$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9764edd2-b751-3224-9100-20d11a932c21.roa File: 9764edd2-b751-3224-9100-20d11a932c21.roa (raw, json) Hash identifier: F3OcgJIq22FBDtuVV0e609VCqtSN8BowEDCUqQmGq8s= Subject key identifier: DD:E6:F9:96:5C:FE:A2:4F:93:00:B9:A7:6D:0C:48:8F:C9:08:95:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA1F9E68F94759EF516DE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9764edd2-b751-3224-9100-20d11a932c21.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 40.134.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:1f:9e:68:f9:47:59:ef:51:6d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=2d8af731-52f6-49b3-a145-f03cabacea91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:74:36:b9:c6:14:30:f2:0b:3e:02:ea:75:57: 66:4a:2d:a2:2a:c5:10:69:10:3f:2c:72:7f:15:fb: a6:8a:ff:ad:c8:74:b3:91:bd:77:e8:1f:84:5f:e0: 6b:2d:9f:19:6b:a4:3d:f8:d3:fa:80:93:d6:04:2b: d3:01:a7:17:d9:22:50:eb:fa:d3:45:bf:b6:5b:63: f3:45:14:a3:96:de:5c:05:73:95:39:01:f8:5e:bb: e4:1c:cd:fb:b1:a2:21:0d:b7:1d:13:6f:42:8f:4b: 52:53:0a:8a:bb:68:f9:2b:18:5f:ba:ac:dd:bb:00: c8:61:3f:bb:2f:07:6d:6b:3b:85:1e:62:c5:ae:ac: 52:a0:51:ac:9a:e7:43:7d:c4:5a:00:d2:d7:e7:41: 39:62:72:20:af:2f:be:16:a8:27:45:90:94:d2:2f: 0e:75:a3:dd:9a:3b:3e:ce:e5:47:a3:12:f2:c0:a6: f1:fc:db:66:ec:e7:50:d2:e8:52:5b:f6:8c:fd:4c: 4c:e2:d4:19:33:46:d7:af:01:cd:7a:7d:76:23:d2: 86:ac:c8:24:58:91:02:db:73:3d:03:44:4c:04:65: 33:48:ad:a8:07:68:de:0b:3c:c2:64:8f:45:af:48: 39:2c:26:ee:13:b7:f2:71:41:b6:33:18:10:24:3e: c9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E6:F9:96:5C:FE:A2:4F:93:00:B9:A7:6D:0C:48:8F:C9:08:95:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9764edd2-b751-3224-9100-20d11a932c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.134.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:3c:53:cb:1e:5c:df:99:a4:b2:a9:51:d1:cf:f1:50:48:f9: 8a:67:da:6a:67:09:bd:79:01:bc:34:85:04:0b:ca:df:ea:01: 0a:38:d5:fd:bd:0c:ef:d8:f2:df:33:15:44:e1:21:db:2a:a8: 75:b4:f7:f3:1d:9b:99:43:14:20:34:fe:14:cc:13:d0:ea:f8: f2:54:9c:60:cd:fe:66:92:61:01:17:db:ea:2f:38:d3:cd:5f: c9:01:fd:c8:c9:ee:c0:51:97:ad:7e:5c:c5:d0:b1:b7:54:a7: 8b:03:ee:d0:f4:fd:e4:da:e3:76:b4:22:13:44:6f:e6:28:6a: 76:1b:2d:fb:ea:b8:b7:c7:41:22:39:2e:fe:b9:b1:34:51:a5: 0b:5d:ca:0e:45:0c:83:bf:47:be:33:24:97:7b:7a:c3:8c:ab: 4c:89:cd:fc:56:25:d4:26:39:ae:d7:e4:83:71:eb:98:b8:3b: a4:01:ca:b0:be:fa:2a:da:49:0f:b5:ec:46:27:96:59:7f:fc: b9:a0:73:9a:66:3b:25:b2:3f:c8:8c:19:bb:18:aa:53:97:6e: 1c:e3:7c:ab:84:15:ad:aa:c7:69:aa:c1:b0:6a:6e:93:62:72: 6f:10:fa:68:9c:2b:93:73:7e:f9:63:67:0b:83:36:2c:c9:f5: 5a:67:f4:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyh+eaPlHWe9RbeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk MmQ4YWY3MzEtNTJmNi00OWIzLWExNDUtZjAzY2FiYWNlYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXQ2ucYUMPILPgLqdVdmSi2iKsUQaRA/LHJ/ Ffumiv+tyHSzkb136B+EX+BrLZ8Za6Q9+NP6gJPWBCvTAacX2SJQ6/rTRb+2W2Pz RRSjlt5cBXOVOQH4XrvkHM37saIhDbcdE29Cj0tSUwqKu2j5KxhfuqzduwDIYT+7 LwdtazuFHmLFrqxSoFGsmudDfcRaANLX50E5YnIgry++FqgnRZCU0i8OdaPdmjs+ zuVHoxLywKbx/Ntm7OdQ0uhSW/aM/UxM4tQZM0bXrwHNen12I9KGrMgkWJEC23M9 A0RMBGUzSK2oB2jeCzzCZI9Fr0g5LCbuE7fycUG2MxgQJD7J5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3m+ZZc/qJPkwC5p20MSI/JCJXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTc2NGVkZDItYjc1MS0z MjI0LTkxMDAtMjBkMTFhOTMyYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk8U8seXN+ZpLKpUdHP8VBI+Ypn2mpnCb15Abw0hQQLyt/qAQo41f29 DO/Y8t8zFUThIdsqqHW09/Mdm5lDFCA0/hTME9Dq+PJUnGDN/maSYQEX2+ovONPN X8kB/cjJ7sBRl61+XMXQsbdUp4sD7tD0/eTa43a0IhNEb+YoanYbLfvquLfHQSI5 Lv65sTRRpQtdyg5FDIO/R74zJJd7esOMq0yJzfxWJdQmOa7X5INx65i4O6QByrC+ +iraSQ+17EYnlll//Lmgc5pmOyWyP8iMGbsYqlOXbhzjfKuEFa2qx2mqwbBqbpNi cm8Q+micK5NzfvljZwuDNizJ9Vpn9Ho= -----END CERTIFICATE-----Generated at Mon Jun 30 21:42:19 2025 by rpki-client