$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8e446b0-1d4b-36b0-9205-38cb59066015.roa File: a8e446b0-1d4b-36b0-9205-38cb59066015.roa (raw, json) Hash identifier: EFG9rMAIzVk1cqt5DmIkkq/whEnb1uGHNbl1pawmvi8= Subject key identifier: 10:11:70:A7:D9:8B:1C:E5:EF:34:CA:A7:D7:50:54:C6:A0:3A:04:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB48FCA1D7EE3F558686A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8e446b0-1d4b-36b0-9205-38cb59066015.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 40.142.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:8f:ca:1d:7e:e3:f5:58:68:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=6d4507a4-baf6-4ee5-a82f-8a88d5670c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:60:fd:fc:71:f6:83:09:0f:43:e1:ab:19: 4c:b8:59:cf:07:f3:c4:27:04:4a:10:68:8e:9d:18: b7:5a:e7:43:f2:3a:f2:b5:e6:e1:ee:57:a3:f2:dd: 4b:6a:44:8c:d1:99:18:a4:79:c0:d7:c5:8b:6b:04: a1:b7:df:5c:7b:16:63:50:7e:3b:d3:07:a2:16:a0: ac:ef:c5:ba:38:4e:ef:f6:97:36:70:de:e8:e8:bb: b3:b0:ca:23:6f:a1:8d:0f:df:18:af:c4:f9:f2:ab: 24:59:f3:46:92:b4:4f:dc:d8:23:9e:08:66:e1:82: 0d:6a:03:e4:4a:6c:e0:56:05:6f:3f:57:fd:40:87: d0:25:88:05:64:74:a7:9f:02:9c:3c:5d:ed:c8:5c: 1d:1f:b7:78:f1:13:dd:ca:40:5d:ee:fa:88:32:ef: fb:5e:ba:a3:b5:8b:8a:21:e7:7a:ef:31:26:06:c7: ca:32:9f:e8:37:50:7e:d6:db:49:b7:06:c8:e8:69: ad:4d:93:0c:81:28:d7:f1:f8:c7:ca:5d:e5:9e:cb: b1:9c:96:e5:2d:70:29:be:3f:6c:1c:4f:3b:83:43: 4f:62:cd:33:ef:cc:c0:08:00:dd:93:2a:7b:6d:2d: 3c:37:d0:d1:2f:58:c4:4d:05:57:6a:5c:7d:f0:11: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:11:70:A7:D9:8B:1C:E5:EF:34:CA:A7:D7:50:54:C6:A0:3A:04:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8e446b0-1d4b-36b0-9205-38cb59066015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:02:8e:c4:6b:3f:98:b3:2f:7e:52:dc:d2:ff:b5:f7:12:1b: 98:3e:3e:0c:ed:3d:0c:5b:13:cb:ab:1a:11:e9:d4:4a:73:3d: cf:f2:9c:c1:38:91:d8:8f:58:f8:bf:68:1d:c6:17:67:4c:11: b9:a2:28:2c:c3:65:b5:00:69:16:99:18:e6:4c:da:cb:39:fb: eb:a7:a8:e2:45:26:44:0e:05:af:e7:c0:0a:e2:15:0b:46:90: 78:3c:33:d5:c6:70:d6:20:96:e1:30:0b:84:16:f7:e0:f3:01: 4e:52:41:04:95:ff:d7:4d:b0:ac:82:4e:75:98:a8:1a:37:15: 77:a0:6f:52:66:e3:57:84:94:7b:0c:09:0e:00:7f:6e:e7:2a: 4a:d1:5b:2d:16:c8:db:3b:f0:1b:03:91:49:7f:72:64:c3:41: ac:a3:53:be:24:b7:2f:52:dc:ab:dc:12:00:c5:8e:1d:71:cf: af:bf:d6:69:eb:95:6d:8c:e1:31:e8:55:08:17:e6:5c:78:e3: a4:18:82:f8:76:51:c1:27:4f:0c:3d:1a:fb:df:1b:c6:ae:ce: ea:7e:e9:ff:74:4f:e0:ec:b5:03:5e:5f:df:82:51:88:41:6b: 54:43:13:55:cc:c6:cb:d6:f4:e3:eb:37:00:9f:2c:ef:7c:66: a1:d5:7a:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtI/KHX7j9VhoakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NmQ0NTA3YTQtYmFmNi00ZWU1LWE4MmYtOGE4OGQ1NjcwYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2xg/fxx9oMJD0PhqxlMuFnPB/PEJwRKEGiO nRi3WudD8jrytebh7lej8t1LakSM0ZkYpHnA18WLawSht99cexZjUH470weiFqCs 78W6OE7v9pc2cN7o6LuzsMojb6GND98Yr8T58qskWfNGkrRP3Ngjnghm4YINagPk SmzgVgVvP1f9QIfQJYgFZHSnnwKcPF3tyFwdH7d48RPdykBd7vqIMu/7XrqjtYuK Ied67zEmBsfKMp/oN1B+1ttJtwbI6GmtTZMMgSjX8fjHyl3lnsuxnJblLXApvj9s HE87g0NPYs0z78zACADdkyp7bS08N9DRL1jETQVXalx98BH3gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBARcKfZixzl7zTKp9dQVMagOgT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYThlNDQ2YjAtMWQ0Yi0z NmIwLTkyMDUtMzhjYjU5MDY2MDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0CjsRrP5izL35S3NL/tfcSG5g+PgztPQxbE8urGhHp1EpzPc/ynME4 kdiPWPi/aB3GF2dMEbmiKCzDZbUAaRaZGOZM2ss5++unqOJFJkQOBa/nwAriFQtG kHg8M9XGcNYgluEwC4QW9+DzAU5SQQSV/9dNsKyCTnWYqBo3FXegb1Jm41eElHsM CQ4Af27nKkrRWy0WyNs78BsDkUl/cmTDQayjU74kty9S3KvcEgDFjh1xz6+/1mnr lW2M4THoVQgX5lx446QYgvh2UcEnTww9GvvfG8auzup+6f90T+DstQNeX9+CUYhB a1RDE1XMxsvW9OPrNwCfLO98ZqHVeuI= -----END CERTIFICATE-----Generated at Sun May 11 15:05:55 2025 by rpki-client