$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/654dd9cc-b166-3061-853e-a33f75bc0504.roa File: 654dd9cc-b166-3061-853e-a33f75bc0504.roa (raw, json) Hash identifier: 0D8iYg3MQa1QDlYc1jBd6ihZnpLTvbRirWMkbOxV5qQ= Subject key identifier: 9A:AD:70:93:9D:88:99:E8:8F:A5:9B:2B:4F:D0:C3:4A:08:02:D1:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F8BAF09D5FE60B5F9F9B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/654dd9cc-b166-3061-853e-a33f75bc0504.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 40.133.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:ba:f0:9d:5f:e6:0b:5f:9f:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d2968fd1-7fcf-4587-a189-3c6d224a502f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c9:d5:d1:70:aa:b2:a8:65:25:08:e9:02:e9: 49:f0:34:79:14:cb:0c:6d:70:76:33:8d:ee:11:2e: 37:79:8d:9d:64:0d:2d:f1:05:92:13:34:4d:0b:ab: f7:34:97:64:db:5c:38:a6:4d:48:94:fb:1f:c2:93: 4b:bb:c8:de:10:b5:23:cd:81:c0:d1:eb:c6:ed:f7: 95:ed:57:8f:74:f8:bb:1d:91:35:a9:df:59:ce:de: f6:2a:b9:16:0f:b8:ee:de:05:dd:e6:f4:9a:97:60: e4:05:a9:8b:4b:af:a4:52:2e:16:ce:98:4c:a8:8e: 38:aa:ce:03:b4:01:46:fc:5b:c7:a9:ea:78:97:4e: bf:53:b3:e4:6b:25:93:7a:6b:f7:21:72:40:59:c1: 13:2d:ae:20:54:23:07:59:6d:2c:6c:18:a3:6a:54: 12:87:30:70:f4:72:f4:1e:71:be:3e:63:10:aa:12: 55:22:be:11:c2:7d:5a:a2:0d:fc:ca:51:c6:a8:4f: 4e:3e:83:bc:a9:79:ab:48:8d:d8:15:cd:3c:4e:54: 58:2a:c6:44:d3:50:61:2c:54:c0:25:72:11:cd:cb: 75:0f:5e:4c:11:fd:09:bb:d7:5d:a0:1f:11:7f:ad: db:40:ec:51:05:fb:1a:01:94:e8:85:cb:47:9e:e8: 72:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AD:70:93:9D:88:99:E8:8F:A5:9B:2B:4F:D0:C3:4A:08:02:D1:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/654dd9cc-b166-3061-853e-a33f75bc0504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.133.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3e:32:dd:87:cf:36:bc:62:21:fa:11:0c:ec:2c:46:d1:28: a4:c2:f2:9a:49:d8:83:a3:27:ad:97:99:52:19:7f:39:bf:fa: f7:59:1e:22:4a:57:30:74:f3:94:5a:ac:32:f0:49:2a:a4:0c: fc:03:dd:85:91:fe:8d:a5:d6:aa:af:36:6a:bc:56:fc:b9:17: 04:d0:c4:d9:a2:5e:56:70:6a:33:fa:cb:f5:86:a9:72:f7:ed: 5f:5b:b2:9b:7a:63:38:a8:9f:a9:6a:30:5e:21:d1:20:c0:d2: 06:c4:e2:95:af:12:f2:5a:ef:d9:62:a6:89:d3:ab:a4:5f:dc: 32:0a:fc:6c:71:ed:06:a2:5d:db:8b:ec:1c:c0:fc:64:ed:26: b3:71:02:76:a5:be:67:c5:92:c8:05:ba:6f:2e:59:6a:98:98: 1f:3d:42:76:6d:8a:a6:af:24:af:8b:3e:34:ee:f4:44:11:95: c7:b1:a7:89:2e:34:d6:4b:c9:4f:52:88:8e:26:5f:c8:b8:a4: 83:82:30:78:10:a9:41:36:17:c2:d6:28:a2:fc:dd:32:06:54: c1:63:57:5c:75:75:1e:d7:be:9b:1c:87:87:7b:a4:db:23:48: 9b:13:88:0f:cf:e5:d3:5b:c8:e9:39:bf:bc:17:5e:5e:f5:86: 88:09:06:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+LrwnV/mC1+fmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDI5NjhmZDEtN2ZjZi00NTg3LWExODktM2M2ZDIyNGE1MDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsnV0XCqsqhlJQjpAulJ8DR5FMsMbXB2M43u ES43eY2dZA0t8QWSEzRNC6v3NJdk21w4pk1IlPsfwpNLu8jeELUjzYHA0evG7feV 7VePdPi7HZE1qd9Zzt72KrkWD7ju3gXd5vSal2DkBamLS6+kUi4WzphMqI44qs4D tAFG/FvHqep4l06/U7PkayWTemv3IXJAWcETLa4gVCMHWW0sbBijalQShzBw9HL0 HnG+PmMQqhJVIr4Rwn1aog38ylHGqE9OPoO8qXmrSI3YFc08TlRYKsZE01BhLFTA JXIRzct1D15MEf0Ju9ddoB8Rf63bQOxRBfsaAZTohctHnuhyCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqtcJOdiJnoj6WbK0/Qw0oIAtHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjU0ZGQ5Y2MtYjE2Ni0z MDYxLTg1M2UtYTMzZjc1YmMwNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA+Mt2Hzza8YiH6EQzsLEbRKKTC8ppJ2IOjJ62XmVIZfzm/+vdZHiJK VzB085RarDLwSSqkDPwD3YWR/o2l1qqvNmq8Vvy5FwTQxNmiXlZwajP6y/WGqXL3 7V9bspt6Yzion6lqMF4h0SDA0gbE4pWvEvJa79liponTq6Rf3DIK/Gxx7QaiXduL 7BzA/GTtJrNxAnalvmfFksgFum8uWWqYmB89QnZtiqavJK+LPjTu9EQRlcexp4ku NNZLyU9SiI4mX8i4pIOCMHgQqUE2F8LWKKL83TIGVMFjV1x1dR7Xvpsch4d7pNsj SJsTiA/P5dNbyOk5v7wXXl71hogJBqU= -----END CERTIFICATE-----Generated at Sun Apr 6 01:05:27 2025 by rpki-client