$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8879e0a-a047-3aa1-9f06-79affe165955.roa File: c8879e0a-a047-3aa1-9f06-79affe165955.roa (raw, json) Hash identifier: /P1PZTDQS4O3q0Mj1rcy1wa3OUrkXu2paP0PGXC3EXk= Subject key identifier: 7B:13:D7:39:DE:B7:D0:25:65:9B:81:9A:06:D7:2C:F3:7C:C3:BE:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D431F7E452C73E1C3795DE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8879e0a-a047-3aa1-9f06-79affe165955.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 40.137.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:f7:e4:52:c7:3e:1c:37:95:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=15881246-bef7-4a00-9e84-3bf20633d264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:d2:cd:94:b2:9d:8c:10:95:19:d0:d4:73: e4:3d:67:91:92:89:3f:dc:6f:f2:49:f0:16:92:e1: cc:1c:9f:da:fc:6c:af:60:11:43:20:3e:53:f9:4d: c7:95:18:d2:d0:66:bd:b0:f1:84:b8:0c:61:81:22: dd:b7:17:48:7c:77:01:fb:bc:1f:65:a9:fd:5d:52: fd:d7:b2:22:3e:ee:d7:43:dc:b9:88:4d:c5:7e:f6: 4b:a2:41:46:54:7f:f5:b0:de:35:a2:ed:d8:b2:94: 5d:a0:d1:c3:05:84:b3:6c:3c:84:0d:32:6a:2e:c4: 65:91:cb:b6:0c:81:be:ba:af:77:3b:82:67:be:2c: 0c:ab:fc:8b:3e:54:c1:fe:e8:8e:c3:62:fd:6a:7e: 36:e3:c6:6e:0a:16:4b:12:dc:cc:5f:97:ce:e8:a4: 69:f9:d1:26:0c:8a:21:84:0e:3c:7e:e0:a4:8a:7b: e8:fd:e3:75:01:fd:1d:64:41:4a:99:92:45:39:a7: e2:b0:fc:41:b6:95:2c:19:ce:4f:9a:97:5b:26:31: e1:ac:8f:68:c3:af:6a:2b:fc:6a:57:3e:77:c3:74: 96:28:b8:7d:57:34:94:b1:12:27:cf:74:71:73:59: ca:bc:17:a7:5a:4d:3c:90:2e:9e:2b:23:4d:7a:23: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:13:D7:39:DE:B7:D0:25:65:9B:81:9A:06:D7:2C:F3:7C:C3:BE:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8879e0a-a047-3aa1-9f06-79affe165955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.137.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:fc:f1:d5:7d:e6:01:ae:e5:63:c1:af:9b:51:46:37:87:07: 38:32:00:18:03:19:d8:b6:6b:32:59:8f:b4:2a:7e:69:5f:1a: 2e:ea:c0:38:0e:c8:3c:81:a5:0d:99:60:60:b4:28:d4:0b:30: 0a:fb:a9:85:fd:25:80:85:99:91:d8:ae:e9:57:50:91:47:8f: 2a:48:d0:2e:ec:61:15:57:d4:91:19:ae:79:81:f2:c9:35:1d: 74:2a:0d:61:c1:a8:1e:36:96:7a:93:47:8e:eb:03:a6:36:03: 18:bd:52:9b:fe:ac:91:c2:6b:be:3a:28:8e:53:98:5e:2c:5b: fe:e3:45:b6:f9:5d:78:cc:a5:1c:f2:8b:37:ff:d7:53:f2:d2: b8:fd:f4:4a:7e:9a:1f:0d:ed:f4:b5:9b:1c:58:35:25:52:09: 52:1e:49:7c:42:32:37:6c:6f:07:ff:95:57:e0:95:b2:64:3b: 38:a7:ed:fe:52:8c:46:16:46:d1:a1:9d:64:a6:97:c1:7e:9b: 27:c1:60:a0:b0:4a:7f:ca:2e:fa:0f:70:12:4a:f4:0b:94:5d: 5b:65:55:5e:12:10:73:be:25:02:50:95:f6:09:ec:ce:f3:87: 1d:e8:83:c2:5e:9a:5e:b0:1b:0e:e9:e1:b7:c7:41:f5:03:90: 9e:17:1a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMffkUsc+HDeV3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTU4ODEyNDYtYmVmNy00YTAwLTllODQtM2JmMjA2MzNkMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjrSzZSynYwQlRnQ1HPkPWeRkok/3G/ySfAW kuHMHJ/a/GyvYBFDID5T+U3HlRjS0Ga9sPGEuAxhgSLdtxdIfHcB+7wfZan9XVL9 17IiPu7XQ9y5iE3FfvZLokFGVH/1sN41ou3YspRdoNHDBYSzbDyEDTJqLsRlkcu2 DIG+uq93O4JnviwMq/yLPlTB/uiOw2L9an4248ZuChZLEtzMX5fO6KRp+dEmDIoh hA48fuCkinvo/eN1Af0dZEFKmZJFOafisPxBtpUsGc5PmpdbJjHhrI9ow69qK/xq Vz53w3SWKLh9VzSUsRInz3Rxc1nKvBenWk08kC6eKyNNeiMJXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsT1znet9AlZZuBmgbXLPN8w775MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzg4NzllMGEtYTA0Ny0z YWExLTlmMDYtNzlhZmZlMTY1OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP88dV95gGu5WPBr5tRRjeHBzgyABgDGdi2azJZj7QqfmlfGi7qwDgO yDyBpQ2ZYGC0KNQLMAr7qYX9JYCFmZHYrulXUJFHjypI0C7sYRVX1JEZrnmB8sk1 HXQqDWHBqB42lnqTR47rA6Y2Axi9Upv+rJHCa746KI5TmF4sW/7jRbb5XXjMpRzy izf/11Py0rj99Ep+mh8N7fS1mxxYNSVSCVIeSXxCMjdsbwf/lVfglbJkOzin7f5S jEYWRtGhnWSml8F+myfBYKCwSn/KLvoPcBJK9AuUXVtlVV4SEHO+JQJQlfYJ7M7z hx3og8Jeml6wGw7p4bfHQfUDkJ4XGro= -----END CERTIFICATE-----Generated at Sun Jun 15 13:19:48 2025 by rpki-client