$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd564c41-e023-395e-bdca-c86f40f460d6.roa File: bd564c41-e023-395e-bdca-c86f40f460d6.roa (raw, json) Hash identifier: yNW5dsJSO8W5sq6HdBn5Zuz5HewNMJD8Ah1Z3DqLLS0= Subject key identifier: 89:BF:A6:84:51:6F:EB:07:2C:8D:8F:9B:5E:C6:36:B5:F8:9B:31:3E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7169C9D406C0697624BB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd564c41-e023-395e-bdca-c86f40f460d6.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.131.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:69:c9:d4:06:c0:69:76:24:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=0178e5ae-42cd-4d10-988b-d6731215377c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e3:75:3c:c2:d3:49:d7:73:4a:4f:f2:a9:54: c5:86:5a:e0:66:9e:76:52:ff:50:ef:81:ab:89:c8: 3c:9d:0a:b4:e3:0f:15:39:d0:b0:3f:50:ca:9e:68: fa:d6:74:ea:90:c7:4a:ed:21:13:51:66:96:a1:a5: 06:bc:c8:43:52:b5:72:00:05:7d:0a:f9:66:0f:ac: d8:35:92:d8:32:9e:a4:a0:df:7b:94:4e:5d:3f:03: cd:c0:c4:88:d3:c8:9b:d9:41:30:6d:1e:ae:6b:5a: c6:46:8a:a6:41:27:f8:5d:e1:d2:b6:fe:1a:b9:7d: 77:ed:39:ce:22:63:f6:fc:86:dd:39:89:ad:1a:d1: 86:d0:7e:1f:fe:92:40:81:38:8f:ef:92:ae:d0:bf: b9:89:48:af:07:93:11:65:06:b4:b1:95:cd:54:86: 52:26:35:86:b5:6c:97:0c:b0:38:b8:95:45:4b:87: 05:80:9e:d2:d0:92:58:59:f3:53:b7:da:d6:4b:42: d3:f6:5e:b6:4b:17:e4:b3:8b:f0:b8:cc:3a:4b:a6: 2f:b2:02:58:fa:36:df:93:66:c4:ae:99:17:b7:45: 00:a3:38:07:70:07:1e:58:6b:40:0d:c1:c5:b0:5a: 1a:0a:cc:b8:0f:7e:1e:5f:66:55:ec:37:1c:ce:b2: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BF:A6:84:51:6F:EB:07:2C:8D:8F:9B:5E:C6:36:B5:F8:9B:31:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd564c41-e023-395e-bdca-c86f40f460d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.131.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:88:ce:38:34:16:2d:03:f7:81:46:e9:6e:27:0c:0c:83:ff: 46:be:87:30:3e:47:9b:e0:cb:90:3d:27:9f:d3:ba:d3:c3:a7: a4:3e:95:bf:c1:be:5e:5e:03:cd:a1:d3:ab:0f:28:db:fa:fe: 6c:d9:b4:b9:ec:c2:3e:95:05:be:6c:df:f3:3c:15:96:d8:0b: 6f:aa:af:0a:00:f1:95:3b:28:83:95:9a:b6:e1:d6:7e:16:46: ae:fc:58:af:bc:e0:c7:b7:e4:6c:90:ae:f2:12:33:36:c6:db: 59:f7:c5:cd:11:1a:85:da:ae:7d:b3:eb:f9:44:13:2d:7a:78: f3:64:9a:a7:31:0e:0f:1f:c4:06:3b:f6:78:60:79:33:4c:69: 98:2b:3e:52:5b:7b:71:ab:dc:d0:b2:6e:62:10:75:49:b6:c1: 72:10:37:c9:f2:41:85:90:a3:95:db:a6:f1:96:1b:8e:ac:bc: a5:84:99:4c:de:12:5e:cf:8d:5e:aa:a5:35:81:c3:fa:d1:7b: 4e:bc:e6:b0:ed:5d:bc:e5:ea:10:61:3d:c4:d2:2a:5d:de:21: 84:37:41:8c:e1:cf:ee:6c:66:7e:80:cb:af:2e:fd:f0:42:94: 8f:83:45:53:2e:84:8d:9a:a8:d9:34:62:ae:0f:59:8e:16:7c: c9:29:46:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWnJ1AbAaXYku4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MDE3OGU1YWUtNDJjZC00ZDEwLTk4OGItZDY3MzEyMTUzNzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uN1PMLTSddzSk/yqVTFhlrgZp52Uv9Q74Gr icg8nQq04w8VOdCwP1DKnmj61nTqkMdK7SETUWaWoaUGvMhDUrVyAAV9CvlmD6zY NZLYMp6koN97lE5dPwPNwMSI08ib2UEwbR6ua1rGRoqmQSf4XeHStv4auX137TnO ImP2/IbdOYmtGtGG0H4f/pJAgTiP75Ku0L+5iUivB5MRZQa0sZXNVIZSJjWGtWyX DLA4uJVFS4cFgJ7S0JJYWfNTt9rWS0LT9l62Sxfks4vwuMw6S6YvsgJY+jbfk2bE rpkXt0UAozgHcAceWGtADcHFsFoaCsy4D34eX2ZV7DcczrJ5twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm/poRRb+sHLI2Pm17GNrX4mzE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQ1NjRjNDEtZTAyMy0z OTVlLWJkY2EtYzg2ZjQwZjQ2MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaIzjg0Fi0D94FG6W4nDAyD/0a+hzA+R5vgy5A9J5/TutPDp6Q+lb/B vl5eA82h06sPKNv6/mzZtLnswj6VBb5s3/M8FZbYC2+qrwoA8ZU7KIOVmrbh1n4W Rq78WK+84Me35GyQrvISMzbG21n3xc0RGoXarn2z6/lEEy16ePNkmqcxDg8fxAY7 9nhgeTNMaZgrPlJbe3Gr3NCybmIQdUm2wXIQN8nyQYWQo5XbpvGWG46svKWEmUze El7PjV6qpTWBw/rRe0685rDtXbzl6hBhPcTSKl3eIYQ3QYzhz+5sZn6Ay68u/fBC lI+DRVMuhI2aqNk0Yq4PWY4WfMkpRuA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:02:02 2025 by rpki-client