$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bffed36-f32f-3b71-8966-29804d04ee97.roa File: 8bffed36-f32f-3b71-8966-29804d04ee97.roa (raw, json) Hash identifier: UY5GBRI0F+0eOtZ/SRHJwJFDLSOhY4+G34lQPaLBsRE= Subject key identifier: 08:2F:B6:DB:7E:BE:2A:10:B1:57:27:11:47:B6:C9:B6:3F:BD:76:CF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716A4F2614F20F691FE8B9 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bffed36-f32f-3b71-8966-29804d04ee97.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.131.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:6a:4f:26:14:f2:0f:69:1f:e8:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=92b90b42-eb2c-4333-9b70-0278b25d0db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:aa:ea:bb:35:d6:31:89:6c:ed:04:99:3d:1f: 35:ae:1b:c9:a9:e9:00:47:5b:44:a1:72:04:b4:64: 38:89:5c:ad:4f:42:58:d5:26:e2:f3:69:4b:84:ee: cb:60:bb:45:76:ed:59:a2:32:da:88:ca:a0:28:16: 18:f4:55:b9:85:2c:03:ca:cf:f6:1b:60:58:b3:8e: cf:83:2e:02:c5:4b:77:4a:54:78:c4:91:14:67:a0: 4b:65:d6:42:31:9c:d8:62:78:b2:a0:5e:3c:ed:1f: e9:bd:ef:a6:0f:71:03:21:db:90:32:39:41:0f:28: b5:a2:6a:df:c6:8e:9d:bb:ce:ea:05:73:e5:4e:71: b8:23:ed:63:a4:32:17:6e:d6:a2:93:7c:ec:66:e3: 4a:38:5e:a0:ef:c3:c0:31:a7:dc:87:c6:2f:1f:42: b8:72:8e:c7:d6:be:8b:4a:55:80:a5:30:01:d0:9d: d2:a6:79:94:f9:0b:57:45:ed:03:a5:1c:5c:4f:81: 90:49:3d:78:e8:68:20:5a:79:88:ab:be:92:fd:af: a0:c4:16:c4:68:34:33:91:57:66:a7:7b:bd:e3:96: de:5f:6b:c4:c1:91:50:48:a8:14:3d:df:27:77:2a: 05:31:3c:03:5a:b7:4f:40:7a:6a:32:3c:59:00:c7: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2F:B6:DB:7E:BE:2A:10:B1:57:27:11:47:B6:C9:B6:3F:BD:76:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bffed36-f32f-3b71-8966-29804d04ee97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.131.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ab:2c:d2:9f:2e:0e:04:e7:30:3f:55:f0:f3:48:5b:9e:42: 99:d5:ee:ef:bc:5a:11:f7:37:5f:79:d1:1c:bc:9a:3c:1e:a5: eb:cb:98:6e:26:a5:b0:06:db:fd:87:05:53:ec:2a:a2:9e:4f: 95:d5:39:e3:fd:a9:66:c8:63:d9:15:69:cb:08:62:51:fc:55: 04:86:83:84:dc:46:e9:6d:dc:f6:05:b3:96:13:75:a2:4d:af: 7f:3d:c0:fc:a1:02:b8:4b:fe:be:9e:63:20:05:d9:8f:e4:2a: 8c:ec:85:8a:2c:a7:56:67:ad:d6:62:7f:22:c6:7c:58:03:f8: 39:c7:74:11:2e:04:df:fd:f7:14:ab:f8:ff:75:49:99:78:f8: c6:12:75:9b:5f:24:1d:ab:90:f2:76:9b:ab:8f:7f:28:2a:b0: c7:91:32:3f:28:71:9e:e9:fa:73:61:cc:7e:05:63:80:c5:da: 51:db:6c:f8:f4:f3:1a:95:b5:82:a8:1c:ec:08:36:d5:d2:0f: c2:6f:35:aa:09:0a:34:bb:db:c5:2f:8a:36:fb:cb:b8:60:5c: 79:96:73:e2:1f:76:12:21:05:e7:9e:6a:82:f3:18:22:7d:79: 04:ab:2b:de:42:d7:6f:e3:bf:f6:89:51:4e:7b:a3:7a:a0:e6: 16:ef:47:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWpPJhTyD2kf6LkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk OTJiOTBiNDItZWIyYy00MzMzLTliNzAtMDI3OGIyNWQwZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkarquzXWMYls7QSZPR81rhvJqekAR1tEoXIE tGQ4iVytT0JY1Sbi82lLhO7LYLtFdu1ZojLaiMqgKBYY9FW5hSwDys/2G2BYs47P gy4CxUt3SlR4xJEUZ6BLZdZCMZzYYniyoF487R/pve+mD3EDIduQMjlBDyi1omrf xo6du87qBXPlTnG4I+1jpDIXbtaik3zsZuNKOF6g78PAMafch8YvH0K4co7H1r6L SlWApTAB0J3SpnmU+QtXRe0DpRxcT4GQST146GggWnmIq76S/a+gxBbEaDQzkVdm p3u945beX2vEwZFQSKgUPd8ndyoFMTwDWrdPQHpqMjxZAMf0GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgvttt+vioQsVcnEUe2ybY/vXbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGJmZmVkMzYtZjMyZi0z YjcxLTg5NjYtMjk4MDRkMDRlZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADerLNKfLg4E5zA/VfDzSFueQpnV7u+8WhH3N1950Ry8mjwepevLmG4m pbAG2/2HBVPsKqKeT5XVOeP9qWbIY9kVacsIYlH8VQSGg4TcRult3PYFs5YTdaJN r389wPyhArhL/r6eYyAF2Y/kKozshYosp1ZnrdZifyLGfFgD+DnHdBEuBN/99xSr +P91SZl4+MYSdZtfJB2rkPJ2m6uPfygqsMeRMj8ocZ7p+nNhzH4FY4DF2lHbbPj0 8xqVtYKoHOwINtXSD8JvNaoJCjS728Uvijb7y7hgXHmWc+IfdhIhBeeeaoLzGCJ9 eQSrK95C12/jv/aJUU57o3qg5hbvRzM= -----END CERTIFICATE-----Generated at Sun Apr 6 03:52:31 2025 by rpki-client