$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43d95524-887b-382a-8ae5-3e8ab501b4bd.roa File: 43d95524-887b-382a-8ae5-3e8ab501b4bd.roa (raw, json) Hash identifier: /HsTkz9dtkGtuF8Igq+fimwdzIVDiv6xzZztEpKMYYI= Subject key identifier: 69:CB:C4:8B:92:CD:0C:58:48:B1:B2:3D:CD:63:1C:AB:05:06:C9:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D431CD9A998BB4B8F7A9C080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43d95524-887b-382a-8ae5-3e8ab501b4bd.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 40.138.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:cd:9a:99:8b:b4:b8:f7:a9:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=7a87ea19-3f54-4f4e-842b-2afa28190feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:c2:91:10:7d:95:0a:b8:8d:50:5a:6d:e8: 17:02:59:cf:9b:51:07:c1:a6:cc:3d:96:29:84:97: 67:62:3e:aa:ee:ee:5b:4d:10:6a:46:e1:da:ad:86: b9:55:f0:92:a0:31:6f:5b:08:ef:55:51:ce:55:d0: ba:57:46:ec:23:70:11:1d:0f:55:3b:12:99:d4:0b: df:ec:5e:87:fc:14:83:31:c9:36:2f:99:e6:dc:27: ea:0e:e1:d5:d6:e7:23:29:1e:93:4b:88:31:c7:d6: 75:a4:fc:f1:5a:21:79:96:26:7a:52:3a:3d:fe:0a: c6:22:68:b6:2c:30:64:81:cb:0d:21:8a:db:93:01: 57:a3:8c:62:c4:17:f4:c7:30:dc:41:e1:c8:e4:7b: a0:33:47:b5:cc:fa:23:6a:2a:cf:dd:60:a1:de:c0: 3d:b9:17:85:03:f2:c2:4c:6a:d9:8b:2a:6a:54:94: bc:68:c8:fa:86:8f:32:e0:67:af:7a:1e:54:6f:ee: db:e6:a2:e6:b9:3e:c0:0b:02:9f:ca:08:e9:1e:b0: 31:de:9c:ba:e7:d9:8d:a9:af:1f:96:70:49:18:9e: 5a:46:da:21:95:fb:c9:97:b6:41:63:11:e2:71:87: e9:c7:b1:20:e6:6d:e1:2d:ac:00:83:b2:6a:dd:e2: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CB:C4:8B:92:CD:0C:58:48:B1:B2:3D:CD:63:1C:AB:05:06:C9:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43d95524-887b-382a-8ae5-3e8ab501b4bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c9:84:73:a1:6c:8b:e9:d2:c7:54:b5:5f:af:99:05:34:2f: 76:b8:7b:0d:01:1e:4c:ef:65:64:91:40:41:77:76:75:fa:84: 72:a7:b6:fd:9d:74:eb:6f:52:b9:4f:f0:f0:fb:d1:8c:ca:b6: 3e:cd:b1:df:5f:79:97:07:17:da:1b:8e:94:58:86:3d:60:1f: ce:b5:88:29:5d:52:85:d3:16:1f:6b:b2:aa:af:07:d1:e1:fb: 73:cb:75:58:d1:76:5d:7a:15:f3:7a:85:3d:ca:3e:8c:d7:30: ef:ff:9a:8f:a0:1f:fb:4f:47:02:c9:5b:1e:1b:d1:e3:93:6c: dc:7e:73:9e:b2:80:e6:32:28:c9:a3:c2:f2:33:3e:a9:0c:9e: 41:7a:cb:e7:7a:6a:11:b7:e5:33:b1:87:1e:7d:62:b3:14:0d: 8f:2f:c2:d1:d5:77:a8:64:99:7e:28:98:4a:07:6b:60:21:a6: f3:8a:2e:06:3a:fd:c4:97:38:d7:59:ba:e5:fd:82:99:f3:3d: 88:4c:1e:88:17:bf:61:4e:11:2f:da:14:01:ca:96:9d:cb:ec: bc:18:9b:08:a9:49:a8:d5:10:8c:46:64:c4:4c:93:0e:fd:9d: fc:56:3d:a8:9d:0a:59:21:e8:c6:f3:0d:06:94:1a:a1:b1:1e: 96:83:ad:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMc2amYu0uPepwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk N2E4N2VhMTktM2Y1NC00ZjRlLTg0MmItMmFmYTI4MTkwZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXzCkRB9lQq4jVBabegXAlnPm1EHwabMPZYp hJdnYj6q7u5bTRBqRuHarYa5VfCSoDFvWwjvVVHOVdC6V0bsI3ARHQ9VOxKZ1Avf 7F6H/BSDMck2L5nm3CfqDuHV1ucjKR6TS4gxx9Z1pPzxWiF5liZ6Ujo9/grGImi2 LDBkgcsNIYrbkwFXo4xixBf0xzDcQeHI5HugM0e1zPojairP3WCh3sA9uReFA/LC TGrZiypqVJS8aMj6ho8y4Geveh5Ub+7b5qLmuT7ACwKfygjpHrAx3py659mNqa8f lnBJGJ5aRtohlfvJl7ZBYxHicYfpx7Eg5m3hLawAg7Jq3eLdXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnLxIuSzQxYSLGyPc1jHKsFBslnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDNkOTU1MjQtODg3Yi0z ODJhLThhZTUtM2U4YWI1MDFiNGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHJhHOhbIvp0sdUtV+vmQU0L3a4ew0BHkzvZWSRQEF3dnX6hHKntv2d dOtvUrlP8PD70YzKtj7Nsd9feZcHF9objpRYhj1gH861iCldUoXTFh9rsqqvB9Hh +3PLdVjRdl16FfN6hT3KPozXMO//mo+gH/tPRwLJWx4b0eOTbNx+c56ygOYyKMmj wvIzPqkMnkF6y+d6ahG35TOxhx59YrMUDY8vwtHVd6hkmX4omEoHa2AhpvOKLgY6 /cSXONdZuuX9gpnzPYhMHogXv2FOES/aFAHKlp3L7LwYmwipSajVEIxGZMRMkw79 nfxWPaidClkh6MbzDQaUGqGxHpaDrb0= -----END CERTIFICATE-----Generated at Sun Jun 15 22:03:28 2025 by rpki-client