$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c416a0e-c8a9-327d-8ca0-fc562292becf.roa File: 1c416a0e-c8a9-327d-8ca0-fc562292becf.roa (raw, json) Hash identifier: x7OaMDgh4B6NDm32+06Uk5NZg+q8mJl+dhQflqAgQNA= Subject key identifier: 98:28:8B:01:A2:E8:54:04:3F:3B:44:9D:EA:BE:BA:45:B0:CC:0D:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848E00685AEFD177258A339D660 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c416a0e-c8a9-327d-8ca0-fc562292becf.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.129.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:85:ae:fd:17:72:58:a3:39:d6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=4e9d9cab-0dc0-46c0-b62a-5f87b695f52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:34:9c:c4:f4:d2:e7:79:e8:b8:79:72:1a: 43:5b:38:c5:6f:cf:00:cf:97:23:78:89:80:42:79: f9:1b:15:70:6c:58:ba:fe:21:2c:7c:c6:e1:f7:2c: cb:d4:6d:cb:33:0a:be:9a:de:3c:69:1f:7c:db:8c: a0:39:1f:20:fc:4d:64:6c:7b:92:7a:f7:1b:b2:a3: a6:93:53:cb:19:36:56:b5:83:ec:28:b5:59:93:b5: f6:a1:4e:39:e7:45:71:87:c0:bc:34:78:21:8e:43: 43:0f:31:d1:56:f2:0f:48:b9:e9:fa:95:7c:04:1a: f2:93:93:c5:e0:74:42:db:3a:be:f1:35:0c:38:9d: 06:36:8b:e9:53:e9:a2:e6:90:12:ca:fa:ab:2d:13: f9:86:48:35:e2:9a:a9:5a:07:1e:8a:37:f0:c9:fe: 50:5a:61:53:17:e4:c5:5b:1a:13:1d:6c:26:93:7d: 2f:75:d5:25:eb:87:3a:6d:25:68:01:24:88:5a:b6: 41:39:ec:6b:0f:1b:af:df:ad:43:94:ea:9b:c4:00: 15:e6:6f:ac:54:19:12:16:1a:97:7f:c4:de:a9:b0: b3:6a:56:9c:60:59:9e:a7:53:03:d4:55:b9:24:1b: e4:a6:02:cd:1b:c5:de:f4:ea:ad:68:d0:d4:44:83: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:28:8B:01:A2:E8:54:04:3F:3B:44:9D:EA:BE:BA:45:B0:CC:0D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c416a0e-c8a9-327d-8ca0-fc562292becf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.129.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4d:56:b7:e2:36:da:f1:44:5f:f5:bc:a5:49:b7:57:ea:4b: 0b:34:97:75:4f:82:b5:77:97:fb:91:c5:c8:44:7c:85:15:d7: 36:6d:53:d8:41:91:b7:f5:38:6b:c7:37:0f:98:29:04:3d:22: 60:20:c7:0c:ec:0d:76:c3:4a:4d:64:d6:36:33:49:f9:b8:ea: 22:a4:80:43:fc:62:d9:11:60:a1:81:59:d7:5e:69:f7:75:11: ff:f5:bb:1c:09:48:5c:18:a7:12:ca:28:08:15:bf:ef:d3:e0: 3d:4f:67:b2:9f:4b:fc:2e:2a:08:75:22:e9:09:c0:01:4d:ed: 92:a7:5f:e2:40:6a:22:3f:5b:8b:b2:34:32:94:7c:0a:bf:c0: de:53:62:c8:83:35:de:9c:c2:f7:c3:91:f5:01:0c:51:53:65: 31:d7:0e:21:95:91:0f:35:60:4d:ed:ac:2a:c7:2a:11:81:0b: 89:f3:7e:32:8b:33:76:cb:68:21:4c:9f:c9:60:5a:63:2a:f5: 2b:25:23:63:58:80:c3:29:aa:02:c7:5f:ae:45:9f:8a:da:7e: 1c:1f:4b:d1:34:d3:3e:35:5c:4c:f9:82:20:44:82:09:58:51: bb:f4:ea:e1:82:98:b0:4a:de:f2:61:a6:a2:85:7d:2b:aa:88: de:66:80:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBoWu/RdyWKM51mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NGU5ZDljYWItMGRjMC00NmMwLWI2MmEtNWY4N2I2OTVmNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b80nMT00ud56Lh5chpDWzjFb88Az5cjeImA Qnn5GxVwbFi6/iEsfMbh9yzL1G3LMwq+mt48aR9824ygOR8g/E1kbHuSevcbsqOm k1PLGTZWtYPsKLVZk7X2oU4550Vxh8C8NHghjkNDDzHRVvIPSLnp+pV8BBryk5PF 4HRC2zq+8TUMOJ0GNovpU+mi5pASyvqrLRP5hkg14pqpWgceijfwyf5QWmFTF+TF WxoTHWwmk30vddUl64c6bSVoASSIWrZBOexrDxuv361DlOqbxAAV5m+sVBkSFhqX f8TeqbCzalacYFmep1MD1FW5JBvkpgLNG8Xe9OqtaNDURIPR/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgoiwGi6FQEPztEneq+ukWwzA3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWM0MTZhMGUtYzhhOS0z MjdkLThjYTAtZmM1NjIyOTJiZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIGPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZNVrfiNtrxRF/1vKVJt1fqSws0l3VPgrV3l/uRxchEfIUV1zZtU9hB kbf1OGvHNw+YKQQ9ImAgxwzsDXbDSk1k1jYzSfm46iKkgEP8YtkRYKGBWddeafd1 Ef/1uxwJSFwYpxLKKAgVv+/T4D1PZ7KfS/wuKgh1IukJwAFN7ZKnX+JAaiI/W4uy NDKUfAq/wN5TYsiDNd6cwvfDkfUBDFFTZTHXDiGVkQ81YE3trCrHKhGBC4nzfjKL M3bLaCFMn8lgWmMq9SslI2NYgMMpqgLHX65Fn4rafhwfS9E00z41XEz5giBEgglY Ubv06uGCmLBK3vJhpqKFfSuqiN5mgIc= -----END CERTIFICATE-----Generated at Sat Apr 5 18:29:06 2025 by rpki-client