$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9bd8893b-773c-3adb-ab21-ad7e08335697.roa File: 9bd8893b-773c-3adb-ab21-ad7e08335697.roa (raw, json) Hash identifier: qc0262X9jvr1fnDYDuNjTc8/cbTkCjlK8zMPUerNhig= Subject key identifier: BF:E8:C9:A3:24:16:0A:F3:58:D4:75:96:0F:E0:09:15:4D:48:ED:80 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716A6116AE2094D2AF7780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9bd8893b-773c-3adb-ab21-ad7e08335697.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.131.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:6a:61:16:ae:20:94:d2:af:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=b978d2d1-e3d5-44f5-8bbe-42d1ae190a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:30:15:ea:9a:88:79:c4:ea:b1:90:45:fe: ef:7f:a8:75:9e:ff:b9:cb:f9:15:d1:f7:90:f7:d5: 10:82:d7:9c:ad:b2:f0:ee:af:13:ae:10:50:f1:54: aa:66:06:82:29:88:65:65:88:70:f0:90:f6:e5:70: ed:bf:6b:bc:09:2b:7d:89:25:8a:c3:41:07:62:7e: d4:d1:16:c8:8c:6a:25:56:bb:9b:ce:06:29:5b:fa: 12:32:db:53:87:2c:ff:ae:65:48:55:eb:96:01:83: 29:d1:22:9d:02:1e:d3:f1:05:8b:d0:94:a5:60:c2: 49:eb:84:96:f7:1f:df:a8:a1:cd:4d:22:0e:f4:ce: c0:e0:b8:d2:48:d0:33:f5:52:5a:0c:51:27:cc:99: 60:a1:06:51:6b:e5:de:77:43:ee:a2:17:16:b9:e3: 64:08:f1:aa:60:a3:c3:fd:16:f2:a8:c9:ce:b9:14: 24:49:38:9e:80:5b:e1:1b:2c:da:70:e5:99:41:5a: e2:0b:c2:32:4f:43:80:5b:73:10:a2:79:d6:90:94: 35:82:f1:27:11:bf:bc:19:11:27:f6:5d:c4:d6:db: 4f:6d:22:e7:f3:2d:95:a9:ed:63:58:68:fb:38:2e: 2b:1a:b3:be:d4:84:aa:dd:ac:74:46:bd:23:3c:01: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E8:C9:A3:24:16:0A:F3:58:D4:75:96:0F:E0:09:15:4D:48:ED:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9bd8893b-773c-3adb-ab21-ad7e08335697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.131.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ee:04:7d:8d:a8:e5:b7:87:ac:8a:71:69:0d:fd:4c:10:6a: d1:61:83:e4:6c:1f:7d:92:90:2f:9e:22:75:19:49:69:ae:ee: 08:42:b9:6c:62:65:b7:73:cc:cc:61:32:e0:d4:ed:2c:d4:ef: ac:74:4a:cf:07:72:18:5f:6a:da:f4:50:43:b4:f5:39:07:87: 5f:dc:de:90:c4:e4:23:04:32:02:20:91:17:e8:7a:31:14:e4: 63:a2:79:3b:b0:02:bb:b8:36:a2:3d:1d:9a:ea:1d:91:c8:99: fc:cc:62:d3:44:5b:16:0d:fa:ed:5a:f3:7e:1c:64:fe:cb:b6: 16:eb:f6:1b:d9:08:6a:44:1a:50:7e:f6:38:c1:a7:ad:1d:28: 5c:47:30:30:7e:dd:24:e4:7e:1c:6f:bd:72:97:a9:b9:59:d8: 1d:e1:b9:11:46:4d:22:30:05:fc:88:a0:36:72:ed:c5:3a:a2: d7:58:3d:6b:7c:3f:c0:0e:c5:ac:14:57:2d:bb:1b:6b:f7:8f: 7e:7e:39:c6:f1:67:f2:6a:8f:77:12:40:2b:3a:3c:9b:87:32: b1:76:78:25:71:f3:22:30:1d:c7:60:9c:52:d8:39:d0:ea:4d: ab:bb:32:ad:72:60:80:37:7a:69:07:2d:00:04:2c:b3:0e:90: e6:96:56:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWphFq4glNKvd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk Yjk3OGQyZDEtZTNkNS00NGY1LThiYmUtNDJkMWFlMTkwYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKEwFeqaiHnE6rGQRf7vf6h1nv+5y/kV0feQ 99UQgtecrbLw7q8TrhBQ8VSqZgaCKYhlZYhw8JD25XDtv2u8CSt9iSWKw0EHYn7U 0RbIjGolVrubzgYpW/oSMttThyz/rmVIVeuWAYMp0SKdAh7T8QWL0JSlYMJJ64SW 9x/fqKHNTSIO9M7A4LjSSNAz9VJaDFEnzJlgoQZRa+Xed0PuohcWueNkCPGqYKPD /RbyqMnOuRQkSTiegFvhGyzacOWZQVriC8IyT0OAW3MQonnWkJQ1gvEnEb+8GREn 9l3E1ttPbSLn8y2Vqe1jWGj7OC4rGrO+1ISq3ax0Rr0jPAE9mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/oyaMkFgrzWNR1lg/gCRVNSO2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWJkODg5M2ItNzczYy0z YWRiLWFiMjEtYWQ3ZTA4MzM1Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXuBH2NqOW3h6yKcWkN/UwQatFhg+RsH32SkC+eInUZSWmu7ghCuWxi ZbdzzMxhMuDU7SzU76x0Ss8Hchhfatr0UEO09TkHh1/c3pDE5CMEMgIgkRfoejEU 5GOieTuwAru4NqI9HZrqHZHImfzMYtNEWxYN+u1a834cZP7Lthbr9hvZCGpEGlB+ 9jjBp60dKFxHMDB+3STkfhxvvXKXqblZ2B3huRFGTSIwBfyIoDZy7cU6otdYPWt8 P8AOxawUVy27G2v3j35+OcbxZ/Jqj3cSQCs6PJuHMrF2eCVx8yIwHcdgnFLYOdDq Tau7Mq1yYIA3emkHLQAELLMOkOaWVq0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:18:00 2025 by rpki-client