$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3859d3-ccca-3502-8ceb-55ebea7d697f.roa File: aa3859d3-ccca-3502-8ceb-55ebea7d697f.roa (raw, json) Hash identifier: xrjLOqnbejcNXvDdGf5H/3ORwC6eE6mlcR0Yrqmg3lk= Subject key identifier: A7:FD:B2:61:FE:D4:D0:F7:07:D1:6A:5B:18:DB:CE:7A:DA:77:28:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A389B23E246E3F4629B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3859d3-ccca-3502-8ceb-55ebea7d697f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 40.131.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:38:9b:23:e2:46:e3:f4:62:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=5368cdb9-be1c-4b37-9186-b98c8b2431a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:df:8b:75:ac:35:8a:15:0b:60:ed:fc:7a: d8:5a:93:4e:86:37:df:19:1c:79:3d:31:71:7c:ee: 9b:3a:b3:f7:fc:cd:a4:ce:ba:9d:2c:b1:2b:d2:68: 8b:8c:41:f7:00:5f:6e:28:a6:6e:7c:54:98:03:e9: 40:64:89:12:3d:92:ea:7b:89:ef:6b:83:de:de:50: 3b:8c:d3:99:3a:13:d5:08:04:cf:3c:8d:a3:5e:06: 7c:95:59:08:2a:cc:af:38:5d:6c:46:aa:51:a2:25: 14:fa:ed:ee:62:66:43:85:eb:4a:44:85:01:f8:32: 25:c1:8c:58:d1:d2:f3:6d:02:22:28:d0:2e:0c:60: 80:3d:f8:8a:c4:31:05:97:ca:ab:88:ad:f0:7d:7e: f5:0c:11:22:81:f0:a2:18:0c:3f:03:2d:2a:a5:5f: b9:b5:02:2b:8b:92:d1:a6:65:e3:c6:30:76:62:a8: 50:7f:3c:41:af:cf:7f:83:9e:d0:16:e3:95:c8:cc: 1d:ed:dd:b2:38:9a:a2:4f:43:12:50:5e:fe:27:c5: fb:5a:33:9d:75:86:37:31:9e:16:1c:a7:2b:bd:8a: 8a:c7:50:63:6d:0d:42:ef:5b:2d:f9:6c:28:9d:57: a9:b6:49:a4:a1:62:7f:06:64:90:1a:5c:7d:f6:45: 73:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FD:B2:61:FE:D4:D0:F7:07:D1:6A:5B:18:DB:CE:7A:DA:77:28:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3859d3-ccca-3502-8ceb-55ebea7d697f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.131.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:82:c5:21:c5:89:2f:50:13:11:78:97:79:3f:1b:70:8d:0a: 1b:a7:56:35:c1:41:57:cd:df:80:b8:f2:3b:fe:22:4b:8f:7a: 8e:29:05:1d:a1:7e:56:ee:c7:93:ce:7c:b1:64:ca:4c:7a:d8: ca:c2:04:80:e5:a8:48:eb:5e:78:eb:19:ef:f5:89:a5:3b:1f: 07:cd:7d:f9:f6:e4:a7:a9:b6:7a:9c:cf:9c:56:8c:29:a7:3d: e2:33:f1:6e:ec:d2:36:14:f6:6d:05:9e:be:30:00:cf:1d:19: bb:2f:b2:ec:c8:34:97:1a:e4:d1:22:30:89:f9:04:47:6a:a2: f7:51:5f:f0:8c:cb:8f:e7:d7:89:4c:10:2c:db:00:21:4d:b0: dd:57:ae:76:97:59:60:df:08:98:e1:89:f2:c1:34:dd:02:47: e5:fd:62:5e:13:94:39:cb:db:c7:cc:56:5f:d4:42:48:4a:24: f1:15:5f:cc:46:85:5e:ec:18:bb:1e:b6:12:37:3f:1e:e3:40: 59:7a:1a:14:08:ec:eb:c5:4c:e6:fa:f5:d4:8c:3b:89:74:82: 6b:2c:dd:60:da:e5:7d:1b:bf:d7:23:d6:60:97:83:25:6c:7d: 71:4b:f1:5c:77:b8:f2:df:ef:cf:20:85:f4:eb:34:53:88:fe: c9:c2:60:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjibI+JG4/Rim0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTM2OGNkYjktYmUxYy00YjM3LTkxODYtYjk4YzhiMjQzMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEXfi3WsNYoVC2Dt/HrYWpNOhjffGRx5PTFx fO6bOrP3/M2kzrqdLLEr0miLjEH3AF9uKKZufFSYA+lAZIkSPZLqe4nva4Pe3lA7 jNOZOhPVCATPPI2jXgZ8lVkIKsyvOF1sRqpRoiUU+u3uYmZDhetKRIUB+DIlwYxY 0dLzbQIiKNAuDGCAPfiKxDEFl8qriK3wfX71DBEigfCiGAw/Ay0qpV+5tQIri5LR pmXjxjB2YqhQfzxBr89/g57QFuOVyMwd7d2yOJqiT0MSUF7+J8X7WjOddYY3MZ4W HKcrvYqKx1BjbQ1C71st+WwonVeptkmkoWJ/BmSQGlx99kVzkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf9smH+1ND3B9FqWxjbznradyhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEzODU5ZDMtY2NjYS0z NTAyLThjZWItNTVlYmVhN2Q2OTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIPHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+CxSHFiS9QExF4l3k/G3CNChunVjXBQVfN34C48jv+IkuPeo4pBR2h flbux5POfLFkykx62MrCBIDlqEjrXnjrGe/1iaU7HwfNffn25Keptnqcz5xWjCmn PeIz8W7s0jYU9m0Fnr4wAM8dGbsvsuzINJca5NEiMIn5BEdqovdRX/CMy4/n14lM ECzbACFNsN1XrnaXWWDfCJjhifLBNN0CR+X9Yl4TlDnL28fMVl/UQkhKJPEVX8xG hV7sGLsethI3Px7jQFl6GhQI7OvFTOb69dSMO4l0gmss3WDa5X0bv9cj1mCXgyVs fXFL8Vx3uPLf788ghfTrNFOI/snCYAI= -----END CERTIFICATE-----Generated at Sun May 11 04:24:23 2025 by rpki-client