$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3e6d056-6220-3e3f-b4e7-a511d6fe62af.roa File: e3e6d056-6220-3e3f-b4e7-a511d6fe62af.roa (raw, json) Hash identifier: jCXfv+OzQj/cQxeS1041x5QUMGvVP/cZP6zxT08tUCo= Subject key identifier: 99:1B:7B:3A:69:68:7B:9B:68:D5:54:49:80:9D:4E:65:98:3B:AA:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A10886EA966A8EFF47980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3e6d056-6220-3e3f-b4e7-a511d6fe62af.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 40.139.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:10:88:6e:a9:66:a8:ef:f4:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2fb94e93-b174-4cc0-8b6e-8ce5b9902f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:db:de:77:31:08:2e:cf:83:85:c4:5a:93:9e: c3:b3:ea:81:f1:1e:40:8e:26:de:98:0c:63:9b:45: 4e:2d:20:99:e2:d8:3d:9f:f0:08:cc:06:a3:fa:83: b7:f0:64:97:11:fd:33:40:bb:33:a3:b1:88:9c:5d: 14:81:62:5c:9a:37:3e:0d:dd:27:4d:94:1d:0b:a8: a7:11:02:b5:7a:e1:33:66:de:82:76:1c:62:7a:64: 00:f9:1a:76:0a:45:69:c9:e7:32:07:59:d9:a8:06: 2c:c7:2b:f0:d2:a3:49:5e:ba:73:ef:b8:fb:57:0b: 28:ef:ee:e0:b9:0e:ec:58:18:49:26:ec:4f:fd:b1: 74:0a:f9:97:d5:19:32:1b:d0:fa:5e:92:5e:b0:91: 6d:47:f1:83:a1:1c:4d:42:27:4c:49:0b:aa:88:aa: ec:a8:dc:d2:23:89:7b:09:e2:23:f7:2d:38:62:43: 11:3d:1a:f4:88:b2:d9:f0:f5:0d:b2:b0:94:89:8d: f7:22:3f:37:60:90:5e:fe:0f:3e:ba:2e:8f:2a:08: 6e:49:1d:e9:fd:b9:7b:5b:40:44:ba:fc:81:95:ee: eb:3f:bd:14:f4:b2:54:6f:5a:9e:e6:50:6f:63:9d: 9a:86:17:b0:cd:d8:5b:e4:ea:a2:34:25:7b:2d:c7: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1B:7B:3A:69:68:7B:9B:68:D5:54:49:80:9D:4E:65:98:3B:AA:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3e6d056-6220-3e3f-b4e7-a511d6fe62af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.139.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:bd:59:aa:1f:04:8f:80:e7:58:74:a9:4f:5d:29:78:bc:14: 3f:d1:9c:1f:1e:77:9c:bc:07:7d:a0:2b:58:b5:c0:31:d5:f5: 48:f6:fc:00:34:5e:66:b8:e1:6f:18:17:2d:e3:34:ca:b1:d2: 4f:d5:ef:50:0a:0d:4b:96:87:81:7e:4d:b2:15:f5:b8:e9:93: af:67:ea:2b:f2:a5:ab:36:9b:20:37:c3:86:4b:50:13:cd:b5: 91:01:bf:05:9f:85:9b:86:34:8b:97:7d:84:17:bb:b8:65:f3: df:51:30:73:08:5f:4d:d8:c7:b9:be:e2:c9:18:52:23:92:79: 4c:fe:31:19:04:d5:82:18:c9:74:72:f3:6d:36:c6:7e:b5:7e: 43:32:f2:4c:9a:57:9c:9b:c5:d1:7f:97:87:bb:49:a8:56:63: e1:7e:44:31:18:e7:71:de:7a:76:41:d6:dc:c8:25:5b:d9:b1: ce:36:a8:a0:c9:5e:a5:db:56:a0:dd:5f:26:d3:c1:33:f1:37: b7:fc:cd:66:21:32:fe:7f:9c:a2:0b:68:95:21:1e:6d:7c:f1: 35:cf:89:fb:19:e9:f6:87:5c:87:cb:66:a5:77:2d:da:b7:f6: 39:02:7e:e1:77:3c:b2:d3:f5:53:8d:13:ea:a4:50:e9:44:9d: df:e3:c2:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShCIbqlmqO/0eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MmZiOTRlOTMtYjE3NC00Y2MwLThiNmUtOGNlNWI5OTAyZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydvedzEILs+DhcRak57Ds+qB8R5AjibemAxj m0VOLSCZ4tg9n/AIzAaj+oO38GSXEf0zQLszo7GInF0UgWJcmjc+Dd0nTZQdC6in EQK1euEzZt6CdhxiemQA+Rp2CkVpyecyB1nZqAYsxyvw0qNJXrpz77j7Vwso7+7g uQ7sWBhJJuxP/bF0CvmX1RkyG9D6XpJesJFtR/GDoRxNQidMSQuqiKrsqNzSI4l7 CeIj9y04YkMRPRr0iLLZ8PUNsrCUiY33Ij83YJBe/g8+ui6PKghuSR3p/bl7W0BE uvyBle7rP70U9LJUb1qe5lBvY52ahhewzdhb5OqiNCV7Lce42QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkbezppaHubaNVUSYCdTmWYO6rZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTNlNmQwNTYtNjIyMC0z ZTNmLWI0ZTctYTUxMWQ2ZmU2MmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm9WaofBI+A51h0qU9dKXi8FD/RnB8ed5y8B32gK1i1wDHV9Uj2/AA0 Xma44W8YFy3jNMqx0k/V71AKDUuWh4F+TbIV9bjpk69n6ivypas2myA3w4ZLUBPN tZEBvwWfhZuGNIuXfYQXu7hl899RMHMIX03Yx7m+4skYUiOSeUz+MRkE1YIYyXRy 8202xn61fkMy8kyaV5ybxdF/l4e7SahWY+F+RDEY53HeenZB1tzIJVvZsc42qKDJ XqXbVqDdXybTwTPxN7f8zWYhMv5/nKILaJUhHm188TXPifsZ6faHXIfLZqV3Ldq3 9jkCfuF3PLLT9VONE+qkUOlEnd/jwqo= -----END CERTIFICATE-----Generated at Wed May 7 10:55:35 2025 by rpki-client