$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa File: d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa (raw, json) Hash identifier: mdu3aLDGsTTdiPixOfgmoGof5IstbePjtXWUjkKeRws= Subject key identifier: B3:96:C6:EB:A3:9A:39:DB:8D:55:9F:8F:C2:9C:07:6F:EB:20:C3:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F65BF4C47DEEF65166E50490 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 7029 IP address blocks: 40.142.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f4:c4:7d:ee:f6:51:66:e5:04:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=44e97dc6-beba-43c4-9bc2-17bad54ee2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:90:57:94:45:ef:a2:d3:6a:3f:8d:cb:23:51: 8f:19:7e:59:32:2a:d4:b0:8c:31:4c:0f:0b:f0:9e: 65:cc:9e:3b:a6:81:74:e3:7f:20:17:59:c8:35:43: 6c:85:60:36:f9:a7:f8:53:0c:7f:68:5b:d8:8f:20: ba:b9:5e:ac:fe:96:aa:a6:25:0b:8a:2a:df:93:b8: d3:14:d8:b3:c5:cf:6c:ca:0b:5c:1b:26:31:23:e4: 1c:46:18:4f:bc:43:bb:1d:2d:f2:55:88:7c:8f:e1: a4:06:87:1b:8f:cf:97:d0:80:7a:b4:a7:99:47:60: ac:3e:3e:b0:b2:39:44:67:1f:0b:41:02:9c:c5:53: 0e:b6:59:6b:66:f5:88:61:66:ea:0d:db:40:c7:78: 8b:27:29:1f:83:8c:03:56:8b:04:2a:cb:3c:bf:90: 6b:54:01:1b:fd:b9:bb:7b:1c:6d:60:11:95:b4:9b: b9:95:46:73:8f:a5:44:91:fa:c8:f3:fe:7c:ab:76: a0:21:3d:d5:81:de:70:dd:4b:09:95:06:26:92:cf: b6:2c:51:de:d1:d2:62:35:31:75:6d:9a:d4:7f:03: 5b:f5:72:c1:52:d3:b3:b2:d0:ec:dd:57:32:07:33: ac:6a:f8:5f:8c:7e:15:4b:9a:1d:49:6d:70:d3:eb: a3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:96:C6:EB:A3:9A:39:DB:8D:55:9F:8F:C2:9C:07:6F:EB:20:C3:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a5:ed:07:28:ed:9f:41:6a:00:5e:2c:21:b5:78:10:59:e0: 7f:f5:ef:1c:3c:1f:fe:3a:e0:bd:07:20:07:a3:0a:4b:a6:36: 6b:68:22:ad:97:88:72:e5:ff:c5:2b:f2:ff:79:a8:25:60:f7: f8:a1:56:c0:df:2c:4b:39:29:4a:db:0b:55:3d:70:d6:82:ca: f8:ef:c9:cf:ab:11:6f:e7:a2:3a:d3:03:24:95:60:4d:48:f0: 6e:58:f4:ba:fe:7a:ea:d9:03:16:6f:a9:80:87:60:5a:21:58: 62:f1:12:8d:e4:16:21:99:c0:87:a1:b6:85:27:27:b8:d5:6d: 78:6f:37:36:e5:82:95:ad:f7:73:50:7a:2b:0c:58:40:d9:88: b4:de:15:3b:f3:20:af:d5:67:a8:54:01:3b:97:ab:d2:94:bc: e7:43:03:d1:ab:a1:2e:a4:1d:ae:fa:41:97:eb:21:49:3a:83: c0:17:93:84:3e:11:df:a4:99:f8:ae:66:6a:b0:70:e5:f4:ac: b0:c8:66:12:fc:53:87:ab:48:13:55:a1:d0:da:ff:fe:92:28: e6:4f:ff:31:1c:b7:50:e4:ad:21:6d:ae:70:98:ec:0e:73:f1: 76:93:47:23:1c:ad:92:0b:76:df:4a:9e:39:c4:c3:ad:02:e9: bd:c1:db:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/TEfe72UWblBJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NDRlOTdkYzYtYmViYS00M2M0LTliYzItMTdiYWQ1NGVlMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JBXlEXvotNqP43LI1GPGX5ZMirUsIwxTA8L 8J5lzJ47poF0438gF1nINUNshWA2+af4Uwx/aFvYjyC6uV6s/paqpiULiirfk7jT FNizxc9sygtcGyYxI+QcRhhPvEO7HS3yVYh8j+GkBocbj8+X0IB6tKeZR2CsPj6w sjlEZx8LQQKcxVMOtllrZvWIYWbqDdtAx3iLJykfg4wDVosEKss8v5BrVAEb/bm7 exxtYBGVtJu5lUZzj6VEkfrI8/58q3agIT3Vgd5w3UsJlQYmks+2LFHe0dJiNTF1 bZrUfwNb9XLBUtOzstDs3VcyBzOsavhfjH4VS5odSW1w0+ujQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOWxuujmjnbjVWfj8KcB2/rIMPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFjM2Y3OWQtMjU3Yi0z MGRiLWIxZTUtZjU1ZWIzYjFlZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKI7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWl7Qco7Z9BagBeLCG1eBBZ4H/17xw8H/464L0HIAejCkumNmtoIq2X iHLl/8Ur8v95qCVg9/ihVsDfLEs5KUrbC1U9cNaCyvjvyc+rEW/nojrTAySVYE1I 8G5Y9Lr+eurZAxZvqYCHYFohWGLxEo3kFiGZwIehtoUnJ7jVbXhvNzblgpWt93NQ eisMWEDZiLTeFTvzIK/VZ6hUATuXq9KUvOdDA9GroS6kHa76QZfrIUk6g8AXk4Q+ Ed+kmfiuZmqwcOX0rLDIZhL8U4erSBNVodDa//6SKOZP/zEct1DkrSFtrnCY7A5z 8XaTRyMcrZILdt9KnjnEw60C6b3B28I= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:30 2025 by rpki-client