$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0808f751-9032-36f2-a1b1-b52cebd3efed.roa File: 0808f751-9032-36f2-a1b1-b52cebd3efed.roa (raw, json) Hash identifier: XnHCOTkB9O7ZgDxSIpfcmxQgjJzvFeBIaDoF15kEGPo= Subject key identifier: F5:D4:E9:8A:AD:C9:35:71:AB:BA:8F:28:03:7A:79:F3:53:1B:5E:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210E93050884B358C6BE500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0808f751-9032-36f2-a1b1-b52cebd3efed.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.138.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:e9:30:50:88:4b:35:8c:6b:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=29c14eb1-af92-484d-902c-265045ff0ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:41:97:bf:26:92:1d:43:22:14:15:e9:b8:47: 3e:5f:8a:62:81:fa:2c:bc:b5:19:66:0c:96:af:51: 36:09:9f:98:75:79:d6:0a:3d:26:cd:08:6c:cc:55: 0a:77:28:11:22:1a:e8:cd:e1:86:15:1e:05:7a:c5: 07:fc:8d:5b:84:65:e8:87:79:74:bc:79:d2:10:ff: 9f:8c:cf:25:52:81:5d:29:98:c8:5c:40:81:8f:b3: e9:51:44:c4:17:a9:a5:54:16:ea:3a:35:62:0e:8b: 4e:ec:b9:24:ec:5e:cf:e0:f5:45:ba:66:c9:c9:54: 5c:b5:f1:6f:b7:d6:ab:a0:b8:79:e2:9a:04:3d:af: 65:ed:70:87:d4:54:c0:e9:52:35:b4:9d:f7:89:10: 8b:68:24:89:3c:f3:11:b5:8e:43:b4:77:f0:15:fc: f5:03:88:90:46:80:3c:21:93:68:44:a8:bd:08:b9: ee:fd:be:2a:4f:f7:1f:b0:b4:e8:e1:03:61:89:f7: c5:aa:b8:9a:14:76:a2:ed:00:91:72:81:b0:97:86: 4f:d8:e4:97:d8:53:1c:a3:3e:92:cf:e4:c5:cd:7e: 2a:0a:68:cf:6b:b2:dd:dc:e3:84:8d:91:bc:12:91: 2a:3f:27:2d:f7:7c:50:73:46:25:7d:f2:56:46:5f: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D4:E9:8A:AD:C9:35:71:AB:BA:8F:28:03:7A:79:F3:53:1B:5E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0808f751-9032-36f2-a1b1-b52cebd3efed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ac:03:75:f2:ee:2b:be:14:e5:9e:4b:a3:2a:92:57:50:d3: ed:2e:b2:7a:7b:ca:d3:c2:ed:31:dc:0f:19:a1:4c:e4:88:a3: aa:20:d7:c1:14:06:66:65:b8:54:4c:ea:16:db:73:82:b6:8e: 34:49:54:44:69:5e:66:5d:d3:56:93:c6:a3:d6:51:31:e7:46: 3a:d8:ef:9b:5d:38:e9:13:8a:3d:d3:f9:0e:c2:8e:29:50:b8: 96:e4:01:a0:40:cf:b2:88:34:0a:1f:1c:b8:e9:a5:a6:99:cb: a6:09:97:14:86:bd:86:56:e7:4a:b2:b5:3d:e8:c1:9c:c5:20: 3f:f9:28:03:05:76:a5:3d:fc:07:b9:52:44:66:09:b8:93:9a: f6:fe:f1:6c:fd:f3:3f:e2:98:fc:ff:db:60:6d:a0:82:c9:0e: d7:ff:6b:e3:0d:c0:67:cd:7e:c0:3a:09:cf:c2:a6:e9:6e:fe: 88:84:76:31:aa:97:87:6a:53:56:0c:c3:88:69:92:bd:f1:6d: 8d:2c:e9:62:de:b4:26:54:81:ee:e3:4e:de:6c:e6:d6:92:ba: a1:10:93:1e:5f:14:fd:a9:d8:9f:99:41:66:62:16:3a:3d:b9: b7:58:1c:da:d8:d4:7e:6f:3b:4f:57:d6:41:16:8e:77:33:62: cf:d6:87:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOkwUIhLNYxr5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjljMTRlYjEtYWY5Mi00ODRkLTkwMmMtMjY1MDQ1ZmYwZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUGXvyaSHUMiFBXpuEc+X4pigfosvLUZZgyW r1E2CZ+YdXnWCj0mzQhszFUKdygRIhrozeGGFR4FesUH/I1bhGXoh3l0vHnSEP+f jM8lUoFdKZjIXECBj7PpUUTEF6mlVBbqOjViDotO7Lkk7F7P4PVFumbJyVRctfFv t9aroLh54poEPa9l7XCH1FTA6VI1tJ33iRCLaCSJPPMRtY5DtHfwFfz1A4iQRoA8 IZNoRKi9CLnu/b4qT/cfsLTo4QNhiffFqriaFHai7QCRcoGwl4ZP2OSX2FMcoz6S z+TFzX4qCmjPa7Ld3OOEjZG8EpEqPyct93xQc0YlffJWRl+vGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXU6YqtyTVxq7qPKAN6efNTG148MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDgwOGY3NTEtOTAzMi0z NmYyLWExYjEtYjUyY2ViZDNlZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACasA3Xy7iu+FOWeS6MqkldQ0+0usnp7ytPC7THcDxmhTOSIo6og18EU BmZluFRM6hbbc4K2jjRJVERpXmZd01aTxqPWUTHnRjrY75tdOOkTij3T+Q7CjilQ uJbkAaBAz7KINAofHLjppaaZy6YJlxSGvYZW50qytT3owZzFID/5KAMFdqU9/Ae5 UkRmCbiTmvb+8Wz98z/imPz/22BtoILJDtf/a+MNwGfNfsA6Cc/Cpulu/oiEdjGq l4dqU1YMw4hpkr3xbY0s6WLetCZUge7jTt5s5taSuqEQkx5fFP2p2J+ZQWZiFjo9 ubdYHNrY1H5vO09X1kEWjnczYs/Wh14= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:15 2025 by rpki-client