$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e69787f3-2ec1-3f53-901b-4da1c04da846.roa File: e69787f3-2ec1-3f53-901b-4da1c04da846.roa (raw, json) Hash identifier: C49S1EJ1mYDkzNtV0bWm4cX6ruvDJFwBZNhoJb81+Ew= Subject key identifier: 56:53:65:6D:E0:CB:42:4E:C1:14:DE:50:D1:99:4E:7E:99:EC:E3:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A38D63E201F960D535180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e69787f3-2ec1-3f53-901b-4da1c04da846.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 40.141.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:38:d6:3e:20:1f:96:0d:53:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2e573903-c76c-465a-9262-075cabd5d93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fe:bd:67:ca:1d:1c:eb:26:ba:3d:d2:fe:36: 09:21:8f:99:f8:72:84:b1:fe:37:0b:13:d0:d3:d1: a7:cf:a2:95:8a:7f:e4:a0:02:a5:78:fa:81:ea:48: 12:2f:04:e1:fb:3f:b2:68:fa:a3:eb:bf:3d:cc:58: 1e:73:31:9e:af:be:e1:a9:79:3a:fa:c4:69:79:8c: 9c:4c:a9:ad:7c:b3:fd:96:fb:67:62:16:29:ca:01: e6:d9:26:f5:6d:50:e4:81:45:62:2c:7c:b4:ba:73: 34:85:de:75:5a:e3:9c:f7:5d:27:4c:4b:a5:8b:57: 83:01:a1:ee:d9:ec:b9:b7:a0:79:96:65:60:93:3f: 9c:ab:29:f3:b6:e7:17:21:02:d5:de:57:81:1e:c6: d5:ef:e2:4e:9b:19:0f:fd:69:3f:84:03:bb:2f:98: 75:06:e4:34:1c:38:6e:b8:13:78:c4:05:bc:96:87: d0:09:4e:2e:51:33:cf:3b:da:6b:d6:5d:d9:cd:d2: 3f:df:9c:63:79:e3:1b:53:4b:91:42:b0:22:5d:9c: 8d:6e:ba:5a:45:9a:4d:2f:58:d3:0f:67:c3:e6:4c: d4:7c:80:75:1e:dc:5e:56:bf:a6:57:d4:3e:a3:ed: 7a:19:f5:4b:a0:2e:cb:4b:4b:70:4e:27:bd:b1:43: 83:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:53:65:6D:E0:CB:42:4E:C1:14:DE:50:D1:99:4E:7E:99:EC:E3:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e69787f3-2ec1-3f53-901b-4da1c04da846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.141.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:28:2e:cb:e1:13:b1:ca:30:c1:95:ed:6f:9d:9a:57:f7:2e: 23:52:ca:e5:3b:bc:a2:af:2b:76:ef:1a:8f:98:76:d5:30:01: 1f:e1:75:f6:af:c8:d5:af:68:35:a8:35:fc:c9:61:39:e7:c5: 7b:9d:7e:32:7c:60:2c:91:38:09:9b:54:fe:87:10:42:a5:f5: 1b:d8:11:b7:34:23:f5:ad:93:16:56:56:11:cc:97:92:12:9b: 95:d2:48:7d:bc:59:eb:37:b2:05:11:1c:ce:74:2c:99:d5:aa: dd:25:eb:20:17:49:4b:b6:23:7b:20:c9:71:d0:01:35:ce:46: 41:a0:d5:b1:b0:9e:5e:c0:7c:b3:49:42:87:c0:0b:d6:9e:d1: 1f:9e:25:4f:93:5b:bd:64:9c:de:90:54:6c:d8:70:29:84:36: 2b:29:95:8e:1a:90:53:bf:bc:ea:95:25:af:a5:7a:b7:ea:5f: 55:99:26:b0:6b:da:97:99:3b:02:03:1a:70:8d:be:cd:b0:73: 96:7a:84:4b:02:97:6b:05:d9:2f:70:33:07:8b:9a:b4:36:cf: a6:64:9f:65:e4:fa:34:10:51:8c:cc:f8:8a:57:c5:4b:38:54: bb:cc:d5:c3:cb:e3:02:08:e1:b7:b4:ab:ec:bc:21:2e:cf:b5: 08:e5:df:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjjWPiAflg1TUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MmU1NzM5MDMtYzc2Yy00NjVhLTkyNjItMDc1Y2FiZDVkOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf69Z8odHOsmuj3S/jYJIY+Z+HKEsf43CxPQ 09Gnz6KVin/koAKlePqB6kgSLwTh+z+yaPqj6789zFgeczGer77hqXk6+sRpeYyc TKmtfLP9lvtnYhYpygHm2Sb1bVDkgUViLHy0unM0hd51WuOc910nTEuli1eDAaHu 2ey5t6B5lmVgkz+cqynztucXIQLV3leBHsbV7+JOmxkP/Wk/hAO7L5h1BuQ0HDhu uBN4xAW8lofQCU4uUTPPO9pr1l3ZzdI/35xjeeMbU0uRQrAiXZyNbrpaRZpNL1jT D2fD5kzUfIB1HtxeVr+mV9Q+o+16GfVLoC7LS0twTie9sUODUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZTZW3gy0JOwRTeUNGZTn6Z7OMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTY5Nzg3ZjMtMmVjMS0z ZjUzLTkwMWItNGRhMWMwNGRhODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI2lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwoLsvhE7HKMMGV7W+dmlf3LiNSyuU7vKKvK3bvGo+YdtUwAR/hdfav yNWvaDWoNfzJYTnnxXudfjJ8YCyROAmbVP6HEEKl9RvYEbc0I/WtkxZWVhHMl5IS m5XSSH28Wes3sgURHM50LJnVqt0l6yAXSUu2I3sgyXHQATXORkGg1bGwnl7AfLNJ QofAC9ae0R+eJU+TW71knN6QVGzYcCmENisplY4akFO/vOqVJa+lerfqX1WZJrBr 2peZOwIDGnCNvs2wc5Z6hEsCl2sF2S9wMweLmrQ2z6Zkn2Xk+jQQUYzM+IpXxUs4 VLvM1cPL4wII4be0q+y8IS7PtQjl35Y= -----END CERTIFICATE-----Generated at Tue May 6 16:57:11 2025 by rpki-client