$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de489e93-9e7d-3cda-8126-d8c859ae8754.roa File: de489e93-9e7d-3cda-8126-d8c859ae8754.roa (raw, json) Hash identifier: 9KLdUwqtMqgyTRzBRyfXLlnWtw0UrgBmjHxuzKORXDw= Subject key identifier: 48:F8:A6:79:CF:20:82:22:8E:FB:08:2B:AF:84:B5:8A:FB:7B:AF:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149F76273C8E9841F354140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de489e93-9e7d-3cda-8126-d8c859ae8754.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 40.142.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f7:62:73:c8:e9:84:1f:35:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=9d04917e-6a7b-4afd-a4df-0a41cbe061d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:79:41:83:c9:19:b8:ca:77:ab:ce:6b:a7: 59:83:55:48:36:17:0b:79:27:ae:8e:73:b4:3d:b1: d3:30:5f:01:e2:55:88:24:74:af:a5:97:02:1f:86: 91:9a:1a:9d:6b:11:d9:14:a7:15:e2:3e:89:fc:d8: 67:4d:cb:4d:18:1b:3a:40:85:90:8a:a3:74:cc:a1: 09:eb:fa:54:86:c0:73:bf:78:5f:72:58:50:ea:8e: 33:38:fc:a5:fd:53:b2:23:91:5f:60:58:99:c9:7d: 93:b8:40:ca:4e:1c:e3:5d:21:1c:5f:a0:6d:94:ab: 6a:44:7b:20:ff:8e:2c:a8:9e:98:28:3d:8e:6e:c3: a2:57:ac:18:28:a7:30:95:ce:c1:36:99:6c:a5:ca: 4b:93:08:82:04:c9:90:eb:70:44:ee:cc:4e:9f:9b: ef:74:04:0c:83:93:f3:6f:73:e2:2a:56:11:3f:03: ef:f1:4c:5b:17:7b:0f:0e:67:5b:27:ec:9a:40:bb: 79:ba:84:6f:31:47:71:69:8c:0a:08:46:6f:d5:13: 74:e4:6a:1b:2e:91:94:5d:de:8a:bc:6f:da:29:37: 4a:74:e6:45:1a:b6:22:b5:19:f7:26:dc:b4:95:25: db:70:e5:27:c4:80:1c:d4:45:e7:ba:45:5d:78:ae: fe:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F8:A6:79:CF:20:82:22:8E:FB:08:2B:AF:84:B5:8A:FB:7B:AF:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de489e93-9e7d-3cda-8126-d8c859ae8754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:8a:77:da:95:e1:0b:6a:dc:0b:23:3b:cc:72:b0:21:32:70: 6d:2b:40:7e:4d:32:d7:f5:e6:2e:bb:fd:dc:60:b6:4a:8a:a0: 48:b5:e6:e1:4d:e7:e0:a5:06:02:ec:ff:c2:3a:23:01:da:dc: 89:2a:a4:61:0d:9d:53:39:91:f5:50:4c:b3:29:7f:98:fc:4b: 20:f3:b5:78:2b:25:11:e5:07:e9:05:7a:6d:e2:44:43:ff:30: 3c:51:cd:0e:1b:42:70:96:2a:7d:41:85:77:5d:d8:74:60:1c: 6a:0f:e0:f7:20:e5:40:86:80:ba:2f:57:c7:c9:cc:4c:e4:1a: 98:2f:1a:a5:a1:51:0d:9b:45:5b:e0:9d:7c:4c:81:eb:11:97: e6:c7:85:42:ca:0a:8c:08:cb:7f:8a:5a:57:63:3f:87:cd:e9: 49:dc:ec:21:e0:96:b1:bf:d0:d3:90:1f:f2:ac:27:9f:ac:6e: 94:25:26:95:f6:f8:25:5e:f0:06:50:b8:4c:6a:96:a7:3e:1c: b2:88:35:01:19:b9:a8:c2:ab:a5:07:f6:4e:b8:92:51:12:ea: aa:ec:24:55:bd:00:34:fd:fc:5d:3e:57:44:9a:db:53:7a:e1: 3c:09:a5:bb:e6:da:6e:44:aa:e3:f4:ec:09:90:c4:ff:07:ec: 1a:ea:35:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfdic8jphB81QUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OWQwNDkxN2UtNmE3Yi00YWZkLWE0ZGYtMGE0MWNiZTA2MWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplZ5QYPJGbjKd6vOa6dZg1VINhcLeSeujnO0 PbHTMF8B4lWIJHSvpZcCH4aRmhqdaxHZFKcV4j6J/NhnTctNGBs6QIWQiqN0zKEJ 6/pUhsBzv3hfclhQ6o4zOPyl/VOyI5FfYFiZyX2TuEDKThzjXSEcX6BtlKtqRHsg /44sqJ6YKD2ObsOiV6wYKKcwlc7BNplspcpLkwiCBMmQ63BE7sxOn5vvdAQMg5Pz b3PiKlYRPwPv8UxbF3sPDmdbJ+yaQLt5uoRvMUdxaYwKCEZv1RN05GobLpGUXd6K vG/aKTdKdOZFGrYitRn3Jty0lSXbcOUnxIAc1EXnukVdeK7+iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEj4pnnPIIIijvsIK6+EtYr7e6/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGU0ODllOTMtOWU3ZC0z Y2RhLTgxMjYtZDhjODU5YWU4NzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI7IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmKd9qV4Qtq3AsjO8xysCEycG0rQH5NMtf15i67/dxgtkqKoEi15uFN 5+ClBgLs/8I6IwHa3IkqpGENnVM5kfVQTLMpf5j8SyDztXgrJRHlB+kFem3iREP/ MDxRzQ4bQnCWKn1BhXdd2HRgHGoP4Pcg5UCGgLovV8fJzEzkGpgvGqWhUQ2bRVvg nXxMgesRl+bHhULKCowIy3+KWldjP4fN6Unc7CHglrG/0NOQH/KsJ5+sbpQlJpX2 +CVe8AZQuExqlqc+HLKINQEZuajCq6UH9k64klES6qrsJFW9ADT9/F0+V0Sa21N6 4TwJpbvm2m5EquP07AmQxP8H7BrqNQ8= -----END CERTIFICATE-----Generated at Sun May 11 09:33:21 2025 by rpki-client