$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa File: ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa (raw, json) Hash identifier: uxsaOYOE6ShDS0GvV+GFQrnnyVgUQEkPdC3Mk4g2+sE= Subject key identifier: 9C:FC:2E:A5:E1:C9:EA:3A:8F:09:1C:8B:18:E9:7D:D6:3A:75:B2:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2A9C9DC35BD4484914CEE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa Signing time: Thu 20 Feb 2025 18:14:37 +0000 ROA not before: Thu 20 Feb 2025 18:14:37 +0000 ROA not after: Wed 21 May 2025 17:14:37 +0000 asID: 7029 IP address blocks: 40.132.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:a9:c9:dc:35:bd:44:84:91:4c:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:14:37 2025 GMT Not After : May 21 17:14:37 2025 GMT Subject: CN=87c32411-683e-4715-9c13-d081e046e331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:33:20:82:22:31:9e:b4:6f:7a:70:2d:5e:94: a4:61:51:ce:58:01:19:13:72:e1:4d:c1:21:c1:74: c3:0c:82:70:76:d6:14:5e:2d:35:3e:d2:86:a2:11: 4c:68:40:e5:d8:ea:42:36:9e:66:32:e2:37:59:bd: ff:1f:04:3e:8a:ec:9c:16:6e:41:0c:42:e0:c7:fd: 8e:e2:d6:d7:07:07:5e:b8:95:f9:7e:39:65:e8:6b: 87:3f:51:de:d8:1f:e5:2e:38:41:c2:97:d6:7a:4a: 8f:67:45:14:73:14:9f:9e:58:ed:52:89:86:f7:5e: 42:70:78:11:57:fc:e8:ff:8d:3f:fa:2f:3f:73:4d: e1:2b:eb:85:ec:30:7e:4d:f6:6a:02:04:52:7a:d3: 80:7e:2d:9f:42:52:41:ac:88:3b:c2:e9:95:54:ad: 9c:9f:e6:e3:dd:57:51:94:f6:57:d5:9d:c7:f4:c8: 77:21:d2:d7:3b:00:17:5f:b1:0f:2d:08:ff:4b:ed: 8c:40:93:35:c9:f9:55:f4:43:f4:11:6b:dc:2b:a3: 65:05:4c:25:02:04:a6:c2:66:e0:f3:40:19:c3:f1: 8f:a8:77:14:c8:d4:ce:1a:53:a2:76:de:22:50:31: 48:cd:c1:cd:ef:21:f7:bd:4f:29:28:7e:54:3b:7b: 35:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FC:2E:A5:E1:C9:EA:3A:8F:09:1C:8B:18:E9:7D:D6:3A:75:B2:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.132.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:40:ce:d4:9d:0e:d4:e3:11:e3:00:c3:af:fd:30:ae:d7:20: 0f:82:04:bd:1a:0b:08:28:ae:c7:92:e4:cc:02:69:ea:d8:9a: cb:ee:6d:76:ae:cd:1f:f2:e5:3d:be:cb:84:ff:d0:3d:02:ea: ee:61:f9:19:8f:b1:01:83:2f:44:96:73:e1:61:ef:0d:b7:e5: 0d:35:61:3d:e6:e2:eb:cf:43:df:4a:4f:6b:41:bc:d2:4b:5b: c1:f4:80:2f:ea:93:73:4a:0f:58:8f:a8:48:3f:9a:26:f9:02: 80:1e:0e:22:e2:59:51:67:ac:23:2d:88:c8:c2:00:a6:cf:1f: 9e:d3:aa:ff:56:7b:54:55:8e:db:ff:b3:8b:59:2c:4c:cf:1b: f4:d6:98:7c:9d:49:06:cb:af:56:72:23:a1:64:71:2b:44:c0: 30:ff:3d:eb:3e:42:2f:87:9e:63:0c:a9:53:c8:1e:eb:60:1e: 92:62:6f:3b:f1:4b:88:9c:bb:6d:44:49:24:59:c2:16:5a:57: cf:34:ad:df:3e:7c:fe:2a:1c:a7:6d:04:ba:48:b5:5f:8e:01: 51:26:6f:ff:63:1f:9b:7b:7b:a1:97:b3:ca:e9:e7:fc:56:fc: d9:3c:be:2c:84:21:7d:a5:60:6e:b4:1c:14:35:96:72:fd:0f: be:0a:f7:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqcncNb1EhJFM7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTQzN1oXDTI1MDUyMTE3MTQzN1owLzEtMCsGA1UEAxMk ODdjMzI0MTEtNjgzZS00NzE1LTljMTMtZDA4MWUwNDZlMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDMggiIxnrRvenAtXpSkYVHOWAEZE3LhTcEh wXTDDIJwdtYUXi01PtKGohFMaEDl2OpCNp5mMuI3Wb3/HwQ+iuycFm5BDELgx/2O 4tbXBwdeuJX5fjll6GuHP1He2B/lLjhBwpfWekqPZ0UUcxSfnljtUomG915CcHgR V/zo/40/+i8/c03hK+uF7DB+TfZqAgRSetOAfi2fQlJBrIg7wumVVK2cn+bj3VdR lPZX1Z3H9Mh3IdLXOwAXX7EPLQj/S+2MQJM1yflV9EP0EWvcK6NlBUwlAgSmwmbg 80AZw/GPqHcUyNTOGlOidt4iUDFIzcHN7yH3vU8pKH5UO3s12wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz8LqXhyeo6jwkcixjpfdY6dbIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY4MTdhOWItMzM1Ni0z ZmYzLThlMTMtZTAzYjQ0ZjNmYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKITQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhAztSdDtTjEeMAw6/9MK7XIA+CBL0aCwgorseS5MwCaerYmsvubXau zR/y5T2+y4T/0D0C6u5h+RmPsQGDL0SWc+Fh7w235Q01YT3m4uvPQ99KT2tBvNJL W8H0gC/qk3NKD1iPqEg/mib5AoAeDiLiWVFnrCMtiMjCAKbPH57Tqv9We1RVjtv/ s4tZLEzPG/TWmHydSQbLr1ZyI6FkcStEwDD/Pes+Qi+HnmMMqVPIHutgHpJibzvx S4icu21ESSRZwhZaV880rd8+fP4qHKdtBLpItV+OAVEmb/9jH5t7e6GXs8rp5/xW /Nk8viyEIX2lYG60HBQ1lnL9D74K92s= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:41 2025 by rpki-client