$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c61d555-9b3a-3829-8295-220018b2d077.roa File: 0c61d555-9b3a-3829-8295-220018b2d077.roa (raw, json) Hash identifier: vaCFRwTwoGF/jKeQFuBtxqBfK0BPI5SA6w7hMq04EAU= Subject key identifier: 82:C2:C0:D3:0A:67:8C:58:70:C0:36:71:C6:E0:7D:E7:E4:5C:6E:88 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F8BB2870F866956DE11280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c61d555-9b3a-3829-8295-220018b2d077.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 40.138.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:bb:28:70:f8:66:95:6d:e1:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=4e05f00f-7207-443a-99fc-ad802febfe2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:aa:0a:af:23:58:84:17:72:21:26:6e:87:21: f4:0f:f4:ea:a7:45:93:e3:6b:ff:c7:36:5b:5b:36: 6b:4c:9c:97:8f:54:4c:54:30:53:86:1f:c4:06:f2: eb:a6:73:34:05:1a:b4:18:4d:ae:69:f1:69:6b:5b: e6:cd:97:af:04:89:19:a2:af:82:e4:de:4f:60:53: b6:e0:72:c2:56:ac:96:e3:38:5f:6b:87:71:2a:ae: c0:92:2a:40:fc:21:5a:01:23:09:f1:c1:5b:ac:cb: 00:84:4f:40:c7:f6:5c:16:27:f8:ff:09:57:9b:ea: 32:f1:8a:98:d5:30:48:55:48:20:35:db:89:54:34: 54:bd:ef:2d:94:7e:14:c1:20:4a:b8:23:dc:f4:24: 9e:e5:a3:8c:c3:2e:37:75:5c:7e:99:1a:97:94:00: b4:82:d1:7e:80:45:08:ca:ba:56:4b:a6:93:35:a9: 04:09:a2:81:1b:81:84:b3:db:0e:b8:f8:2d:a2:9e: d3:33:a2:f6:92:99:a2:c9:7f:26:ba:23:ef:e1:77: 6c:28:c3:59:2f:1a:bc:31:b0:7c:37:d5:2b:2a:36: 67:d6:e1:27:82:d9:ef:e2:f9:e9:37:fb:06:02:d5: d6:54:f4:ef:48:ba:da:07:ba:e7:69:c2:5e:65:f0: 3e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C2:C0:D3:0A:67:8C:58:70:C0:36:71:C6:E0:7D:E7:E4:5C:6E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c61d555-9b3a-3829-8295-220018b2d077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:41:c7:0e:ca:01:19:1f:b6:9c:d0:1e:ca:2d:46:54:7b:7e: a2:8c:fc:9a:a9:6b:5c:3c:01:63:24:4e:74:21:0a:9c:10:e7: 4d:05:39:ad:aa:e4:ce:97:60:ab:ff:cb:9b:08:47:c5:15:4c: 2f:ad:47:d9:a0:67:3c:15:37:15:47:a1:98:3c:dd:de:ed:1b: 07:b5:a8:7a:e9:13:f3:65:67:1b:ea:83:9e:75:e4:df:6b:30: 6e:2f:ab:00:b7:6a:4d:3e:ac:47:ea:74:b8:06:d6:f6:f1:28: f8:84:d2:bf:8b:15:65:13:8f:17:06:09:69:54:ac:60:b2:af: 34:25:b2:3e:00:9b:f3:b1:06:28:5f:9f:7a:3b:d2:20:ac:46: 63:60:36:fc:52:d5:d0:1b:c3:d9:b5:57:2c:94:54:7f:ec:33: 7c:33:d9:95:de:c5:8f:88:84:22:37:07:3f:3b:bc:30:69:9b: 92:b5:90:54:e0:4d:0e:8e:e2:5a:e5:82:76:f9:0e:47:fe:4c: ac:27:84:22:ac:49:69:ca:ee:42:43:7b:5c:5b:6b:d1:44:6f: 26:a9:34:07:c9:64:e5:fb:f6:43:0d:4b:bc:92:3c:15:8b:76: 58:1f:83:5a:80:7e:f9:9b:64:40:aa:82:1a:c7:95:ca:cb:94: bc:8f:68:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+LsocPhmlW3hEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NGUwNWYwMGYtNzIwNy00NDNhLTk5ZmMtYWQ4MDJmZWJmZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqoKryNYhBdyISZuhyH0D/Tqp0WT42v/xzZb WzZrTJyXj1RMVDBThh/EBvLrpnM0BRq0GE2uafFpa1vmzZevBIkZoq+C5N5PYFO2 4HLCVqyW4zhfa4dxKq7AkipA/CFaASMJ8cFbrMsAhE9Ax/ZcFif4/wlXm+oy8YqY 1TBIVUggNduJVDRUve8tlH4UwSBKuCPc9CSe5aOMwy43dVx+mRqXlAC0gtF+gEUI yrpWS6aTNakECaKBG4GEs9sOuPgtop7TM6L2kpmiyX8muiPv4XdsKMNZLxq8MbB8 N9UrKjZn1uEngtnv4vnpN/sGAtXWVPTvSLraB7rnacJeZfA+IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILCwNMKZ4xYcMA2ccbgfefkXG6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGM2MWQ1NTUtOWIzYS0z ODI5LTgyOTUtMjIwMDE4YjJkMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIo7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxBxw7KARkftpzQHsotRlR7fqKM/Jqpa1w8AWMkTnQhCpwQ500FOa2q 5M6XYKv/y5sIR8UVTC+tR9mgZzwVNxVHoZg83d7tGwe1qHrpE/NlZxvqg5515N9r MG4vqwC3ak0+rEfqdLgG1vbxKPiE0r+LFWUTjxcGCWlUrGCyrzQlsj4Am/OxBihf n3o70iCsRmNgNvxS1dAbw9m1VyyUVH/sM3wz2ZXexY+IhCI3Bz87vDBpm5K1kFTg TQ6O4lrlgnb5Dkf+TKwnhCKsSWnK7kJDe1xba9FEbyapNAfJZOX79kMNS7ySPBWL dlgfg1qAfvmbZECqghrHlcrLlLyPaEc= -----END CERTIFICATE-----Generated at Sun Apr 6 14:01:50 2025 by rpki-client