$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa File: c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa (raw, json) Hash identifier: 0yahNRFRSqNkebc7iUMs8WRvQUE9dio4RUWMLEkByVw= Subject key identifier: 3A:6C:33:F4:B2:D6:99:C4:E2:39:43:E9:65:81:50:4D:A5:A2:98:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21107C4CC86DDB37A4C6C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 398741 IP address blocks: 40.136.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:07:c4:cc:86:dd:b3:7a:4c:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=6d446e87-5c27-49b3-9442-65caef5ada54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:67:ea:39:be:14:7c:39:2d:06:28:57:4f: 44:71:6a:a8:20:8a:24:06:2f:6f:df:78:aa:27:76: f5:5f:6a:b3:af:00:f7:27:81:32:14:b5:97:2c:fb: a8:29:6f:ab:cc:fb:3e:38:3a:3c:a5:02:0e:05:7c: 7b:40:b3:0a:44:a9:b2:98:73:f2:6f:b5:c2:8b:c6: b3:6f:65:54:92:46:c3:a8:b5:47:b4:e9:c4:eb:69: 1d:37:f5:0a:e9:5f:d1:f2:a2:d3:92:4b:aa:dc:ab: 81:96:8e:20:2f:41:6f:09:94:6a:00:8d:5c:03:d7: 1a:de:46:1f:9a:30:03:76:81:71:8d:4f:99:7b:3a: 05:78:96:1f:73:b3:32:13:06:f4:88:95:69:c5:42: 0b:e7:c3:c1:9c:3f:72:3e:99:b6:56:2a:1a:72:2d: 23:2c:78:d1:8f:d8:06:3f:60:2a:01:79:6d:b4:36: 2d:cb:61:98:c1:7d:39:ca:8f:0f:52:0f:0c:27:6c: 37:ec:fa:4d:aa:87:4d:17:39:a6:17:d0:17:a2:78: c9:49:f4:4e:70:8d:7d:a6:90:7c:fa:40:84:65:bb: cb:f1:21:30:34:f8:e6:4d:2c:6c:3f:6e:d6:9c:ad: e8:4f:c5:9c:7b:1b:ce:35:5b:d7:0e:ba:fd:45:90: 90:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6C:33:F4:B2:D6:99:C4:E2:39:43:E9:65:81:50:4D:A5:A2:98:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9cea1be-73cb-3bce-ad62-f8abb6b24fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:df:46:67:26:8a:c7:cc:12:8d:ea:85:86:1c:7c:35:7b:a1: 41:81:34:d0:3d:69:45:f5:0c:83:33:2b:ad:ac:fc:11:b4:bb: 08:91:ec:fc:96:56:c0:db:1b:cd:f1:dd:34:e1:3f:37:d9:f3: 73:5e:9e:d5:11:5a:55:97:11:01:75:c2:5d:e0:48:4e:a8:fa: a7:0f:9b:fe:4e:dd:27:6a:0d:71:1f:c4:d8:b4:0a:52:58:12: cf:b7:5c:10:48:f0:e7:17:7c:57:08:62:d1:30:8a:d5:a9:5a: 4d:77:bb:27:6e:73:56:bb:c7:8d:f5:25:c0:6a:eb:e1:bb:a2: be:00:f9:e0:6e:48:f5:17:cd:db:10:12:8d:3f:56:ff:14:be: 7b:1d:fb:81:cb:bc:13:c0:d8:f0:05:27:63:40:be:7d:d3:59: 7d:13:b0:43:ed:99:28:8f:d0:bb:74:d1:38:ff:c0:64:7a:97: a3:36:ca:b8:d0:9f:c7:96:00:3d:54:6d:e3:d1:99:e9:f0:ee: 8c:8c:af:39:9e:52:62:b4:9c:4f:a3:60:9d:69:90:ed:15:0a: 23:8a:ee:61:aa:75:07:02:d6:22:13:55:b6:80:57:ef:41:24: 55:76:04:a1:34:c6:a8:9c:0b:6d:da:c9:36:22:ca:29:fe:2f: 0e:06:b9:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQfEzIbds3pMbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NmQ0NDZlODctNWMyNy00OWIzLTk0NDItNjVjYWVmNWFkYTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom1n6jm+FHw5LQYoV09EcWqoIIokBi9v33iq J3b1X2qzrwD3J4EyFLWXLPuoKW+rzPs+ODo8pQIOBXx7QLMKRKmymHPyb7XCi8az b2VUkkbDqLVHtOnE62kdN/UK6V/R8qLTkkuq3KuBlo4gL0FvCZRqAI1cA9ca3kYf mjADdoFxjU+ZezoFeJYfc7MyEwb0iJVpxUIL58PBnD9yPpm2Vioaci0jLHjRj9gG P2AqAXlttDYty2GYwX05yo8PUg8MJ2w37PpNqodNFzmmF9AXonjJSfROcI19ppB8 +kCEZbvL8SEwNPjmTSxsP27WnK3oT8WcexvONVvXDrr9RZCQNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpsM/Sy1pnE4jlD6WWBUE2lophIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzljZWExYmUtNzNjYi0z YmNlLWFkNjItZjhhYmI2YjI0ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnfRmcmisfMEo3qhYYcfDV7oUGBNNA9aUX1DIMzK62s/BG0uwiR7PyW VsDbG83x3TThPzfZ83NentURWlWXEQF1wl3gSE6o+qcPm/5O3SdqDXEfxNi0ClJY Es+3XBBI8OcXfFcIYtEwitWpWk13uyduc1a7x431JcBq6+G7or4A+eBuSPUXzdsQ Eo0/Vv8Uvnsd+4HLvBPA2PAFJ2NAvn3TWX0TsEPtmSiP0Lt00Tj/wGR6l6M2yrjQ n8eWAD1UbePRmenw7oyMrzmeUmK0nE+jYJ1pkO0VCiOK7mGqdQcC1iITVbaAV+9B JFV2BKE0xqicC23ayTYiyin+Lw4Guds= -----END CERTIFICATE-----Generated at Mon Apr 7 11:58:20 2025 by rpki-client