$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa File: fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa (raw, json) Hash identifier: 9IOfTxcYzvrP09kQi+C25h6D7FubNAWxUx5Zyye+H8s= Subject key identifier: F6:71:D9:76:75:CD:8E:B1:64:19:23:8C:E6:F0:12:6B:D5:1C:3C:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A48B2096E31460F67B440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 14822 IP address blocks: 40.129.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:48:b2:09:6e:31:46:0f:67:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a35a0167-fde3-45a5-ac8e-af55ae588963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8f:82:5d:89:8e:6e:75:68:0d:92:57:e4:4a: 07:0f:ec:0d:56:34:21:3b:7a:f0:8e:0e:d5:c9:e3: 3d:75:e9:fd:2e:7a:07:96:dd:29:90:81:41:82:6c: 50:7a:a6:c9:f9:53:b2:94:0c:2c:ef:e7:be:9d:de: bc:a0:2d:13:9a:36:4a:78:78:d6:cb:f3:22:d4:8d: 7d:b0:08:85:63:a9:3d:0a:30:c4:14:ed:ac:30:f5: 00:a0:57:3b:c0:d5:5b:85:88:c5:14:d2:2e:2e:0f: 10:14:45:b6:30:c4:79:0e:dd:47:97:a2:10:7d:96: 02:fc:98:ea:01:6f:2f:7e:b0:df:b5:ad:39:a5:32: c5:51:57:ca:ee:5c:c4:c4:b1:0f:80:9a:4e:33:66: 66:a5:5b:c8:8c:6d:4d:17:4f:13:88:34:3f:f0:12: a2:bf:26:5b:06:0e:2d:f5:c9:7b:c0:ab:74:a5:aa: ec:4d:1f:bc:1e:aa:bf:42:c8:24:e2:97:66:8f:64: 97:e5:55:b3:30:e3:88:63:97:1a:e9:af:91:2d:b8: f7:2a:63:3e:9f:1b:88:06:51:11:96:1f:f3:4e:6f: db:26:f8:5f:dd:dd:de:25:a6:90:79:0f:f7:f5:c6: b1:34:ef:29:5f:ce:12:92:f5:8e:3f:d9:09:a0:df: 1c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:71:D9:76:75:CD:8E:B1:64:19:23:8C:E6:F0:12:6B:D5:1C:3C:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.129.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:0c:29:f0:01:07:12:e0:60:7f:9c:79:5e:92:d1:82:ad:6d: f5:66:80:ec:e4:e2:65:3c:4a:fe:59:2a:34:f2:c4:8a:bf:40: bb:4f:29:e4:06:fb:aa:5b:4a:c0:e4:c9:f3:55:03:08:65:4b: 22:91:86:20:6e:af:c7:6c:ab:9e:7d:74:b4:ff:0c:6a:60:34: 5c:7b:1c:92:c0:9e:13:a5:2b:66:f4:5b:32:7c:c9:68:fa:6d: 55:df:42:8f:09:48:10:eb:7b:23:76:49:ff:01:80:f1:40:71: 22:11:5b:58:61:2d:9c:3f:f6:39:19:d9:e5:64:d2:72:60:7d: 5a:db:d1:78:f0:68:36:9d:69:5a:50:e3:5a:6d:78:22:2b:4a: fd:8c:96:a8:a8:b2:d6:b0:bd:f6:7b:a4:95:68:f2:c4:81:e4: 2a:ec:cb:81:ee:3e:2d:a8:28:7d:3c:1e:bf:fb:47:50:ff:c0: 26:47:63:3f:4a:65:3d:13:62:94:09:f2:1b:c1:9f:c5:18:4d: 32:bb:71:df:97:5d:c2:17:85:8b:f1:ff:71:85:f8:fe:b8:8d: db:60:e5:f3:9d:39:51:06:ae:35:c4:88:ae:ed:66:87:5c:7c: 7f:b4:72:48:5c:b3:40:d9:4c:63:a9:c1:3a:00:12:a6:3f:3f: 55:ae:bd:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkiyCW4xRg9ntEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTM1YTAxNjctZmRlMy00NWE1LWFjOGUtYWY1NWFlNTg4OTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4+CXYmObnVoDZJX5EoHD+wNVjQhO3rwjg7V yeM9den9LnoHlt0pkIFBgmxQeqbJ+VOylAws7+e+nd68oC0TmjZKeHjWy/Mi1I19 sAiFY6k9CjDEFO2sMPUAoFc7wNVbhYjFFNIuLg8QFEW2MMR5Dt1Hl6IQfZYC/Jjq AW8vfrDfta05pTLFUVfK7lzExLEPgJpOM2ZmpVvIjG1NF08TiDQ/8BKivyZbBg4t 9cl7wKt0parsTR+8Hqq/Qsgk4pdmj2SX5VWzMOOIY5ca6a+RLbj3KmM+nxuIBlER lh/zTm/bJvhf3d3eJaaQeQ/39caxNO8pX84SkvWOP9kJoN8cHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZx2XZ1zY6xZBkjjObwEmvVHDzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmE3ODljNWYtYzExMy0z YTMzLThmMWQtYjc5MmQyNmQzMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYMKfABBxLgYH+ceV6S0YKtbfVmgOzk4mU8Sv5ZKjTyxIq/QLtPKeQG +6pbSsDkyfNVAwhlSyKRhiBur8dsq559dLT/DGpgNFx7HJLAnhOlK2b0WzJ8yWj6 bVXfQo8JSBDreyN2Sf8BgPFAcSIRW1hhLZw/9jkZ2eVk0nJgfVrb0XjwaDadaVpQ 41pteCIrSv2MlqiostawvfZ7pJVo8sSB5Crsy4HuPi2oKH08Hr/7R1D/wCZHYz9K ZT0TYpQJ8hvBn8UYTTK7cd+XXcIXhYvx/3GF+P64jdtg5fOdOVEGrjXEiK7tZodc fH+0ckhcs0DZTGOpwToAEqY/P1WuvXY= -----END CERTIFICATE-----Generated at Mon May 12 04:04:24 2025 by rpki-client