$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eec145f0-2242-3162-9b24-4c63e4453493.roa File: eec145f0-2242-3162-9b24-4c63e4453493.roa (raw, json) Hash identifier: mu6SO8cUam6kEzrn8qVnEcbQkXeWDOz4eue97a71y6o= Subject key identifier: A3:49:4D:37:95:2F:6F:7B:D1:B5:D3:59:4A:E1:38:9F:CC:14:FB:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210E88130ACEFFB05C85AA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eec145f0-2242-3162-9b24-4c63e4453493.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.128.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:e8:81:30:ac:ef:fb:05:c8:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=54aeae34-6937-41dc-b84f-2259431c1042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0e:7a:d3:8c:84:2e:0f:d6:3a:74:b5:28:4d: b4:b5:33:dd:3d:f8:72:ca:bb:39:53:f0:65:bc:40: a3:7f:13:1f:10:dc:55:ed:f7:eb:92:e0:be:54:1e: dc:50:86:de:14:ec:37:7b:e9:64:45:99:4b:76:9d: fd:f7:cb:43:d0:8a:83:08:2f:42:9d:c2:03:45:49: 2f:c9:21:36:60:f2:fb:97:bb:c0:74:62:f6:81:be: 7d:2d:99:42:6e:c3:1f:e8:6a:a9:b0:f5:6a:5f:a5: fe:91:9b:29:24:fd:64:cf:71:66:a8:53:d7:2e:e1: fc:bd:69:79:48:54:b0:f3:a1:e9:41:97:4f:51:a4: 2d:68:97:e5:9f:3a:f6:e1:bf:c2:cd:36:fd:d1:b8: 2b:80:05:2e:4b:a7:7b:55:61:fa:85:aa:c8:75:65: e4:f8:bf:1c:c3:bb:2e:78:7b:cc:9d:8d:3d:40:87: e2:b7:8e:01:c7:31:14:f4:4f:c7:ce:a2:f9:e3:fa: 75:88:f6:54:fe:78:24:5f:a7:16:b4:39:8e:8c:42: c0:8b:1f:ed:10:a1:98:23:03:fb:ee:32:71:b5:28: 2e:bf:78:37:e0:12:4d:22:f4:a1:ec:a1:71:54:62: b7:46:60:ec:77:c1:c5:fe:9b:a0:0f:0e:cb:4b:2c: 02:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:49:4D:37:95:2F:6F:7B:D1:B5:D3:59:4A:E1:38:9F:CC:14:FB:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eec145f0-2242-3162-9b24-4c63e4453493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.128.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:40:a4:01:f8:cd:fa:cc:73:1e:da:df:f8:46:3d:9c:32:69: 67:e2:b0:d4:a8:87:b7:84:7d:5e:ce:cf:16:9a:ae:8f:ba:d6: 7c:79:9f:30:e1:5e:e7:b8:0e:67:c7:8d:38:c9:ba:83:9e:a9: 4c:c9:81:18:ec:01:38:7f:74:64:7a:dc:59:23:a0:e2:16:00: d8:89:76:d7:62:02:ad:6e:5c:3b:1e:24:30:86:60:f4:6f:79: 68:2d:60:73:35:bd:47:4c:cf:2b:74:3f:61:a9:e6:00:76:59: ae:d8:81:a2:ca:8f:9d:86:00:95:76:aa:25:b1:e8:4a:96:2a: ea:a3:34:ed:56:31:3c:1d:ca:13:45:48:8f:f2:31:54:87:f6: ec:e9:e9:b6:95:4a:47:85:5e:2f:f9:47:b5:1e:52:a4:7b:dd: 53:58:e4:7a:be:9c:5f:16:42:fd:e6:6a:ea:3b:3d:8c:6f:52: 47:33:44:b2:24:71:69:72:0e:e5:c1:4a:e7:8e:2e:26:33:a0: 53:c3:83:e1:9c:c3:dc:18:dd:85:5b:ec:2a:bd:5c:9c:24:91: 3b:34:f8:4d:96:34:c3:05:8d:4a:7a:9e:c2:bf:5e:76:d4:9a: 87:b4:c0:b6:fc:1d:89:cf:ed:59:2b:96:9d:6f:ba:78:a0:98: 55:9d:a0:61 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSEOiBMKzv+wXIWqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NTRhZWFlMzQtNjkzNy00MWRjLWI4NGYtMjI1OTQzMWMxMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA5604yELg/WOnS1KE20tTPdPfhyyrs5U/Bl vECjfxMfENxV7ffrkuC+VB7cUIbeFOw3e+lkRZlLdp3998tD0IqDCC9CncIDRUkv ySE2YPL7l7vAdGL2gb59LZlCbsMf6GqpsPVqX6X+kZspJP1kz3FmqFPXLuH8vWl5 SFSw86HpQZdPUaQtaJflnzr24b/CzTb90bgrgAUuS6d7VWH6harIdWXk+L8cw7su eHvMnY09QIfit44BxzEU9E/HzqL54/p1iPZU/ngkX6cWtDmOjELAix/tEKGYIwP7 7jJxtSguv3g34BJNIvSh7KFxVGK3RmDsd8HF/pugDw7LSywCZwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKNJTTeVL2970bXTWUrhOJ/MFPsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWVjMTQ1ZjAtMjI0Mi0z MTYyLTliMjQtNGM2M2U0NDUzNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCKIAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALUCkAfjN+sxzHtrf+EY9nDJpZ+Kw1KiHt4R9Xs7PFpquj7rWfHmfMOFe 57gOZ8eNOMm6g56pTMmBGOwBOH90ZHrcWSOg4hYA2Il212ICrW5cOx4kMIZg9G95 aC1gczW9R0zPK3Q/YanmAHZZrtiBosqPnYYAlXaqJbHoSpYq6qM07VYxPB3KE0VI j/IxVIf27OnptpVKR4VeL/lHtR5SpHvdU1jker6cXxZC/eZq6js9jG9SRzNEsiRx aXIO5cFK544uJjOgU8OD4ZzD3BjdhVvsKr1cnCSROzT4TZY0wwWNSnqewr9edtSa h7TAtvwdic/tWSuWnW+6eKCYVZ2gYQ== -----END CERTIFICATE-----Generated at Sat Apr 5 23:30:28 2025 by rpki-client