$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa File: 757bd253-cf95-3776-a157-b88b50e26f1b.roa (raw, json) Hash identifier: 9nJggmJQlaLbPas2PPmX8WazWmzaQYAg7lmGaAY9UqE= Subject key identifier: A1:7F:D0:E8:44:00:8F:24:5D:DA:D1:41:B8:79:0C:73:DD:9C:00:C8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21117CD8D4D732C1E71DFE8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:17:cd:8d:4d:73:2c:1e:71:df:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=ef80fe7c-e7b5-431d-aa3f-f4f9c4ce6cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:7e:86:ca:08:46:af:8b:73:29:b0:28:1c: 67:1b:ba:e2:1b:c4:c3:9e:f0:73:6a:42:04:ee:14: 5f:af:7d:2d:66:c4:53:c8:6a:1e:79:22:b6:e2:2d: 1d:65:9f:e9:d0:13:b7:7e:d3:13:f0:d4:a4:bc:5f: 74:86:a8:0a:8c:fc:16:bf:dc:62:e3:43:b2:b5:c5: 58:af:e2:5e:67:4a:d6:09:76:28:6d:13:e6:87:7d: ce:8e:31:2a:c2:79:cf:c5:7e:06:23:85:d8:ef:9f: 35:56:07:d4:c4:8f:10:47:45:9c:6b:33:45:25:2a: 05:a1:34:26:76:62:09:16:85:33:96:42:8a:58:7d: 45:cb:3d:24:4c:50:76:44:2f:c0:32:6f:eb:fd:68: 6c:42:90:2b:f1:10:f2:50:bb:19:b3:c9:b7:b3:72: d8:24:04:73:da:ff:75:88:b5:d8:f0:7e:e0:11:05: a1:19:97:49:93:a7:43:5b:7a:a4:97:65:e5:58:65: 2d:0a:e1:1c:0c:eb:86:8a:90:f3:96:b1:bd:77:b0: f8:0e:c3:01:e2:b9:b1:90:7d:33:f4:f4:9f:7c:36: 87:e0:70:55:97:35:56:73:9a:d9:6f:ee:a9:7e:57: de:11:c7:ee:8d:93:c2:75:f5:c3:ca:70:c4:23:c8: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7F:D0:E8:44:00:8F:24:5D:DA:D1:41:B8:79:0C:73:DD:9C:00:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:51:c1:cc:d1:f5:d0:d2:d9:13:9d:21:df:76:45:5d:11:aa: 8e:2d:3f:24:4c:7a:d8:67:5a:97:88:12:7e:42:bb:bd:49:68: 91:7f:cb:f9:4c:49:70:0b:0f:11:86:81:24:f9:03:8c:48:92: 02:f8:eb:7b:10:a5:06:fe:b7:1a:26:05:5b:82:f5:d5:ae:f5: 22:14:cd:a3:bb:94:e7:0f:b1:64:70:ab:1d:8e:f6:cb:3d:d9: f3:fc:ee:b1:d4:41:d3:d4:6e:a1:c3:6e:9b:01:ab:cc:fc:1e: b5:0c:42:ab:85:40:0a:fb:34:90:30:3f:9b:d9:59:3d:bf:44: 49:66:63:67:89:83:c5:17:7c:63:f7:3a:0e:e6:ef:21:6c:04: b7:a6:3d:a4:70:6e:76:ec:8a:8d:15:ab:45:69:55:32:ab:ad: 97:d1:89:b9:21:fa:ae:11:eb:29:ce:1c:e3:11:c8:fe:b6:a8: ea:6f:c1:da:5d:91:35:4c:2f:6d:e0:ef:aa:8d:22:d2:3c:df: 4b:3a:81:e0:c5:73:d4:4f:14:f2:a9:54:9f:9c:19:0d:4c:69: 95:2c:9a:97:8d:22:21:66:24:b4:a1:3a:3d:3a:79:27:fe:1b: 82:be:a0:11:16:10:c8:42:2a:91:63:1a:45:6e:e2:f7:ff:2b: d1:2d:2e:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSERfNjU1zLB5x3+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWY4MGZlN2MtZTdiNS00MzFkLWFhM2YtZjRmOWM0Y2U2Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosh+hsoIRq+LcymwKBxnG7riG8TDnvBzakIE 7hRfr30tZsRTyGoeeSK24i0dZZ/p0BO3ftMT8NSkvF90hqgKjPwWv9xi40OytcVY r+JeZ0rWCXYobRPmh33OjjEqwnnPxX4GI4XY7581VgfUxI8QR0WcazNFJSoFoTQm dmIJFoUzlkKKWH1Fyz0kTFB2RC/AMm/r/WhsQpAr8RDyULsZs8m3s3LYJARz2v91 iLXY8H7gEQWhGZdJk6dDW3qkl2XlWGUtCuEcDOuGipDzlrG9d7D4DsMB4rmxkH0z 9PSffDaH4HBVlzVWc5rZb+6pflfeEcfujZPCdfXDynDEI8iDGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF/0OhEAI8kXdrRQbh5DHPdnADIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzU3YmQyNTMtY2Y5NS0z Nzc2LWExNTctYjg4YjUwZTI2ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhRwczR9dDS2ROdId92RV0Rqo4tPyRMethnWpeIEn5Cu71JaJF/y/lM SXALDxGGgST5A4xIkgL463sQpQb+txomBVuC9dWu9SIUzaO7lOcPsWRwqx2O9ss9 2fP87rHUQdPUbqHDbpsBq8z8HrUMQquFQAr7NJAwP5vZWT2/RElmY2eJg8UXfGP3 Og7m7yFsBLemPaRwbnbsio0Vq0VpVTKrrZfRibkh+q4R6ynOHOMRyP62qOpvwdpd kTVML23g76qNItI830s6geDFc9RPFPKpVJ+cGQ1MaZUsmpeNIiFmJLShOj06eSf+ G4K+oBEWEMhCKpFjGkVu4vf/K9EtLvA= -----END CERTIFICATE-----Generated at Sun Apr 6 03:33:53 2025 by rpki-client