$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8965329d-5d46-3e83-98fa-ea126d8c360b.roa File: 8965329d-5d46-3e83-98fa-ea126d8c360b.roa (raw, json) Hash identifier: J8EXG794XOs3TmTkqZhm6/FdutVu+1Nr7JrEJa7p19Q= Subject key identifier: 52:68:22:EF:1A:D0:7B:E6:C5:5D:3B:73:3F:63:00:53:51:ED:B0:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB93AAFAD49271B30D963B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8965329d-5d46-3e83-98fa-ea126d8c360b.roa Signing time: Thu 06 Feb 2025 18:13:31 +0000 ROA not before: Thu 06 Feb 2025 18:13:31 +0000 ROA not after: Wed 07 May 2025 17:13:31 +0000 asID: 7029 IP address blocks: 40.133.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:93:aa:fa:d4:92:71:b3:0d:96:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:13:31 2025 GMT Not After : May 7 17:13:31 2025 GMT Subject: CN=01fc0c00-214f-429d-9ed4-c4a2d0cab07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:49:9e:88:73:e4:2b:42:8c:87:58:8f:51:b8: ab:49:b4:4a:7e:da:09:53:75:09:ac:6d:35:96:c1: 82:a5:83:e9:a3:e6:e9:c2:38:7d:dc:bd:39:79:5a: 45:b1:7b:6a:89:b5:30:64:75:d6:69:00:83:f5:34: be:1f:6a:e3:d0:01:0e:18:c4:05:a9:21:fe:0d:27: 0d:ef:8a:fd:74:f7:1f:60:da:69:59:49:e1:7e:29: 9a:2e:60:77:a2:24:e3:fb:00:6b:1b:7c:2d:22:fd: d2:29:96:d2:c6:28:e7:f1:4e:7c:35:25:b9:29:63: f0:71:38:77:eb:7a:ff:7a:7c:02:01:9b:ad:72:16: 49:2e:b9:5a:c5:08:97:c7:0a:12:76:8f:8e:61:a9: 79:0b:f3:bd:6c:ca:a9:9e:0b:aa:27:bd:5a:77:74: a5:be:cb:08:b8:7c:f4:2d:03:9c:64:e6:21:1d:d3: 91:91:10:f3:0b:d9:d4:1e:e0:89:c3:39:34:d3:06: fb:6b:76:98:12:03:74:eb:c5:e0:cc:19:5a:40:8b: 88:b8:2a:ce:76:26:6b:1d:81:e2:0e:a3:3e:d6:60: 80:bd:e1:d3:ca:59:60:da:b7:7d:67:86:bb:b1:19: b7:0d:a2:1c:92:e4:85:33:1f:ca:fd:3d:e6:a7:bb: ba:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:68:22:EF:1A:D0:7B:E6:C5:5D:3B:73:3F:63:00:53:51:ED:B0:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8965329d-5d46-3e83-98fa-ea126d8c360b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.133.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:fa:c5:d3:d2:b8:4a:b2:99:24:3f:f1:60:39:4e:39:cf:91: 56:62:d2:18:c1:88:e2:95:87:58:81:87:e1:61:b8:db:4a:ff: 44:10:a6:8c:00:21:f8:1b:d4:98:7d:f6:e5:6c:b4:7c:ea:8a: c1:2f:f6:84:f2:63:40:4b:6d:f2:b0:2e:b6:9d:57:d8:71:12: f0:84:57:d4:6e:e1:33:9d:93:98:79:da:7d:62:6c:db:61:7d: 97:87:9a:8f:7a:64:0d:ae:d1:21:d6:3d:d7:35:fe:00:d1:24: 15:19:70:37:fc:1b:fb:6e:08:05:e0:2d:9b:4b:7d:88:58:05: 75:47:0c:f6:95:2c:53:59:48:07:d6:11:37:62:cb:85:1e:8a: a2:dc:58:a7:38:84:86:4a:78:7c:1d:d0:c2:1f:8a:b0:f4:7a: 91:b0:58:75:0c:37:03:53:40:6b:a7:77:db:21:fd:46:fd:ff: aa:b2:a3:e9:61:fb:91:a0:cf:55:8f:19:9a:69:e0:0f:a4:99: 07:a5:ee:eb:3a:9f:e1:bf:0e:1e:b1:a1:ab:bd:47:28:41:d1: fd:40:46:cd:31:8a:51:7d:be:14:94:ec:cc:2f:bb:a6:30:bd: 29:51:70:6c:2e:4b:41:3c:19:4b:6e:3d:0a:9a:ce:08:00:2f: f5:e4:58:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLk6r61JJxsw2WOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTMzMVoXDTI1MDUwNzE3MTMzMVowLzEtMCsGA1UEAxMk MDFmYzBjMDAtMjE0Zi00MjlkLTllZDQtYzRhMmQwY2FiMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UmeiHPkK0KMh1iPUbirSbRKftoJU3UJrG01 lsGCpYPpo+bpwjh93L05eVpFsXtqibUwZHXWaQCD9TS+H2rj0AEOGMQFqSH+DScN 74r9dPcfYNppWUnhfimaLmB3oiTj+wBrG3wtIv3SKZbSxijn8U58NSW5KWPwcTh3 63r/enwCAZutchZJLrlaxQiXxwoSdo+OYal5C/O9bMqpnguqJ71ad3SlvssIuHz0 LQOcZOYhHdORkRDzC9nUHuCJwzk00wb7a3aYEgN068XgzBlaQIuIuCrOdiZrHYHi DqM+1mCAveHTyllg2rd9Z4a7sRm3DaIckuSFMx/K/T3mp7u6iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJoIu8a0HvmxV07cz9jAFNR7bBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODk2NTMyOWQtNWQ0Ni0z ZTgzLTk4ZmEtZWExMjZkOGMzNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH6xdPSuEqymSQ/8WA5TjnPkVZi0hjBiOKVh1iBh+FhuNtK/0QQpowA Ifgb1Jh99uVstHzqisEv9oTyY0BLbfKwLradV9hxEvCEV9Ru4TOdk5h52n1ibNth fZeHmo96ZA2u0SHWPdc1/gDRJBUZcDf8G/tuCAXgLZtLfYhYBXVHDPaVLFNZSAfW ETdiy4UeiqLcWKc4hIZKeHwd0MIfirD0epGwWHUMNwNTQGund9sh/Ub9/6qyo+lh +5Ggz1WPGZpp4A+kmQel7us6n+G/Dh6xoau9RyhB0f1ARs0xilF9vhSU7Mwvu6Yw vSlRcGwuS0E8GUtuPQqazggAL/XkWM4= -----END CERTIFICATE-----Generated at Sat Apr 5 21:29:59 2025 by rpki-client