$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65e5ca1-7e43-3fef-8917-73c4ef4f52f3.roa File: a65e5ca1-7e43-3fef-8917-73c4ef4f52f3.roa (raw, json) Hash identifier: Cj9QgP48t2JUphpyVhFAt4/AzDwhu4LKkT8KYTKol4o= Subject key identifier: 82:2F:BC:C0:65:C1:A1:A1:A1:A9:95:E9:98:58:4F:E8:61:85:67:AA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DA71027A3A8844006429FC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65e5ca1-7e43-3fef-8917-73c4ef4f52f3.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 139.55.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:02:7a:3a:88:44:00:64:29:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=277d9da2-4bf1-42f8-8bfc-ab2a5404baf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:12:fd:e8:e1:8a:38:58:cd:a2:33:19:b7:03: ae:63:c8:c4:6b:1a:5a:1d:e9:e1:c1:82:14:7a:99: 41:6e:57:66:9a:55:33:58:74:be:62:8d:ef:74:b3: 34:38:e1:9a:2c:78:2a:00:26:6b:99:9a:4b:cc:2c: 93:1f:ab:71:8d:e8:ff:03:d6:9c:a6:cf:6b:a5:72: 5b:5f:71:31:23:2a:59:47:d4:f5:03:f6:06:c9:17: c9:11:1a:04:8d:01:4b:54:b7:7f:ba:25:73:37:5c: 4e:86:1a:53:f0:f5:74:b7:f4:83:07:b7:51:89:76: e9:23:be:0f:d0:d5:26:15:51:a6:2b:7a:8c:28:2e: c2:be:67:83:01:99:66:73:6b:7d:9a:cc:d4:ed:b3: a0:3b:b3:d2:e8:dc:c1:d1:3c:8d:5c:77:4f:38:d6: 61:0e:36:ef:5c:d8:1c:49:85:7c:e8:19:e4:26:c5: 48:49:d9:16:f4:71:71:62:aa:70:1a:88:3f:f5:3a: fe:2d:b6:4f:25:d5:44:d5:8a:56:0a:f3:60:37:8e: 00:46:94:a5:69:48:7f:71:39:4c:37:c0:b3:c9:7d: f6:71:b9:78:0a:bf:b3:85:cd:ae:2e:62:a5:57:b2: 0e:39:48:d2:1c:d7:73:55:be:f8:c4:c3:7f:5e:50: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2F:BC:C0:65:C1:A1:A1:A1:A9:95:E9:98:58:4F:E8:61:85:67:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65e5ca1-7e43-3fef-8917-73c4ef4f52f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0c:53:68:8c:22:a4:11:14:d1:82:59:02:86:02:15:1e:7c: 27:6c:91:d8:0b:14:86:b2:bb:ca:a4:65:05:5a:9a:e0:a2:73: b4:ea:5c:0e:06:6e:fd:82:15:3e:81:26:ca:08:45:2f:0c:18: 46:73:ac:0e:7e:ee:f7:8b:97:30:e3:f8:27:73:4b:0f:42:fa: d7:c3:d5:96:99:20:e0:0b:fd:b7:7f:54:e5:96:80:06:1a:32: 1d:fd:68:e1:72:eb:82:1a:28:eb:62:bd:5b:74:b3:e8:cb:1d: 00:a0:e7:0e:8e:f9:f2:a8:e9:24:73:d2:18:91:db:4f:a5:92: 63:ae:75:8e:6f:10:7d:c9:a4:b6:91:d9:ab:4b:4b:a2:88:f8: af:a1:68:53:73:d9:a5:84:39:09:ab:80:8f:cb:9d:64:ef:ca: 5f:f2:5d:8e:c8:58:c2:54:ba:44:ea:98:58:65:58:bb:ae:99: c1:3d:88:56:df:72:1a:9b:c9:3c:5e:f8:39:cf:63:58:1d:d9: ef:a0:6a:48:2c:5d:ef:96:62:e2:0e:60:ee:45:74:03:e6:e9: b6:40:ba:7f:0a:40:4f:f5:ce:bb:70:3f:9d:9a:99:6f:0e:86: 05:7f:05:bf:c5:7d:3b:1e:79:1f:e4:35:ac:d6:c0:d8:99:03: af:b1:7c:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQJ6OohEAGQp/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk Mjc3ZDlkYTItNGJmMS00MmY4LThiZmMtYWIyYTU0MDRiYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRL96OGKOFjNojMZtwOuY8jEaxpaHenhwYIU eplBbldmmlUzWHS+Yo3vdLM0OOGaLHgqACZrmZpLzCyTH6txjej/A9acps9rpXJb X3ExIypZR9T1A/YGyRfJERoEjQFLVLd/uiVzN1xOhhpT8PV0t/SDB7dRiXbpI74P 0NUmFVGmK3qMKC7CvmeDAZlmc2t9mszU7bOgO7PS6NzB0TyNXHdPONZhDjbvXNgc SYV86BnkJsVISdkW9HFxYqpwGog/9Tr+LbZPJdVE1YpWCvNgN44ARpSlaUh/cTlM N8CzyX32cbl4Cr+zhc2uLmKlV7IOOUjSHNdzVb74xMN/XlCgVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIvvMBlwaGhoamV6ZhYT+hhhWeqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY1ZTVjYTEtN2U0My0z ZmVmLTg5MTctNzNjNGVmNGY1MmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDizcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEMU2iMIqQRFNGCWQKGAhUefCdskdgLFIayu8qkZQVamuCic7TqXA4G bv2CFT6BJsoIRS8MGEZzrA5+7veLlzDj+CdzSw9C+tfD1ZaZIOAL/bd/VOWWgAYa Mh39aOFy64IaKOtivVt0s+jLHQCg5w6O+fKo6SRz0hiR20+lkmOudY5vEH3JpLaR 2atLS6KI+K+haFNz2aWEOQmrgI/LnWTvyl/yXY7IWMJUukTqmFhlWLuumcE9iFbf chqbyTxe+DnPY1gd2e+gakgsXe+WYuIOYO5FdAPm6bZAun8KQE/1zrtwP52amW8O hgV/Bb/FfTseeR/kNazWwNiZA6+xfBA= -----END CERTIFICATE-----Generated at Sat Apr 5 20:39:33 2025 by rpki-client