$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/07233407-66bd-3231-b879-4b9df7681e45.roa File: 07233407-66bd-3231-b879-4b9df7681e45.roa (raw, json) Hash identifier: pWUM6KDFqhUoaAqgfuxMLP1ujl3RDKmUcnrXk2Kzqc8= Subject key identifier: 5E:9B:E2:6B:EA:57:A4:C6:2C:ED:A3:4A:7E:FB:9D:CE:67:2B:50:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7168C14AD6ED7D2E08C900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/07233407-66bd-3231-b879-4b9df7681e45.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 72.16.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:68:c1:4a:d6:ed:7d:2e:08:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=509fe900-96ee-4fac-8f19-04a4b61be793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:da:03:45:31:1a:42:6c:77:a3:6f:c3:b6:2e: 03:2b:99:2b:bc:2a:4d:52:6f:ac:17:b3:80:10:91: 5a:77:97:d9:5a:b6:b5:e9:72:02:49:ba:bd:8a:7f: 33:01:fa:a5:47:89:7a:e7:99:ce:3b:a9:64:8b:55: 35:fe:be:3c:81:f7:11:1e:1b:08:43:5c:61:57:ae: 5f:80:21:64:cf:3c:8f:00:56:e8:6e:f6:06:78:1d: 86:a4:cd:25:1c:8e:bc:ae:06:ef:3c:6c:8d:26:8c: 95:7f:21:f8:1a:ec:6c:51:6d:91:ea:48:65:02:94: 59:f8:ea:4d:40:2e:58:5d:76:1c:5b:fc:17:d9:d1: 78:35:6b:46:f4:b2:c5:49:fc:06:03:9e:dd:0d:01: ab:77:83:cc:b2:71:3e:a9:3b:d5:99:f3:91:41:e5: 4a:e1:fe:e7:2b:b3:8c:2a:ac:d9:4e:bb:68:a4:e2: 3a:e3:6b:b9:dd:e4:41:9a:c8:f9:91:83:3c:5d:24: 6b:f7:40:58:4a:30:c3:d1:90:3a:b5:45:38:3c:e5: 6f:66:15:ab:00:d0:6d:74:b0:be:dc:9c:3c:dd:61: 57:7a:98:3f:cb:cb:c0:64:28:64:a0:cb:0d:ed:98: bf:51:6f:f3:87:20:fb:4f:a1:e5:db:eb:bb:06:0c: ed:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9B:E2:6B:EA:57:A4:C6:2C:ED:A3:4A:7E:FB:9D:CE:67:2B:50:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/07233407-66bd-3231-b879-4b9df7681e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:8c:4f:d8:e8:5e:f8:df:8d:bd:31:da:f9:e1:a6:f4:d1:35: 1a:fd:50:0e:f6:ab:af:8c:8a:1a:2d:4c:20:9b:97:1c:9e:69: 66:bf:ba:f3:93:3b:aa:a6:e1:09:e6:3b:df:25:66:46:6d:b4: e1:97:1e:49:17:c7:ad:b8:f6:a9:17:01:83:27:86:a4:ba:0e: 80:da:7e:73:ee:09:3e:88:1f:46:94:ca:a1:2e:0f:78:88:63: a8:ea:82:1d:33:d0:a2:88:75:93:f4:eb:92:50:de:56:12:a2: d4:87:ac:15:f5:d0:77:90:43:fd:ae:f3:bf:6f:c8:89:ca:9d: d7:0f:d0:fd:9e:f5:2c:90:8b:74:c1:09:c5:0e:2d:9b:b5:93: ad:6e:83:48:8e:56:54:a0:f4:94:ef:c8:64:4a:5b:0d:9c:84: 56:a2:f3:d3:98:19:09:75:6a:dc:b6:fe:17:85:5c:4d:e8:56: 0f:2e:82:8c:7b:b8:f6:53:0f:10:9d:7c:a0:b5:b2:b7:6d:cf: a3:38:84:04:5b:17:e0:89:06:d3:6c:86:f3:e0:de:38:8d:6f: 04:61:2c:55:ee:4c:d7:88:a9:ea:80:28:52:34:72:7e:a6:32: 35:ff:aa:8b:11:d2:44:6e:2c:64:ae:c7:3c:39:18:bb:44:98: 66:ff:a5:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWjBStbtfS4IyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NTA5ZmU5MDAtOTZlZS00ZmFjLThmMTktMDRhNGI2MWJlNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9oDRTEaQmx3o2/Dti4DK5krvCpNUm+sF7OA EJFad5fZWra16XICSbq9in8zAfqlR4l655nOO6lki1U1/r48gfcRHhsIQ1xhV65f gCFkzzyPAFbobvYGeB2GpM0lHI68rgbvPGyNJoyVfyH4GuxsUW2R6khlApRZ+OpN QC5YXXYcW/wX2dF4NWtG9LLFSfwGA57dDQGrd4PMsnE+qTvVmfORQeVK4f7nK7OM KqzZTrtopOI642u53eRBmsj5kYM8XSRr90BYSjDD0ZA6tUU4POVvZhWrANBtdLC+ 3Jw83WFXepg/y8vAZChkoMsN7Zi/UW/zhyD7T6Hl2+u7BgztsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6b4mvqV6TGLO2jSn77nc5nK1B/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDcyMzM0MDctNjZiZC0z MjMxLWI4NzktNGI5ZGY3NjgxZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2MT9joXvjfjb0x2vnhpvTRNRr9UA72q6+MihotTCCblxyeaWa/uvOT O6qm4QnmO98lZkZttOGXHkkXx6249qkXAYMnhqS6DoDafnPuCT6IH0aUyqEuD3iI Y6jqgh0z0KKIdZP065JQ3lYSotSHrBX10HeQQ/2u879vyInKndcP0P2e9SyQi3TB CcUOLZu1k61ug0iOVlSg9JTvyGRKWw2chFai89OYGQl1aty2/heFXE3oVg8ugox7 uPZTDxCdfKC1srdtz6M4hARbF+CJBtNshvPg3jiNbwRhLFXuTNeIqeqAKFI0cn6m MjX/qosR0kRuLGSuxzw5GLtEmGb/pXc= -----END CERTIFICATE-----Generated at Fri Mar 14 08:24:22 2025 by rpki-client