$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa File: 01a8e5f6-00d1-310c-9826-54ee0eea151a.roa (raw, json) Hash identifier: ZO8Es724iNYhippi+QpuYTiYqqZRiwf9dyR9bdA5q0E= Subject key identifier: 1A:39:AB:D3:18:CB:96:48:32:AB:15:AC:53:BA:A5:55:00:95:3B:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7166B1C98B5E33C4574690 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.136.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:66:b1:c9:8b:5e:33:c4:57:46:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=a96e34e8-467d-4aa0-b6ef-0bd043b369c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:47:c8:df:d2:91:d0:00:8e:d2:14:23:81:0b: b6:61:05:cc:a5:24:09:67:f3:d0:73:a8:59:c6:bd: 12:0f:d5:7a:54:05:40:16:ec:60:9f:d2:46:8b:3d: 27:04:9d:b1:28:a2:50:cb:00:bb:71:97:1b:a8:0c: 0e:18:93:4f:92:7e:b5:9d:e6:77:6d:aa:af:3c:9d: 88:9a:bc:e6:93:97:b8:00:19:d1:c1:96:4b:5d:d4: 62:d1:e8:e6:4a:9d:26:41:f1:a3:b2:b2:25:aa:29: 99:29:41:af:4e:b3:dd:c1:92:38:1d:15:b4:47:1f: 0a:09:ea:0e:f6:8e:21:cf:fc:b0:33:65:9a:92:25: 41:43:9c:8e:8b:cb:5a:ec:7c:1e:0e:fa:83:f7:2f: 98:a5:3a:ea:27:57:76:72:a7:cf:5f:88:15:fe:a2: 25:56:a0:85:b3:e2:06:57:df:c4:70:6b:a7:85:66: 1f:4e:51:1e:da:a1:92:82:60:ed:35:b0:df:84:b7: c2:cd:f2:d4:7f:05:da:a1:64:c0:70:a6:18:ce:55: 5d:d9:1c:c9:a4:f4:62:6a:6a:59:27:86:15:2a:d9: 2d:7a:09:e2:85:06:09:ec:66:ca:4f:fc:a1:33:04: 22:ad:c3:28:1d:37:4c:fb:43:6b:d6:e7:88:c8:ff: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:39:AB:D3:18:CB:96:48:32:AB:15:AC:53:BA:A5:55:00:95:3B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:80:02:10:2c:5d:62:07:b6:b0:17:0e:31:be:96:db:91:ef: 0d:ed:4b:fb:3c:21:40:e2:42:d8:dc:d9:04:33:b4:84:c6:f4: d9:59:19:13:32:a6:02:8f:1e:f6:c3:69:6c:ed:d6:b0:c8:77: 67:39:c9:f6:5e:65:05:3f:88:9f:ca:7b:8e:66:b0:44:27:63: 2b:91:51:94:58:6d:f3:a7:78:4c:e0:f8:b7:4f:15:6a:97:77: f9:69:4f:3b:4b:4b:57:0b:97:9d:26:75:34:47:36:90:c7:2e: a2:25:50:45:c9:bb:a3:3c:3b:81:24:bc:22:fa:95:b0:d0:91: 65:b3:30:5a:c5:24:2c:48:ed:3f:8b:71:dc:4f:72:04:9d:aa: f6:65:e8:fb:9a:50:c5:95:59:56:7f:71:78:e2:d3:9a:62:30: c4:cf:80:69:63:13:72:aa:6c:a2:7d:79:e8:d2:4e:d2:9a:05: 1d:e1:11:50:e5:4f:35:a6:80:87:60:e4:05:81:08:50:fc:47: 2c:3a:dc:3d:a8:54:e8:95:f0:40:ec:22:92:4f:14:29:6e:0b: 14:cc:4e:cb:2b:2f:87:ed:4b:d1:b0:7d:36:a3:10:f1:13:ce: 77:d2:4a:86:70:be:67:76:71:d5:f2:90:b6:ae:f3:7d:32:dc: 07:34:4d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWaxyYteM8RXRpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YTk2ZTM0ZTgtNDY3ZC00YWEwLWI2ZWYtMGJkMDQzYjM2OWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEfI39KR0ACO0hQjgQu2YQXMpSQJZ/PQc6hZ xr0SD9V6VAVAFuxgn9JGiz0nBJ2xKKJQywC7cZcbqAwOGJNPkn61neZ3baqvPJ2I mrzmk5e4ABnRwZZLXdRi0ejmSp0mQfGjsrIlqimZKUGvTrPdwZI4HRW0Rx8KCeoO 9o4hz/ywM2WakiVBQ5yOi8ta7HweDvqD9y+YpTrqJ1d2cqfPX4gV/qIlVqCFs+IG V9/EcGunhWYfTlEe2qGSgmDtNbDfhLfCzfLUfwXaoWTAcKYYzlVd2RzJpPRiampZ J4YVKtktegnihQYJ7GbKT/yhMwQircMoHTdM+0Nr1ueIyP+WCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo5q9MYy5ZIMqsVrFO6pVUAlTsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDFhOGU1ZjYtMDBkMS0z MTBjLTk4MjYtNTRlZTBlZWExNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuAAhAsXWIHtrAXDjG+ltuR7w3tS/s8IUDiQtjc2QQztITG9NlZGRMy pgKPHvbDaWzt1rDId2c5yfZeZQU/iJ/Ke45msEQnYyuRUZRYbfOneEzg+LdPFWqX d/lpTztLS1cLl50mdTRHNpDHLqIlUEXJu6M8O4EkvCL6lbDQkWWzMFrFJCxI7T+L cdxPcgSdqvZl6PuaUMWVWVZ/cXji05piMMTPgGljE3KqbKJ9eejSTtKaBR3hEVDl TzWmgIdg5AWBCFD8Ryw63D2oVOiV8EDsIpJPFCluCxTMTssrL4ftS9GwfTajEPET znfSSoZwvmd2cdXykLau830y3Ac0TQo= -----END CERTIFICATE-----Generated at Fri Mar 14 08:04:52 2025 by rpki-client