$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e05bafe5-75ce-34c7-9fe8-3d720a3fb1b6.roa File: e05bafe5-75ce-34c7-9fe8-3d720a3fb1b6.roa (raw, json) Hash identifier: q8sZM8of2qzPzRsNOW+JBMIFHm2/HiE4OU1GYfGK5NQ= Subject key identifier: 8E:9A:C8:39:FB:37:A2:D1:5A:A3:E5:9C:FB:4E:1C:30:F5:72:60:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA96A3FC3EBCD15BC24300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e05bafe5-75ce-34c7-9fe8-3d720a3fb1b6.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 40.136.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:96:a3:fc:3e:bc:d1:5b:c2:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=ebab74fe-2af3-4ed6-8312-7929ac2a4b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:53:22:a1:72:97:c4:05:cf:46:5b:8b:ff: 3a:52:38:b2:cf:84:9a:68:67:98:6c:c0:85:15:c9: ab:1b:e4:30:cb:e5:e8:8b:0b:c5:2a:3e:de:93:63: 4f:ab:21:c4:7e:db:a1:72:5b:94:bb:b4:13:92:6f: c6:22:ed:1c:30:37:76:c3:f1:8f:61:3c:89:db:98: ac:89:d4:09:c6:ff:8f:23:52:2c:78:13:8d:32:f6: f2:36:39:72:40:02:4f:c2:a9:23:d1:8b:64:62:b3: f3:70:f2:bf:73:7d:68:c7:5f:eb:65:cc:e1:d6:72: fe:f2:98:e6:69:6b:65:60:8e:31:ca:a6:de:94:ff: 25:26:a8:73:0c:47:cc:73:fe:03:b1:63:b4:f6:c4: da:77:85:be:6a:64:ae:b5:5a:31:5d:d6:66:79:d9: 3f:4c:83:8a:b2:8b:41:8f:72:6a:fe:69:3b:1c:ba: 48:5f:95:e8:5d:80:e2:e1:e6:cb:3b:04:0b:f5:ee: d1:c9:61:90:cd:79:5e:ca:ea:fb:2c:4f:38:e0:88: c6:ce:e3:67:3a:cb:83:89:b7:15:7f:01:31:5e:f8: 67:b2:3a:35:23:9a:76:a5:26:14:19:d3:79:d8:01: 79:81:ff:1b:ef:62:d0:08:53:c1:63:97:89:8b:5d: 6a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9A:C8:39:FB:37:A2:D1:5A:A3:E5:9C:FB:4E:1C:30:F5:72:60:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e05bafe5-75ce-34c7-9fe8-3d720a3fb1b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:68:62:15:b0:ec:0a:52:84:b1:47:11:bb:c4:b8:85:34:fe: 7f:13:9f:2b:a1:47:55:ac:80:bc:99:b1:29:27:ae:dd:36:b8: 4f:55:d2:c9:33:9d:ee:ca:16:84:b1:84:e0:f7:6e:eb:81:53: e9:4a:07:b8:34:27:b8:5e:46:61:8d:84:4b:1e:a4:5e:d3:5f: 4f:6f:67:b0:07:29:6a:c9:70:2e:f9:b4:fb:e5:ff:60:85:f9: b0:e6:71:eb:62:24:14:12:b1:60:5d:65:4e:8c:d3:2e:5b:56: ac:14:78:28:38:d1:38:80:f6:8c:ec:b8:42:4b:19:e6:96:a3: 52:6a:ea:c6:bd:bc:b4:f2:81:5c:38:ff:eb:85:a4:5d:6e:ee: 73:9a:df:fa:c0:b4:11:1b:78:6c:2f:26:10:88:76:19:ee:5e: b1:45:47:5e:5c:bc:93:dc:84:f5:6a:77:bf:a4:a1:e2:db:b3: d1:19:aa:55:99:f0:a5:33:85:a0:88:0b:a0:7b:f4:32:06:67: 85:88:f4:2c:6c:68:54:24:80:5d:45:8d:35:e4:f4:dc:f2:e5: 01:3b:5f:e6:92:59:0b:8b:21:1c:a6:29:e0:77:05:dd:50:37: 6b:cb:41:26:52:b1:d0:b1:5c:94:7f:65:4a:36:35:8f:99:f6: ef:20:ff:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpaj/D680VvCQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZWJhYjc0ZmUtMmFmMy00ZWQ2LTgzMTItNzkyOWFjMmE0YjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos1TIqFyl8QFz0Zbi/86Ujiyz4SaaGeYbMCF FcmrG+Qwy+XoiwvFKj7ek2NPqyHEftuhcluUu7QTkm/GIu0cMDd2w/GPYTyJ25is idQJxv+PI1IseBONMvbyNjlyQAJPwqkj0YtkYrPzcPK/c31ox1/rZczh1nL+8pjm aWtlYI4xyqbelP8lJqhzDEfMc/4DsWO09sTad4W+amSutVoxXdZmedk/TIOKsotB j3Jq/mk7HLpIX5XoXYDi4ebLOwQL9e7RyWGQzXleyur7LE844IjGzuNnOsuDibcV fwExXvhnsjo1I5p2pSYUGdN52AF5gf8b72LQCFPBY5eJi11qGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6ayDn7N6LRWqPlnPtOHDD1cmAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTA1YmFmZTUtNzVjZS0z NGM3LTlmZTgtM2Q3MjBhM2ZiMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIhLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1oYhWw7ApShLFHEbvEuIU0/n8TnyuhR1WsgLyZsSknrt02uE9V0skz ne7KFoSxhOD3buuBU+lKB7g0J7heRmGNhEsepF7TX09vZ7AHKWrJcC75tPvl/2CF +bDmcetiJBQSsWBdZU6M0y5bVqwUeCg40TiA9ozsuEJLGeaWo1Jq6sa9vLTygVw4 /+uFpF1u7nOa3/rAtBEbeGwvJhCIdhnuXrFFR15cvJPchPVqd7+koeLbs9EZqlWZ 8KUzhaCIC6B79DIGZ4WI9CxsaFQkgF1FjTXk9Nzy5QE7X+aSWQuLIRymKeB3Bd1Q N2vLQSZSsdCxXJR/ZUo2NY+Z9u8g/6w= -----END CERTIFICATE-----Generated at Sun Jun 15 13:01:06 2025 by rpki-client