$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c61d555-9b3a-3829-8295-220018b2d077.roa File: 0c61d555-9b3a-3829-8295-220018b2d077.roa (raw, json) Hash identifier: YNhBXcJUnT7oU63KPfuIJRXWNGdM5LvuTriS3kzr1v8= Subject key identifier: 1A:6E:43:57:DA:4C:F3:9A:01:35:EF:38:59:F3:4E:E0:5F:F7:C1:DA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D431CDBCB585CD75FC6C3DE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c61d555-9b3a-3829-8295-220018b2d077.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 40.138.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:cd:bc:b5:85:cd:75:fc:6c:3d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=bacd91f6-b3fa-4490-b837-52758a538445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:4e:01:3a:91:1c:aa:c5:27:08:7c:bd:01: c8:e0:df:79:bd:6b:cb:52:4a:d4:22:2f:01:53:5e: e8:f4:e3:fd:ee:af:13:16:89:6b:86:20:d0:fb:7a: d5:13:06:78:cd:67:b5:55:58:a2:25:8a:c1:73:5f: df:b4:7a:d8:fc:fe:52:a7:d5:52:bb:ff:95:db:eb: 8a:43:fc:91:a0:e9:36:bc:66:99:55:3f:b4:e4:d3: 31:ea:ab:ab:74:d6:a5:1e:08:92:6d:ff:25:1c:24: e9:7d:56:c7:7a:d3:1c:49:23:27:39:5b:05:1f:02: 4a:66:c8:ad:6a:60:03:1e:02:c4:1a:4a:7b:f8:29: c3:5f:9f:73:29:d9:6f:18:2a:65:8a:7d:5c:2e:57: e9:b0:fa:79:3e:65:2d:c9:d4:40:1b:fc:2d:9b:ee: 71:09:a7:40:cd:80:ec:84:0f:90:ae:c3:af:65:5e: 6e:ee:d9:50:7b:db:4f:ae:63:a9:47:e6:cc:88:55: 81:cc:dd:be:a2:4f:d9:71:48:29:d3:01:c9:46:50: 63:ae:f5:5d:fa:00:4f:17:6c:cf:40:75:8b:25:db: c2:e1:e6:03:d5:67:c2:23:d8:0b:3c:69:9b:54:13: ca:c1:54:2a:52:a7:40:4f:e7:2c:c1:39:7f:0b:fe: 5e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6E:43:57:DA:4C:F3:9A:01:35:EF:38:59:F3:4E:E0:5F:F7:C1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c61d555-9b3a-3829-8295-220018b2d077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e4:a3:fb:01:10:db:0a:33:67:36:a9:fc:fd:b5:b0:0a:c9: 5f:dc:12:99:d0:d4:3b:99:dd:c3:8c:9d:71:1f:00:6a:d4:64: 7c:9a:a1:9e:fe:43:d7:3a:0f:0c:66:e3:ae:95:08:df:56:4d: 85:59:cf:8b:f5:8f:a2:e1:ec:cb:82:da:41:d7:15:e0:da:56: b0:71:d6:e2:3f:1d:4d:95:36:a6:e4:51:a7:f7:8f:da:2b:6a: be:c1:ab:a0:10:36:68:30:5d:ec:ea:7f:8e:12:a2:18:e2:3e: 1b:d7:42:32:af:d0:8e:58:44:ea:70:cb:bc:54:0d:cb:41:19: 3d:87:e4:f9:75:ae:9d:41:04:2e:8e:33:9f:a9:a3:dc:44:53: 8a:a7:01:81:dc:57:a7:4c:47:88:26:89:bc:9b:e4:1f:be:d0: 62:7e:12:1b:c0:ac:7f:b7:9a:ea:cb:94:3c:93:6e:6b:18:52: 70:15:fa:8e:97:1f:0d:20:73:a4:cd:f7:ae:31:6f:e3:d3:60: e0:12:bb:2f:b4:71:4c:d4:51:59:fc:28:e8:36:25:9b:b2:d1: a5:9f:6b:06:f5:99:4f:e8:64:a1:8e:13:a9:a7:01:8d:00:0c: 11:78:e7:07:05:cd:c3:eb:4a:91:7c:95:3a:7c:8e:f6:02:13: 29:3c:24:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMc28tYXNdfxsPeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmFjZDkxZjYtYjNmYS00NDkwLWI4MzctNTI3NThhNTM4NDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJdOATqRHKrFJwh8vQHI4N95vWvLUkrUIi8B U17o9OP97q8TFolrhiDQ+3rVEwZ4zWe1VViiJYrBc1/ftHrY/P5Sp9VSu/+V2+uK Q/yRoOk2vGaZVT+05NMx6qurdNalHgiSbf8lHCTpfVbHetMcSSMnOVsFHwJKZsit amADHgLEGkp7+CnDX59zKdlvGCplin1cLlfpsPp5PmUtydRAG/wtm+5xCadAzYDs hA+QrsOvZV5u7tlQe9tPrmOpR+bMiFWBzN2+ok/ZcUgp0wHJRlBjrvVd+gBPF2zP QHWLJdvC4eYD1WfCI9gLPGmbVBPKwVQqUqdAT+cswTl/C/5e4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpuQ1faTPOaATXvOFnzTuBf98HaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGM2MWQ1NTUtOWIzYS0z ODI5LTgyOTUtMjIwMDE4YjJkMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIo7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPko/sBENsKM2c2qfz9tbAKyV/cEpnQ1DuZ3cOMnXEfAGrUZHyaoZ7+ Q9c6Dwxm466VCN9WTYVZz4v1j6Lh7MuC2kHXFeDaVrBx1uI/HU2VNqbkUaf3j9or ar7Bq6AQNmgwXezqf44SohjiPhvXQjKv0I5YROpwy7xUDctBGT2H5Pl1rp1BBC6O M5+po9xEU4qnAYHcV6dMR4gmibyb5B++0GJ+EhvArH+3murLlDyTbmsYUnAV+o6X Hw0gc6TN964xb+PTYOASuy+0cUzUUVn8KOg2JZuy0aWfawb1mU/oZKGOE6mnAY0A DBF45wcFzcPrSpF8lTp8jvYCEyk8JIg= -----END CERTIFICATE-----Generated at Wed Jun 18 13:04:43 2025 by rpki-client