$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ede4e61f-2a18-38db-ae4e-66e5baa8a493.roa File: ede4e61f-2a18-38db-ae4e-66e5baa8a493.roa (raw, json) Hash identifier: 2zm5lpHYNKK8bfdFlh5WSk/DO5+k11fWrcCQIgGLY0c= Subject key identifier: 62:05:0C:52:66:B0:8F:B2:E6:5C:4F:27:21:0D:45:0C:21:05:50:5A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584898D61ED7B4C2751C0682BC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ede4e61f-2a18-38db-ae4e-66e5baa8a493.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 7029 IP address blocks: 40.138.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:1e:d7:b4:c2:75:1c:06:82:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=254f6df4-4b6b-4955-b2d8-b6a82f9e01dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:27:60:bd:61:20:0d:96:b2:96:54:c2:74:86: 90:d7:32:bf:86:e5:3d:bb:f7:e8:33:8d:dc:ff:21: 25:6f:a5:ac:04:99:b6:f4:b8:a8:9e:c5:49:aa:d4: 48:e9:11:9b:47:f9:a1:03:3b:fa:ca:8d:ba:89:8b: e9:ef:85:c0:5d:c7:3f:65:d3:5c:4b:20:41:d5:ce: 33:f3:16:89:61:ff:08:7a:ce:a9:23:3e:2e:a9:e6: a5:a2:f6:81:2e:bc:62:dd:d2:dc:6a:7d:b9:db:1f: cc:af:82:b6:49:fe:f0:df:c9:fa:02:c9:c2:a4:20: 98:1a:ce:92:ae:f7:4c:2e:70:70:b5:c3:92:da:b0: ce:ef:cd:df:2e:3d:23:0e:e0:6d:dd:86:b6:69:12: 4c:24:e4:e8:68:bd:ab:62:cb:19:c0:b5:58:bf:07: ce:3f:a1:09:0d:98:7f:f0:07:fd:54:0d:89:93:7d: 02:e5:af:92:6d:e1:2b:54:3c:08:13:ef:a5:46:cc: d3:58:af:42:62:c6:7a:c3:71:34:46:bc:20:d2:d9: 89:c6:5c:96:12:30:2a:8f:a5:0e:08:13:9b:42:e2: dc:98:7c:95:4c:ba:86:91:17:83:8e:df:f4:71:67: 5a:f9:7b:1f:10:3d:9f:c4:98:47:97:8a:61:f0:4b: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:05:0C:52:66:B0:8F:B2:E6:5C:4F:27:21:0D:45:0C:21:05:50:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ede4e61f-2a18-38db-ae4e-66e5baa8a493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:84:2d:2a:7e:6f:3e:f4:ab:a7:89:c2:52:8d:ae:55:26:05: b2:2d:11:f0:8a:cb:fe:f1:01:01:c6:bb:6d:72:1f:db:c0:70: 65:74:1e:d4:e5:fc:be:57:8a:73:34:db:1f:1b:65:73:b3:21: df:6c:08:5e:1a:a5:e2:0c:30:8e:99:7f:79:ba:4e:38:53:a3: 45:8d:64:b0:1b:db:50:99:c0:14:8f:84:b7:37:95:30:49:5c: 66:74:d7:2d:a7:dd:de:c2:1b:51:d4:df:a3:c1:4e:77:b3:3f: b3:ed:16:a4:a2:b1:54:b3:0c:3b:32:e0:7d:7d:ea:9d:10:79: d6:82:3e:4c:de:3d:88:f3:8d:91:98:e2:a8:03:4f:9e:b6:09: 0d:ce:96:66:70:a8:13:2a:4f:56:ea:6a:8b:4f:b1:43:c8:13: c7:0f:e0:e4:b0:11:93:b0:bc:76:af:6d:76:40:45:7a:a9:f3: 37:aa:4b:12:f2:26:35:7c:1b:c4:f7:28:31:16:cf:06:96:d6: 3c:46:ea:6c:0f:08:46:85:c7:03:78:2d:28:ea:14:ab:80:b1: c6:87:f1:2f:5b:b5:de:71:94:b6:a3:12:c1:8f:dd:97:6b:21: 6b:4d:62:d1:4a:d9:ee:c6:9f:b3:f5:24:4f:ab:09:a8:06:b2: 1a:ff:87:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1h7XtMJ1HAaCvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk MjU0ZjZkZjQtNGI2Yi00OTU1LWIyZDgtYjZhODJmOWUwMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCdgvWEgDZayllTCdIaQ1zK/huU9u/foM43c /yElb6WsBJm29LionsVJqtRI6RGbR/mhAzv6yo26iYvp74XAXcc/ZdNcSyBB1c4z 8xaJYf8Ies6pIz4uqealovaBLrxi3dLcan252x/Mr4K2Sf7w38n6AsnCpCCYGs6S rvdMLnBwtcOS2rDO783fLj0jDuBt3Ya2aRJMJOToaL2rYssZwLVYvwfOP6EJDZh/ 8Af9VA2Jk30C5a+SbeErVDwIE++lRszTWK9CYsZ6w3E0Rrwg0tmJxlyWEjAqj6UO CBObQuLcmHyVTLqGkReDjt/0cWda+XsfED2fxJhHl4ph8EvHyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIFDFJmsI+y5lxPJyENRQwhBVBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWRlNGU2MWYtMmExOC0z OGRiLWFlNGUtNjZlNWJhYThhNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+ELSp+bz70q6eJwlKNrlUmBbItEfCKy/7xAQHGu21yH9vAcGV0HtTl /L5XinM02x8bZXOzId9sCF4apeIMMI6Zf3m6TjhTo0WNZLAb21CZwBSPhLc3lTBJ XGZ01y2n3d7CG1HU36PBTnezP7PtFqSisVSzDDsy4H196p0QedaCPkzePYjzjZGY 4qgDT562CQ3OlmZwqBMqT1bqaotPsUPIE8cP4OSwEZOwvHavbXZARXqp8zeqSxLy JjV8G8T3KDEWzwaW1jxG6mwPCEaFxwN4LSjqFKuAscaH8S9btd5xlLajEsGP3Zdr IWtNYtFK2e7Gn7P1JE+rCagGshr/h1k= -----END CERTIFICATE-----Generated at Sat Apr 5 20:50:43 2025 by rpki-client