$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f910939d-05e1-3207-b3ea-2c46106a7d0d.roa File: f910939d-05e1-3207-b3ea-2c46106a7d0d.roa (raw, json) Hash identifier: OVr+hP6uZ6P+yoqy3yK6EH7ytkWtezUHbi94uH7aFCc= Subject key identifier: 41:02:4D:FA:B0:98:AE:09:5C:F9:20:B4:04:F0:29:E0:3D:29:11:57 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA88031CAB3840C7DABAA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f910939d-05e1-3207-b3ea-2c46106a7d0d.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 40.137.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:88:03:1c:ab:38:40:c7:da:ba:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=cd4d9888-2d09-4e2b-8b49-46db4017eab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6b:64:cc:6e:44:95:7d:15:8d:86:54:56:c2: 77:73:81:e2:a4:06:d7:9b:65:89:e0:93:c7:10:61: 54:fb:c9:e3:49:77:50:03:8d:aa:d8:ad:f7:78:8c: 3f:b1:b6:e4:ba:6e:3d:f7:5f:f4:29:02:00:f1:81: 43:0e:17:c0:59:0c:4b:43:e3:51:53:47:01:ad:ed: 2e:e2:96:0b:84:c2:5f:e9:f3:3d:91:c3:bb:e1:5f: dc:38:ee:7d:bc:44:50:d1:cd:a3:22:d8:0e:cf:d3: 31:3e:f6:c6:9f:d0:0c:34:42:59:4e:83:e8:4a:2e: b1:ed:b7:f5:83:d0:b3:a7:d7:d3:d1:95:70:5b:17: 6b:c5:6f:70:bd:30:77:22:ab:45:04:6a:1a:78:8e: 77:5c:55:9d:69:46:81:06:06:1b:e9:ba:f1:92:8f: d7:d5:0c:3b:15:e4:0c:b3:2f:f2:e3:c2:bb:c1:f4: e7:5e:37:d6:e1:e9:3f:32:e9:4d:2c:bc:c1:2c:da: b1:dc:9a:2b:ba:cf:3e:1b:91:d4:93:c0:a3:76:06: f1:7a:fc:6c:02:4e:5c:81:25:6a:71:13:47:82:7e: 42:3a:13:9e:88:81:e4:b6:40:c8:bc:d6:c3:dc:13: fd:31:91:30:0d:0b:6a:0c:c5:52:47:18:b6:35:50: f0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:02:4D:FA:B0:98:AE:09:5C:F9:20:B4:04:F0:29:E0:3D:29:11:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f910939d-05e1-3207-b3ea-2c46106a7d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.137.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:0b:00:f0:10:fc:a2:20:30:1e:50:f1:b9:72:00:c8:6d:b8: 60:0a:e3:8a:27:0e:2e:bd:9f:99:d2:92:a9:42:f5:97:53:4d: b5:9e:bf:1f:de:12:b3:de:32:c6:ca:5b:ae:ba:4e:78:de:9d: 36:09:35:39:5c:f0:d4:3b:a0:cb:3e:e0:3e:b3:a4:cf:e8:65: d1:d4:36:e8:a0:6f:78:9e:b0:37:73:de:c7:de:27:17:88:26: 7f:a6:0c:7c:e0:9c:fc:89:d9:0a:55:d1:cc:25:5d:47:99:10: 57:ef:66:7e:04:98:04:a9:4e:a2:ec:a9:9f:9d:65:63:1c:2b: 88:ca:ac:bd:af:4c:0f:f1:48:3d:22:ad:94:21:14:a4:50:86: fb:7b:f3:2b:ff:6f:2a:83:b2:b0:f1:9e:c1:e3:d5:24:2f:01: ac:5b:5b:92:44:e0:5b:43:aa:fa:46:39:37:74:de:43:ea:02: e4:46:ec:08:f3:34:37:7a:0b:17:98:a3:2f:aa:a1:78:90:7d: 7a:8a:7e:63:7b:7a:8a:f7:55:d7:2f:3d:a6:a9:20:1a:19:be: b3:38:f3:60:bf:1d:b1:bb:1c:f5:3d:d9:9a:fe:01:a9:c7:be: 5f:b3:6f:bb:36:f4:18:e8:da:e4:e7:a1:8b:fd:fb:c8:e8:36: 20:47:59:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qogDHKs4QMfauqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk Y2Q0ZDk4ODgtMmQwOS00ZTJiLThiNDktNDZkYjQwMTdlYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32tkzG5ElX0VjYZUVsJ3c4HipAbXm2WJ4JPH EGFU+8njSXdQA42q2K33eIw/sbbkum4991/0KQIA8YFDDhfAWQxLQ+NRU0cBre0u 4pYLhMJf6fM9kcO74V/cOO59vERQ0c2jItgOz9MxPvbGn9AMNEJZToPoSi6x7bf1 g9Czp9fT0ZVwWxdrxW9wvTB3IqtFBGoaeI53XFWdaUaBBgYb6brxko/X1Qw7FeQM sy/y48K7wfTnXjfW4ek/MulNLLzBLNqx3Jorus8+G5HUk8CjdgbxevxsAk5cgSVq cRNHgn5COhOeiIHktkDIvNbD3BP9MZEwDQtqDMVSRxi2NVDwdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEECTfqwmK4JXPkgtATwKeA9KRFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjkxMDkzOWQtMDVlMS0z MjA3LWIzZWEtMmM0NjEwNmE3ZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsLAPAQ/KIgMB5Q8blyAMhtuGAK44onDi69n5nSkqlC9ZdTTbWevx/e ErPeMsbKW666TnjenTYJNTlc8NQ7oMs+4D6zpM/oZdHUNuigb3iesDdz3sfeJxeI Jn+mDHzgnPyJ2QpV0cwlXUeZEFfvZn4EmASpTqLsqZ+dZWMcK4jKrL2vTA/xSD0i rZQhFKRQhvt78yv/byqDsrDxnsHj1SQvAaxbW5JE4FtDqvpGOTd03kPqAuRG7Ajz NDd6CxeYoy+qoXiQfXqKfmN7eor3VdcvPaapIBoZvrM482C/HbG7HPU92Zr+AanH vl+zb7s29Bjo2uTnoYv9+8joNiBHWYs= -----END CERTIFICATE-----Generated at Sun Jun 15 13:17:30 2025 by rpki-client