$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8197e1eb-06b5-329d-84ff-7798bc2eed67.roa File: 8197e1eb-06b5-329d-84ff-7798bc2eed67.roa (raw, json) Hash identifier: lIS5RWq/CNgOVrPcGTK0pyl95nWqzmeJOqgpXclJ/j0= Subject key identifier: 84:A0:C4:08:31:E7:97:4E:79:AB:68:96:DF:17:43:CB:F9:B8:5C:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A21509D7751C242661880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8197e1eb-06b5-329d-84ff-7798bc2eed67.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 14439 IP address blocks: 40.135.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:21:50:9d:77:51:c2:42:66:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=50f19a21-5d5c-4bb1-b2cf-d4c07f0f923a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:62:85:ee:f0:bd:c8:15:f2:1c:4e:0f:11:1a: 85:be:9f:de:8a:5b:5b:4d:a2:dc:92:66:04:63:9d: c0:fe:66:4c:74:6a:95:9b:a9:1d:a4:90:86:3c:d9: 0a:b2:b0:f8:bd:2e:b6:0a:c0:69:a9:65:a7:1b:4b: de:a1:16:92:45:d6:21:aa:5e:3a:c4:5d:37:d0:1c: 7c:99:ee:3b:6c:cc:57:7d:62:11:49:35:25:ec:ed: c8:f3:9a:da:89:bd:c2:a3:aa:af:14:83:8a:e7:6f: 66:9b:5b:00:e4:3a:0e:e8:90:f6:9a:d3:3c:21:6c: 3e:37:75:36:9b:17:36:b0:f5:8b:b9:d0:0f:f6:f4: 5a:0b:9b:31:ef:e4:c2:0b:7f:82:95:8d:35:e2:4f: df:f7:23:97:d5:31:f3:34:31:4e:e2:ec:8b:eb:94: 8d:d8:93:de:19:bb:6b:5e:a9:55:5f:ca:a6:c2:a7: b3:91:64:a6:53:25:47:77:88:c4:66:c1:c2:63:f2: 5f:19:1c:22:01:ba:bf:ad:36:2e:17:cd:fe:12:40: 8e:7e:44:8f:42:43:dd:57:b5:55:3d:4b:3e:29:76: c2:77:66:f8:7c:85:b6:a6:a9:1c:4b:f6:fb:86:07: 65:a1:12:a2:da:56:5f:79:1a:38:3a:24:74:27:d0: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A0:C4:08:31:E7:97:4E:79:AB:68:96:DF:17:43:CB:F9:B8:5C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8197e1eb-06b5-329d-84ff-7798bc2eed67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.135.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:88:5d:67:bf:3f:29:60:aa:94:be:69:76:55:7b:8b:ae:17: 24:05:a1:8a:c5:f7:fe:24:d5:8c:5f:1f:a1:d2:59:c9:ef:34: 2d:ca:5d:99:9b:ee:48:b7:df:c3:a1:66:a6:29:97:0a:28:fb: e2:9a:5e:89:0e:14:66:0f:c6:0f:70:04:0b:81:3a:c5:fa:9d: dc:d2:9a:12:61:49:bf:23:4f:e0:f2:38:95:b3:81:94:30:65: 7c:79:52:d1:c1:0a:93:e3:63:8f:42:ae:09:ad:12:44:e0:8b: e5:74:b6:19:01:61:4f:93:f6:82:61:f2:13:8c:4f:00:69:f7: 1e:b5:63:91:2f:ac:39:f4:7e:85:ed:4a:aa:cd:bc:4f:ca:31: 62:bb:62:37:24:41:86:d1:e3:89:d4:58:08:11:3d:91:5b:b0: 4c:a6:64:b9:01:55:4e:f3:de:6c:95:eb:2b:5d:98:68:98:dc: e3:c1:82:6d:00:ab:67:e0:16:88:45:df:88:56:3d:a3:b5:d5: 69:2a:f9:0b:2b:aa:30:43:54:45:78:fd:fb:76:63:89:c4:a9: 08:d7:08:9e:f7:0e:b4:d4:f3:33:c7:49:7f:e7:83:28:01:0b: 1f:5c:e9:1a:e5:8c:5d:b1:c4:c6:25:5c:9d:93:c9:e7:7c:4a: 8f:ae:9d:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiFQnXdRwkJmGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTBmMTlhMjEtNWQ1Yy00YmIxLWIyY2YtZDRjMDdmMGY5MjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWKF7vC9yBXyHE4PERqFvp/eiltbTaLckmYE Y53A/mZMdGqVm6kdpJCGPNkKsrD4vS62CsBpqWWnG0veoRaSRdYhql46xF030Bx8 me47bMxXfWIRSTUl7O3I85raib3Co6qvFIOK529mm1sA5DoO6JD2mtM8IWw+N3U2 mxc2sPWLudAP9vRaC5sx7+TCC3+ClY014k/f9yOX1THzNDFO4uyL65SN2JPeGbtr XqlVX8qmwqezkWSmUyVHd4jEZsHCY/JfGRwiAbq/rTYuF83+EkCOfkSPQkPdV7VV PUs+KXbCd2b4fIW2pqkcS/b7hgdloRKi2lZfeRo4OiR0J9CuowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISgxAgx55dOeatolt8XQ8v5uFzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODE5N2UxZWItMDZiNS0z MjlkLTg0ZmYtNzc5OGJjMmVlZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIcSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyIXWe/PylgqpS+aXZVe4uuFyQFoYrF9/4k1YxfH6HSWcnvNC3KXZmb 7ki338OhZqYplwoo++KaXokOFGYPxg9wBAuBOsX6ndzSmhJhSb8jT+DyOJWzgZQw ZXx5UtHBCpPjY49CrgmtEkTgi+V0thkBYU+T9oJh8hOMTwBp9x61Y5EvrDn0foXt SqrNvE/KMWK7YjckQYbR44nUWAgRPZFbsEymZLkBVU7z3myV6ytdmGiY3OPBgm0A q2fgFohF34hWPaO11Wkq+QsrqjBDVEV4/ft2Y4nEqQjXCJ73DrTU8zPHSX/ngygB Cx9c6RrljF2xxMYlXJ2Tyed8So+unSA= -----END CERTIFICATE-----Generated at Sun May 11 10:31:26 2025 by rpki-client