$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa File: aa969370-7f24-3b6a-8011-acd3cfea4b49.roa (raw, json) Hash identifier: E4e5aC0S8YRzxEKR2r5WVWoVZwPp7n8qjQqNizpMHxQ= Subject key identifier: 50:DA:7E:26:B7:1F:08:C2:5C:4D:37:84:D2:28:7F:AB:36:19:69:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A38EEA7A8439CF4D8B700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 40.142.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:38:ee:a7:a8:43:9c:f4:d8:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=8e9c2a46-dc29-41b4-b52b-b7162a8eb37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:91:09:a6:53:ed:86:78:0d:68:16:7f:4f:ab: 80:a7:41:87:45:a9:dc:3c:ba:33:23:95:55:8c:38: e7:1f:4e:a1:ab:fe:af:ed:f5:ce:73:fc:f3:d6:b4: a8:7d:41:3a:9a:cb:14:0b:f5:12:e3:82:57:f6:a6: 5e:ea:a6:3d:d6:c7:82:4f:d2:0f:ea:fd:ae:bb:9e: 55:d8:79:49:25:e3:85:e8:4a:72:4d:a6:3c:73:84: 45:af:da:fe:26:fa:61:91:66:24:4e:68:26:0d:ea: fb:98:9e:36:21:27:3b:57:b8:d7:12:4e:4d:8c:72: c4:af:86:46:4f:ab:19:4b:7a:0e:c5:c1:c0:a9:f2: b9:24:9c:d8:1b:e4:ff:8a:02:12:3f:25:14:39:60: 0c:49:a3:5f:be:5a:d4:e7:72:a9:4f:69:ef:a5:9e: 89:e9:ee:36:89:4d:2f:d8:93:b7:ab:ac:d5:1c:06: 23:dc:94:7c:d1:3a:6d:a0:08:13:ed:38:21:23:c8: dc:44:9b:13:23:b4:90:fc:9f:f0:39:2f:7a:bf:0c: 5e:d8:5f:b6:8c:90:83:ae:2a:b4:9b:cf:0f:d6:8f: 28:05:bb:d0:c7:78:6b:82:59:aa:97:d8:b9:1f:33: 82:6d:98:80:68:14:03:b0:61:7a:d1:0f:7f:b6:d2: 4a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DA:7E:26:B7:1F:08:C2:5C:4D:37:84:D2:28:7F:AB:36:19:69:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:0d:90:22:ca:8f:f6:c5:8d:d3:07:eb:fa:65:78:36:82:c0: 6a:68:9c:05:91:7b:c0:97:39:e0:d1:6e:8b:97:09:91:cb:2f: 25:7e:19:b2:75:f0:27:85:75:18:e2:8b:bb:be:6d:01:27:ee: 3d:ee:0e:d9:05:11:8a:b8:f4:73:6d:88:b9:ce:e4:ae:b1:e5: f9:1a:40:de:2b:af:6c:cc:0a:11:c0:e9:dc:4e:bf:ce:23:da: 09:6f:3b:12:20:96:e6:d2:a1:7c:d3:4f:f1:b9:31:cd:95:41: e5:88:fa:61:40:04:b3:14:a3:cb:b3:e0:6e:cb:c4:df:19:f2: 58:e0:4a:36:eb:1d:c9:e4:da:9f:29:9b:10:33:2e:db:6f:be: 54:e3:43:8f:f4:06:d5:20:a7:7f:53:31:26:1c:ea:1f:4a:f2: 12:68:a5:fb:93:43:e4:a9:24:c5:f6:f0:dd:be:61:43:f9:35: 28:0f:e6:0f:b8:ab:14:07:af:be:f1:f9:cd:e3:51:5c:ae:42: 7e:dd:aa:12:fd:19:c8:30:a7:de:98:ff:65:73:e1:4d:f1:99: e4:e5:f0:81:01:ed:1a:93:c5:c3:15:0f:c0:2d:f7:bd:72:4d: eb:49:eb:1c:b3:dc:ea:a6:04:d6:4f:5e:cd:84:b9:80:ce:41: f7:a8:86:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjjup6hDnPTYtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OGU5YzJhNDYtZGMyOS00MWI0LWI1MmItYjcxNjJhOGViMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJEJplPthngNaBZ/T6uAp0GHRancPLozI5VV jDjnH06hq/6v7fXOc/zz1rSofUE6mssUC/US44JX9qZe6qY91seCT9IP6v2uu55V 2HlJJeOF6EpyTaY8c4RFr9r+JvphkWYkTmgmDer7mJ42ISc7V7jXEk5NjHLEr4ZG T6sZS3oOxcHAqfK5JJzYG+T/igISPyUUOWAMSaNfvlrU53KpT2nvpZ6J6e42iU0v 2JO3q6zVHAYj3JR80TptoAgT7TghI8jcRJsTI7SQ/J/wOS96vwxe2F+2jJCDriq0 m88P1o8oBbvQx3hrglmql9i5HzOCbZiAaBQDsGF60Q9/ttJK1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDafia3HwjCXE03hNIof6s2GWmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWE5NjkzNzAtN2YyNC0z YjZhLTgwMTEtYWNkM2NmZWE0YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKI6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0NkCLKj/bFjdMH6/pleDaCwGponAWRe8CXOeDRbouXCZHLLyV+GbJ1 8CeFdRjii7u+bQEn7j3uDtkFEYq49HNtiLnO5K6x5fkaQN4rr2zMChHA6dxOv84j 2glvOxIglubSoXzTT/G5Mc2VQeWI+mFABLMUo8uz4G7LxN8Z8ljgSjbrHcnk2p8p mxAzLttvvlTjQ4/0BtUgp39TMSYc6h9K8hJopfuTQ+SpJMX28N2+YUP5NSgP5g+4 qxQHr77x+c3jUVyuQn7dqhL9Gcgwp96Y/2Vz4U3xmeTl8IEB7RqTxcMVD8At971y TetJ6xyz3OqmBNZPXs2EuYDOQfeohoc= -----END CERTIFICATE-----Generated at Sun May 11 10:44:11 2025 by rpki-client