$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa File: ef4fe73d-8e5b-3799-944d-41b1981f6353.roa (raw, json) Hash identifier: APjk/oQ58nbJgZkLfjSFFrofY8PM8uwWGSGIgbepGIk= Subject key identifier: DD:F3:0B:FA:3D:96:94:01:F1:DD:4B:65:3F:8F:E8:9F:D6:6C:70:6C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211044CD92EE9A58F3DF600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 30373 IP address blocks: 40.128.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:04:4c:d9:2e:e9:a5:8f:3d:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=b582f591-3773-4193-88a2-348ef2ce87ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bc:56:47:43:57:17:03:08:0e:d8:91:c0:31: 10:20:16:4b:c0:aa:0e:1e:58:4e:1f:1e:da:09:6a: 6f:72:ed:1f:3d:26:4c:b1:eb:fb:0d:bf:d3:6e:ed: 56:fe:23:6f:05:12:e1:2d:5d:73:c1:b7:b0:ae:3d: 50:09:8f:c3:16:b0:21:2b:a6:22:de:fc:79:87:96: 37:4e:bd:ba:31:46:eb:5c:22:d9:4d:1e:c9:02:08: 51:5b:60:a3:f6:a0:40:b8:10:8b:a0:48:22:9c:98: f3:18:87:4c:a6:3b:5d:19:ae:c0:e2:57:11:5e:f6: 77:00:4f:1a:95:8b:4c:1a:d9:3e:0b:d8:b4:df:97: e8:9f:27:e5:eb:ca:09:84:ed:8c:77:e2:47:8a:d0: 56:8e:8a:1b:bc:ff:02:79:86:7f:d7:47:fa:8c:7c: 95:bc:51:5a:1b:c4:9f:60:2b:36:31:8e:bc:99:43: ea:25:47:97:23:59:e8:f6:ff:eb:59:8a:cf:2a:91: f1:a8:8e:88:e9:98:d4:9e:3f:48:07:7f:c7:af:f4: 72:5d:53:6f:1b:55:a6:14:f2:62:17:39:2a:81:a5: ff:54:7f:29:9e:6b:eb:d3:dc:59:d5:39:70:ec:b3: e0:c7:e3:8e:f0:6a:d8:82:0b:05:e7:66:41:c6:a6: bf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F3:0B:FA:3D:96:94:01:F1:DD:4B:65:3F:8F:E8:9F:D6:6C:70:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.128.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:3d:64:71:35:14:b6:65:9d:40:2f:bd:3e:00:9e:a2:95:0d: 85:2f:be:11:0c:1c:f5:2b:d1:f7:86:d3:4f:c4:68:ed:c4:3a: 6d:42:82:b2:a4:bf:d3:5f:14:9b:a7:df:78:c1:3d:ba:f0:a6: 16:40:d8:ff:67:c5:e0:55:e5:60:0f:0f:ca:22:db:9a:70:92: 47:d0:ac:7e:1e:4f:21:52:b8:2d:7a:b2:aa:fd:5d:0f:7a:a0: 81:61:23:84:e6:9d:36:9e:a3:24:d0:68:c8:48:15:82:b5:10: 2b:61:60:05:11:c1:97:20:dd:48:8f:74:b9:f2:be:f4:ca:23: 8f:0f:d2:42:2b:25:56:54:ad:5f:2c:01:ac:b5:16:3c:3a:8c: e8:08:45:9d:d7:e3:2b:b2:b3:f2:bf:4d:ac:0e:80:54:f5:4c: b9:93:0c:25:b7:80:29:18:15:00:6d:41:2e:55:e4:ee:ac:3d: 9b:5a:2c:23:bb:b9:18:35:0f:9a:70:2c:e0:a1:13:60:1c:fd: 7c:d2:4a:40:65:e0:ef:8f:43:91:9b:b1:54:5e:5f:96:bc:af: 2f:d1:d2:c7:2f:c9:c4:d9:2f:cc:b9:32:74:9a:a1:53:9e:25: 97:31:c3:58:8c:cd:fd:22:08:d5:45:20:dd:d9:95:d7:71:4b: 2e:6a:0c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQRM2S7ppY899gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YjU4MmY1OTEtMzc3My00MTkzLTg4YTItMzQ4ZWYyY2U4N2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7xWR0NXFwMIDtiRwDEQIBZLwKoOHlhOHx7a CWpvcu0fPSZMsev7Db/Tbu1W/iNvBRLhLV1zwbewrj1QCY/DFrAhK6Yi3vx5h5Y3 Tr26MUbrXCLZTR7JAghRW2Cj9qBAuBCLoEginJjzGIdMpjtdGa7A4lcRXvZ3AE8a lYtMGtk+C9i035fonyfl68oJhO2Md+JHitBWjoobvP8CeYZ/10f6jHyVvFFaG8Sf YCs2MY68mUPqJUeXI1no9v/rWYrPKpHxqI6I6ZjUnj9IB3/Hr/RyXVNvG1WmFPJi FzkqgaX/VH8pnmvr09xZ1Tlw7LPgx+OO8GrYggsF52ZBxqa/XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3zC/o9lpQB8d1LZT+P6J/WbHBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWY0ZmU3M2QtOGU1Yi0z Nzk5LTk0NGQtNDFiMTk4MWY2MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKID2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJM9ZHE1FLZlnUAvvT4AnqKVDYUvvhEMHPUr0feG00/EaO3EOm1CgrKk v9NfFJun33jBPbrwphZA2P9nxeBV5WAPD8oi25pwkkfQrH4eTyFSuC16sqr9XQ96 oIFhI4TmnTaeoyTQaMhIFYK1ECthYAURwZcg3UiPdLnyvvTKI48P0kIrJVZUrV8s Aay1Fjw6jOgIRZ3X4yuys/K/TawOgFT1TLmTDCW3gCkYFQBtQS5V5O6sPZtaLCO7 uRg1D5pwLOChE2Ac/XzSSkBl4O+PQ5GbsVReX5a8ry/R0scvycTZL8y5MnSaoVOe JZcxw1iMzf0iCNVFIN3ZlddxSy5qDBE= -----END CERTIFICATE-----Generated at Mon Apr 7 11:58:16 2025 by rpki-client