2jF7dLAdUQF75lyvRxYeIzGasN3mec39h5ZRwtVCpjykOreZeN 33xyC3+7N1EpKbG77T6m7MMlu2lq8iaXhZop98PxBEn2rzkjFCHfAZZFav+6yrkI Pq8iI+fCOEkYKBNn4TobWP+GRYLDg4TbmUCn7SaSpLRJp2UXX2nEjjC1XR3ezVl2 EOBIpoMqUquudA7lYkiyuef104baG+PCpZQKY+ZD4f1/ZrNSJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFfSLbkH1eu9rI2+XKjWKDOhFTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzU3YmQyNTMtY2Y5NS0z Nzc2LWExNTctYjg4YjUwZTI2ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgOCSF3WZRK0NmUQEo0rBKq81z6Zi2r0p8vMOVEqhQ2ZGalMra0Xx/g zc3VqJgUqBaJ0ue0rxa9WOkgIwvR8xpqCNjo7/2imzayqsdTWBBlevTKWSfaejs3 OGcMGvCWlZKZTsFSopusskmyQjcfR11sn/kG6tmFnBetbAihSSPUKsdC3HIfQDcd euw1rkiDtrvExpnwslZhFXMSogR2zVj/xaxwAuInD2DbOVgaKTivQei1lDkJNdem 8tYpDnDnyoXfGrRnjcO1IglQ+DLNzVKjvdBFJOLh6RTqHjP3SXUXySmYS40qdFin QblqylJuut+ZgKOojFFf96LwXCb+Rf8= -----END CERTIFICATE-----Generated at Sat May 10 19:44:20 2025 by rpki-client