$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa File: f642a687-a386-3ce5-8205-1067458f0238.roa (raw, json) Hash identifier: QPSKl2jLQVcYyGWP7okdCP5RbKdLup/o0BelSt88pY8= Subject key identifier: 41:07:30:14:6C:34:3C:A0:E5:14:7E:08:82:F2:FD:A6:93:34:0F:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D16586B2B27C1A5ECAB72680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 40.142.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:86:b2:b2:7c:1a:5e:ca:b7:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=57c6dc85-aace-41ff-8a98-f81706022973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c0:32:a6:05:50:f4:51:06:0b:2d:79:1c:cc: 95:92:9a:c2:d9:17:e8:fb:9e:08:55:fd:52:d0:82: 66:82:38:a7:3b:e1:10:6d:de:a3:95:6b:cb:4d:1b: df:b7:98:f2:4a:99:95:a0:46:22:e4:91:90:78:34: f1:cf:27:c5:46:4e:59:7f:56:89:0f:19:30:3c:11: 5e:f4:da:77:78:7e:64:ea:c8:5f:f5:66:8f:36:ee: ad:77:23:aa:11:ca:94:f9:0b:e6:ad:e1:c8:d8:38: 82:f3:36:32:37:70:ee:e3:8c:27:5c:b0:37:86:a0: c8:39:f6:f3:31:13:35:b6:5f:e4:6c:10:6d:f6:4d: 2a:eb:c1:09:70:15:7d:5d:45:08:d4:b2:21:1f:10: 1b:35:e2:ea:c0:51:0d:09:15:79:a3:df:0f:77:ba: 89:2d:2a:e2:fb:4b:34:97:30:72:59:e7:b6:34:3d: cf:02:7e:ae:9f:4d:7c:18:0a:29:42:49:56:86:d1: df:06:f5:da:1f:d2:6c:b8:53:79:2f:49:fd:1c:0c: 00:e5:ab:8f:c9:8d:85:f0:76:77:a8:08:66:13:85: f2:01:84:5b:7e:82:0d:e4:f2:e4:a7:94:d3:5a:6e: 59:46:3f:28:73:f4:1c:12:9b:69:d7:68:04:b7:75: ee:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:07:30:14:6C:34:3C:A0:E5:14:7E:08:82:F2:FD:A6:93:34:0F:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d9:39:e6:77:22:cc:c5:f4:a6:86:e7:af:c6:4c:d7:05:3e: dd:0a:eb:85:a4:b4:9c:61:1c:bb:9a:1b:bf:f9:e4:b7:b6:66: ff:58:b1:f6:b5:51:3a:90:cf:bd:aa:84:ad:af:67:52:ef:7f: da:be:5d:37:41:4b:e1:41:e7:e9:94:1c:8b:0a:66:c9:0b:e9: fc:da:b4:1a:1a:3e:ce:21:7e:ea:ef:78:9b:31:46:82:cd:f1: 74:cb:ed:16:2c:b8:f0:40:ee:e3:c6:3b:80:f3:b8:38:a0:9c: bc:f3:29:e2:ca:46:b1:2c:35:0e:56:19:ab:9c:9d:70:b7:fe: 18:22:4e:b5:3a:20:b6:21:af:65:f3:56:c0:d7:10:64:1f:0d: de:d9:61:52:17:8b:3d:b2:2d:74:a5:f0:07:43:0c:bf:22:7a: 97:a6:1d:06:5a:e8:a0:ee:46:8e:4a:20:c5:07:e6:24:6e:97: cc:ab:54:f2:ad:17:ef:41:e2:a0:21:80:8b:62:fc:22:1f:29: 8c:28:f0:fa:8b:1d:1b:c4:61:38:6a:06:52:a1:9e:14:d1:6b: 78:ad:e9:c6:71:21:70:5a:2e:3a:65:9d:14:8e:01:4d:05:ae: 12:04:85:54:e6:59:d3:e7:70:6d:a9:81:2f:d0:3c:cd:44:6d: 0b:ba:a5:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYaysnwaXsq3JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NTdjNmRjODUtYWFjZS00MWZmLThhOTgtZjgxNzA2MDIyOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cAypgVQ9FEGCy15HMyVkprC2Rfo+54IVf1S 0IJmgjinO+EQbd6jlWvLTRvft5jySpmVoEYi5JGQeDTxzyfFRk5Zf1aJDxkwPBFe 9Np3eH5k6shf9WaPNu6tdyOqEcqU+QvmreHI2DiC8zYyN3Du44wnXLA3hqDIOfbz MRM1tl/kbBBt9k0q68EJcBV9XUUI1LIhHxAbNeLqwFENCRV5o98Pd7qJLSri+0s0 lzByWee2ND3PAn6un018GAopQklWhtHfBvXaH9JsuFN5L0n9HAwA5auPyY2F8HZ3 qAhmE4XyAYRbfoIN5PLkp5TTWm5ZRj8oc/QcEptp12gEt3XuaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEHMBRsNDyg5RR+CILy/aaTNA8eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjY0MmE2ODctYTM4Ni0z Y2U1LTgyMDUtMTA2NzQ1OGYwMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKI6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHZOeZ3IszF9KaG56/GTNcFPt0K64WktJxhHLuaG7/55Le2Zv9Ysfa1 UTqQz72qhK2vZ1Lvf9q+XTdBS+FB5+mUHIsKZskL6fzatBoaPs4hfurveJsxRoLN 8XTL7RYsuPBA7uPGO4DzuDignLzzKeLKRrEsNQ5WGaucnXC3/hgiTrU6ILYhr2Xz VsDXEGQfDd7ZYVIXiz2yLXSl8AdDDL8iepemHQZa6KDuRo5KIMUH5iRul8yrVPKt F+9B4qAhgIti/CIfKYwo8PqLHRvEYThqBlKhnhTRa3it6cZxIXBaLjplnRSOAU0F rhIEhVTmWdPncG2pgS/QPM1EbQu6pdM= -----END CERTIFICATE-----Generated at Mon May 12 23:14:22 2025 by rpki-client