$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa File: 1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa (raw, json) Hash identifier: IygOl/jx1lWjBEYyoRW3wy3cJDZK4GohCCPW20AXf8U= Subject key identifier: 61:76:8D:D6:CA:E3:42:F8:A5:92:F1:9A:5B:59:0E:FF:0F:59:FF:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D165866D48A1DAECE38FC3E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 40.136.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:86:6d:48:a1:da:ec:e3:8f:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=28d72c66-9b1f-4980-bfd2-a1e2fb0d9891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:13:f7:42:ca:b9:9e:34:d6:3b:ca:82:2e: bf:45:78:de:44:1e:0c:e6:a2:98:8f:02:b5:90:0e: 9c:83:b1:99:1f:f3:3b:b2:f8:e7:29:64:4e:8a:df: d0:ce:c5:2a:72:e3:c1:74:d8:b3:fd:dc:9c:cd:40: cb:06:d5:e8:43:45:65:b5:f5:7d:ed:f3:52:c2:9f: fe:df:0e:cb:b8:72:f0:e0:41:b7:0c:64:05:c5:2c: 09:5f:db:4c:11:ab:cf:88:5f:3a:7d:f8:be:c6:a1: 8c:4f:61:34:88:14:83:69:5b:95:a4:5e:8b:e3:29: 12:eb:ea:68:56:67:e4:ec:85:99:6f:5b:88:2b:a5: 95:24:18:09:eb:43:c6:6d:58:ad:b4:cc:19:52:75: e5:1d:31:11:1e:97:fc:cd:6a:e8:57:75:86:d1:90: 1a:28:00:9b:1f:4b:7a:5d:12:e0:23:62:74:bd:d5: d6:b7:87:e6:9e:6e:81:35:fc:c6:c8:a8:b2:4f:aa: 82:02:c2:e1:dc:f2:67:3e:51:5c:4c:28:8a:8d:ab: 95:38:f5:63:1c:2c:48:4c:b9:52:5d:23:51:6c:fe: ae:5b:99:be:a9:ab:9a:94:6a:ba:a3:52:d6:95:e6: de:8b:f7:63:f6:2e:11:4f:eb:66:d6:04:99:58:67: 2c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:76:8D:D6:CA:E3:42:F8:A5:92:F1:9A:5B:59:0E:FF:0F:59:FF:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a0:7b:43:4d:30:c4:3b:49:0d:43:de:5e:f0:33:0a:32:0c: 42:26:a6:ec:cc:78:9a:24:e1:38:04:a8:db:6f:e3:8a:d7:53: 1f:04:21:9a:dc:3d:2f:ae:c0:38:ed:80:36:72:84:d8:11:74: fa:8d:4a:d1:3c:36:a2:70:ac:b0:1f:7a:87:ea:57:9d:64:9a: d6:78:8b:a8:cf:40:d1:05:d7:42:98:08:db:54:01:81:86:18: bb:1d:1c:c7:fb:a6:78:5d:79:0d:05:4d:55:16:89:54:54:29: 46:62:3c:a0:09:9c:a9:b3:42:f6:8d:7d:89:88:dd:ed:3d:c2: 82:71:c3:9e:ce:b9:59:52:37:c9:64:6c:08:0a:11:29:e6:bf: 76:2a:7e:10:60:80:d9:4e:f1:fa:37:41:54:b6:fe:5c:7e:09: f3:3b:0a:a7:a0:d2:2a:95:80:b4:86:42:90:b4:48:95:02:22: c6:6a:f3:ad:73:18:aa:5b:ed:15:55:06:f8:24:90:9d:74:5e: d9:c3:8f:82:85:ca:a3:69:5c:c7:73:69:a3:06:85:46:f9:ff: 7f:21:0e:cd:cb:b1:17:72:21:77:bf:fd:55:bc:32:d6:0e:59: 43:db:70:4b:69:86:38:e6:1e:cd:a5:8f:54:e2:5b:8f:de:1c: 3c:20:d8:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYZtSKHa7OOPw+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MjhkNzJjNjYtOWIxZi00OTgwLWJmZDItYTFlMmZiMGQ5ODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkcT90LKuZ401jvKgi6/RXjeRB4M5qKYjwK1 kA6cg7GZH/M7svjnKWROit/QzsUqcuPBdNiz/dyczUDLBtXoQ0VltfV97fNSwp/+ 3w7LuHLw4EG3DGQFxSwJX9tMEavPiF86ffi+xqGMT2E0iBSDaVuVpF6L4ykS6+po Vmfk7IWZb1uIK6WVJBgJ60PGbVittMwZUnXlHTERHpf8zWroV3WG0ZAaKACbH0t6 XRLgI2J0vdXWt4fmnm6BNfzGyKiyT6qCAsLh3PJnPlFcTCiKjauVOPVjHCxITLlS XSNRbP6uW5m+qaualGq6o1LWlebei/dj9i4RT+tm1gSZWGcsywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGF2jdbK40L4pZLxmltZDv8PWf/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWE0YjAxNmEtMmNhOC0z ZmY3LWI5ZmEtZTA4NzVhZWFmOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJege0NNMMQ7SQ1D3l7wMwoyDEImpuzMeJok4TgEqNtv44rXUx8EIZrc PS+uwDjtgDZyhNgRdPqNStE8NqJwrLAfeofqV51kmtZ4i6jPQNEF10KYCNtUAYGG GLsdHMf7pnhdeQ0FTVUWiVRUKUZiPKAJnKmzQvaNfYmI3e09woJxw57OuVlSN8lk bAgKESnmv3YqfhBggNlO8fo3QVS2/lx+CfM7Cqeg0iqVgLSGQpC0SJUCIsZq861z GKpb7RVVBvgkkJ10XtnDj4KFyqNpXMdzaaMGhUb5/38hDs3LsRdyIXe//VW8MtYO WUPbcEtphjjmHs2lj1TiW4/eHDwg2Ow= -----END CERTIFICATE-----Generated at Sun Jun 15 11:46:18 2025 by rpki-client