$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bffed36-f32f-3b71-8966-29804d04ee97.roa File: 8bffed36-f32f-3b71-8966-29804d04ee97.roa (raw, json) Hash identifier: RuE4ZaCTKwKkhKt+XvLObFZQoH5kIFE2HLrMZ3/5Swc= Subject key identifier: 67:BD:E6:EC:EE:18:02:85:21:6D:EA:03:82:4B:3A:9D:07:02:0C:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA9244898C225AD20D4000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bffed36-f32f-3b71-8966-29804d04ee97.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 40.131.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:92:44:89:8c:22:5a:d2:0d:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=7385d159-1392-4da5-bafc-1aa08ad4339a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9d:94:fa:9e:5f:f5:61:9f:2b:d9:c9:15:6a: 9c:35:ba:2d:ea:05:44:7a:fe:1a:a7:14:a7:bf:4a: 2e:39:41:1c:fc:ac:22:25:06:7d:a4:85:d4:08:2f: 7d:9e:45:8e:55:b8:ed:8a:3b:c8:ab:ff:7b:16:fc: d0:c4:f3:c5:dc:e2:e8:cc:2c:b6:d2:83:4a:6f:67: f9:a9:ff:17:ec:22:fc:b1:f4:0d:4c:bb:9c:d1:00: fb:7c:3f:39:31:0c:45:58:91:fa:9c:0c:d0:a2:6c: e1:ba:7f:24:1a:d2:76:83:c7:3c:ee:c0:a0:df:38: a6:34:ed:48:61:c0:38:af:44:70:f2:d0:a0:79:73: 3c:a8:6e:9c:33:64:b3:b3:20:b5:f7:9c:e5:0a:d8: 46:51:eb:55:16:4d:b5:96:b1:4a:a4:30:f5:9e:d0: 96:65:a9:b9:4f:d4:83:14:86:4d:b3:3f:55:c5:5e: aa:22:b6:59:4e:30:c4:d8:f2:0f:45:4f:76:d9:32: fe:b1:dd:31:0f:96:f8:92:fc:4a:62:1c:52:55:d7: 3c:43:06:95:fa:48:cd:5b:96:53:0d:af:eb:76:7a: f4:ae:89:b6:e8:50:22:72:cd:7b:69:ce:0a:4c:94: 49:03:bb:4d:44:d8:1b:39:64:7e:02:b3:00:23:01: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BD:E6:EC:EE:18:02:85:21:6D:EA:03:82:4B:3A:9D:07:02:0C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bffed36-f32f-3b71-8966-29804d04ee97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.131.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2c:93:d7:75:e4:fb:b4:cf:64:bb:3e:c4:95:0f:50:5a:32: 64:bd:f1:03:95:de:85:c3:c0:88:99:80:3a:fc:f4:88:ca:90: c5:0d:71:5f:fc:c5:e3:23:21:6e:46:5d:27:1b:ee:e9:81:52: 27:48:aa:29:93:f2:80:cd:08:15:1c:bf:6e:f8:f5:5f:53:62: 16:37:b6:07:46:f2:c2:cb:75:14:75:53:33:29:f9:7b:80:73: 16:58:8e:ef:f6:f4:0b:e4:6d:45:af:cd:d9:63:af:65:74:a1: 7c:94:41:36:14:17:4d:02:52:e1:3d:7f:46:51:b4:3e:35:73: 0f:17:f2:d4:a8:6a:8e:46:5a:cd:db:ca:81:a8:4b:b8:e4:55: 9d:d1:ff:d2:4c:e5:b8:64:4f:94:c5:93:87:ba:3f:4e:44:7e: b3:b6:da:1a:8d:dd:ae:91:24:3f:4f:eb:d8:81:f5:2b:f1:7e: 69:a9:a6:ad:54:01:9c:f2:9a:d1:63:f6:30:cb:9f:2a:af:74: 8d:54:87:a6:f7:88:e6:ef:13:9c:2e:aa:93:d2:8f:d7:0d:9b: 7a:77:ab:14:36:5e:83:27:34:8c:10:8b:50:f2:d2:ea:88:f4: 67:c5:80:0d:55:95:73:cd:48:6b:fc:4f:f9:2c:27:94:64:1c: fb:5a:59:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpJEiYwiWtINQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NzM4NWQxNTktMTM5Mi00ZGE1LWJhZmMtMWFhMDhhZDQzMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ2U+p5f9WGfK9nJFWqcNbot6gVEev4apxSn v0ouOUEc/KwiJQZ9pIXUCC99nkWOVbjtijvIq/97FvzQxPPF3OLozCy20oNKb2f5 qf8X7CL8sfQNTLuc0QD7fD85MQxFWJH6nAzQomzhun8kGtJ2g8c87sCg3zimNO1I YcA4r0Rw8tCgeXM8qG6cM2SzsyC195zlCthGUetVFk21lrFKpDD1ntCWZam5T9SD FIZNsz9VxV6qIrZZTjDE2PIPRU922TL+sd0xD5b4kvxKYhxSVdc8QwaV+kjNW5ZT Da/rdnr0rom26FAics17ac4KTJRJA7tNRNgbOWR+ArMAIwFYrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe95uzuGAKFIW3qA4JLOp0HAgyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGJmZmVkMzYtZjMyZi0z YjcxLTg5NjYtMjk4MDRkMDRlZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMsk9d15Pu0z2S7PsSVD1BaMmS98QOV3oXDwIiZgDr89IjKkMUNcV/8 xeMjIW5GXScb7umBUidIqimT8oDNCBUcv2749V9TYhY3tgdG8sLLdRR1UzMp+XuA cxZYju/29AvkbUWvzdljr2V0oXyUQTYUF00CUuE9f0ZRtD41cw8X8tSoao5GWs3b yoGoS7jkVZ3R/9JM5bhkT5TFk4e6P05EfrO22hqN3a6RJD9P69iB9Svxfmmppq1U AZzymtFj9jDLnyqvdI1Uh6b3iObvE5wuqpPSj9cNm3p3qxQ2XoMnNIwQi1Dy0uqI 9GfFgA1VlXPNSGv8T/ksJ5RkHPtaWfM= -----END CERTIFICATE-----Generated at Tue Jun 17 16:16:27 2025 by rpki-client