$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e05bafe5-75ce-34c7-9fe8-3d720a3fb1b6.roa File: e05bafe5-75ce-34c7-9fe8-3d720a3fb1b6.roa (raw, json) Hash identifier: nRvOBkBIG80mz/rNVJdUKo2TVlQIDSvwoQhGa3Hbjwc= Subject key identifier: 3D:39:A2:FF:D3:49:D6:BB:E5:7B:F3:2B:46:4E:26:4E:25:01:49:DA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D718BE34A3D393A5868CC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e05bafe5-75ce-34c7-9fe8-3d720a3fb1b6.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.136.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:8b:e3:4a:3d:39:3a:58:68:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=f4f2133e-7a4d-43b6-952f-53cd17dfc521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:b5:2c:d9:36:45:95:f3:fc:09:a9:8f:24: 57:23:7c:60:bb:da:0b:ba:64:07:4d:d0:2d:10:b2: 30:26:cd:4d:36:f2:cd:57:71:f6:b4:97:33:98:8d: e8:68:32:26:d8:7c:46:23:1c:d0:8e:1e:ce:26:15: e0:8e:4a:2f:c0:6c:a8:bf:aa:69:73:4c:ae:39:a3: 72:67:d2:46:90:2f:30:ce:9c:a0:1a:a1:62:60:a8: b3:ee:2e:c8:54:2d:8f:9c:0b:3f:6f:5d:0c:2f:e0: 15:71:e2:16:27:85:0a:fc:c0:99:cd:1b:02:a8:2e: 0a:75:27:8e:1f:ed:81:67:1b:d9:70:84:19:0a:12: 6b:88:6c:8e:df:58:dc:1c:f8:6b:27:01:55:a4:88: ca:2d:80:26:e9:80:85:64:c1:4c:5e:86:09:17:57: 22:30:20:25:5c:26:f8:ae:1e:72:3f:69:e7:5d:d3: f5:ef:7e:60:94:c8:9c:ec:c8:c3:db:70:cb:eb:d6: 7b:d6:a4:9a:fe:2c:5f:57:20:6d:1f:67:01:a0:e6: 9c:1d:02:ab:6b:d8:7b:d5:7d:77:d1:e1:5d:e6:e8: 2e:65:2e:9e:87:e3:01:1b:19:88:a2:2f:c7:45:51: 5b:f9:d8:5b:4f:dc:33:aa:da:ef:5e:a2:89:b4:35: 26:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:39:A2:FF:D3:49:D6:BB:E5:7B:F3:2B:46:4E:26:4E:25:01:49:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e05bafe5-75ce-34c7-9fe8-3d720a3fb1b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:57:59:6a:ef:1b:15:29:c6:bf:95:1c:8b:d6:f8:97:58:83: c9:c0:66:76:65:22:27:31:ac:38:47:c2:5f:7e:bc:f6:f3:4f: 15:65:f9:d9:35:84:54:1e:8a:04:b4:39:3f:0f:ff:28:97:d1: 57:fd:57:1a:01:77:5e:d9:b8:1c:b3:58:ef:00:29:df:4f:f6: 69:70:b0:41:cc:d4:52:2d:ac:cc:a2:23:e5:79:ae:ee:35:04: bf:0d:46:44:5c:64:71:6c:15:5b:7a:a8:6d:6e:9c:66:61:a3: c0:d2:b7:09:07:40:a0:7f:be:2a:11:86:79:30:54:8e:b1:0b: 91:d9:09:90:56:71:a0:c3:ef:c2:d7:1b:a3:8e:9c:0e:f4:4f: 24:36:fe:6f:f3:81:dd:4a:98:51:24:80:87:01:b5:7e:32:ef: 3e:e7:4d:9e:e3:b2:1b:52:51:5e:c7:4a:ae:1a:64:fe:48:8b: 4a:af:65:b4:d9:76:bd:45:f4:ff:a7:dd:66:e9:98:79:18:dd: 5f:eb:a8:80:fb:f1:8b:4a:1c:6e:1e:9d:06:63:35:c6:b4:47: 02:ce:94:62:27:fc:e0:4c:46:9e:29:97:91:dd:18:41:ff:61: 01:10:7b:46:cf:2f:f5:00:85:8b:fe:98:72:d3:1e:dd:57:5a: 1e:a0:6b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYvjSj05OlhozAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZjRmMjEzM2UtN2E0ZC00M2I2LTk1MmYtNTNjZDE3ZGZjNTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqK1LNk2RZXz/AmpjyRXI3xgu9oLumQHTdAt ELIwJs1NNvLNV3H2tJczmI3oaDIm2HxGIxzQjh7OJhXgjkovwGyov6ppc0yuOaNy Z9JGkC8wzpygGqFiYKiz7i7IVC2PnAs/b10ML+AVceIWJ4UK/MCZzRsCqC4KdSeO H+2BZxvZcIQZChJriGyO31jcHPhrJwFVpIjKLYAm6YCFZMFMXoYJF1ciMCAlXCb4 rh5yP2nnXdP1735glMic7MjD23DL69Z71qSa/ixfVyBtH2cBoOacHQKra9h71X13 0eFd5uguZS6eh+MBGxmIoi/HRVFb+dhbT9wzqtrvXqKJtDUmDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD05ov/TSda75XvzK0ZOJk4lAUnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTA1YmFmZTUtNzVjZS0z NGM3LTlmZTgtM2Q3MjBhM2ZiMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIhLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpXWWrvGxUpxr+VHIvW+JdYg8nAZnZlIicxrDhHwl9+vPbzTxVl+dk1 hFQeigS0OT8P/yiX0Vf9VxoBd17ZuByzWO8AKd9P9mlwsEHM1FItrMyiI+V5ru41 BL8NRkRcZHFsFVt6qG1unGZho8DStwkHQKB/vioRhnkwVI6xC5HZCZBWcaDD78LX G6OOnA70TyQ2/m/zgd1KmFEkgIcBtX4y7z7nTZ7jshtSUV7HSq4aZP5Ii0qvZbTZ dr1F9P+n3WbpmHkY3V/rqID78YtKHG4enQZjNca0RwLOlGIn/OBMRp4pl5HdGEH/ YQEQe0bPL/UAhYv+mHLTHt1XWh6ga8k= -----END CERTIFICATE-----Generated at Fri Mar 14 11:18:02 2025 by rpki-client