$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c85b536-e8b5-3a6b-95b1-8fa3f16831bf.roa File: 0c85b536-e8b5-3a6b-95b1-8fa3f16831bf.roa (raw, json) Hash identifier: QecJVbgsIzJvjB0ZqjGwIOxrrRp1ybeMBNGbmd1iEds= Subject key identifier: 2E:05:E8:CA:89:C5:1D:A3:B5:EF:AF:84:77:6D:94:D2:69:94:67:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716A0B6836ADD1F2507880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c85b536-e8b5-3a6b-95b1-8fa3f16831bf.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 72.16.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:6a:0b:68:36:ad:d1:f2:50:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=11d6f005-d1fc-4b43-b731-0e45cbad32ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:00:fb:35:c1:2c:40:ee:b5:20:fe:cd:64:d9: 03:d3:c7:d1:48:bc:c4:11:ad:e7:a5:6a:fd:1f:4e: cf:5e:cf:93:dd:a9:aa:5d:5f:72:d6:43:f9:d0:e6: 7d:fa:86:14:04:ad:7e:35:f6:a9:92:fd:0b:0e:fc: e3:8e:d5:78:f6:5f:ad:0f:0b:16:37:82:6f:7b:ee: 97:98:86:11:f1:de:10:6d:ee:01:74:a3:16:14:23: 51:f7:0d:74:ed:40:d7:ab:94:93:b3:b9:1f:d0:4d: 6a:69:cb:44:e1:6b:90:8a:2a:61:98:53:4e:1a:d8: 8c:db:33:f7:a7:47:3b:df:8f:fd:44:9b:32:be:6b: 3c:c8:86:07:e2:6e:83:62:7b:bc:c5:a4:aa:01:c1: 61:05:83:63:4f:1d:62:25:ef:b6:f3:0e:61:57:fe: 20:6a:ee:a9:56:0e:37:3b:49:60:eb:64:cb:10:31: 58:eb:f4:06:de:b4:31:cb:f1:53:23:0e:93:01:98: 24:a1:20:a1:b1:ba:48:58:b1:df:f1:70:4a:65:cb: 2f:75:00:13:8d:e1:55:9d:97:f8:b2:92:47:85:ae: f3:9e:66:aa:11:af:97:82:a9:31:76:8c:44:d2:70: bd:72:bd:6a:f7:51:89:22:76:32:ca:7c:3d:d9:23: ba:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:05:E8:CA:89:C5:1D:A3:B5:EF:AF:84:77:6D:94:D2:69:94:67:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c85b536-e8b5-3a6b-95b1-8fa3f16831bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ec:3b:be:ac:bc:72:26:f0:9f:be:5c:2a:3e:df:4b:5d:8c: 65:74:f3:b7:82:fc:2e:28:d7:82:4b:41:79:13:81:1d:17:07: 67:b1:b7:eb:7b:0a:33:35:db:a9:0d:c3:01:36:d5:ae:fb:12: 67:3a:44:cc:40:2a:26:95:cc:8d:15:42:72:6b:04:32:f6:20: cd:8e:98:0c:d6:de:20:86:4e:45:bf:14:83:e3:82:a2:cb:f0: a2:5b:4c:1c:52:40:ef:1f:cc:44:9e:ad:cc:48:3e:15:77:5b: a1:f0:ba:51:eb:d9:b0:27:be:6a:f2:97:da:57:58:1b:05:bf: 87:a4:0d:39:1f:a3:0f:84:6b:af:fd:d6:4f:63:e3:68:3e:14: a4:ab:a8:3e:e4:8e:3c:3f:f4:d7:91:df:03:06:2a:c1:ea:ec: 7f:1e:f7:aa:af:20:8f:43:57:01:15:fd:e6:e4:af:d1:f4:df: 77:9c:88:7d:67:55:ca:aa:ee:b3:69:d0:2c:14:5d:fb:e7:43: c0:5f:2b:c1:b1:dd:d5:b5:07:82:25:09:73:9b:37:24:46:de: 9c:2c:e6:47:c1:43:f2:25:d7:6d:9d:cd:4e:d5:f6:e7:c5:a0: 13:eb:d0:a0:51:ad:02:32:2d:61:d9:74:9d:c3:97:9a:8a:12: f3:92:0b:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWoLaDat0fJQeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MTFkNmYwMDUtZDFmYy00YjQzLWI3MzEtMGU0NWNiYWQzMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgD7NcEsQO61IP7NZNkD08fRSLzEEa3npWr9 H07PXs+T3amqXV9y1kP50OZ9+oYUBK1+Nfapkv0LDvzjjtV49l+tDwsWN4Jve+6X mIYR8d4Qbe4BdKMWFCNR9w107UDXq5STs7kf0E1qactE4WuQiiphmFNOGtiM2zP3 p0c734/9RJsyvms8yIYH4m6DYnu8xaSqAcFhBYNjTx1iJe+28w5hV/4gau6pVg43 O0lg62TLEDFY6/QG3rQxy/FTIw6TAZgkoSChsbpIWLHf8XBKZcsvdQATjeFVnZf4 spJHha7znmaqEa+XgqkxdoxE0nC9cr1q91GJInYyynw92SO6bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4F6MqJxR2jte+vhHdtlNJplGdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGM4NWI1MzYtZThiNS0z YTZiLTk1YjEtOGZhM2YxNjgzMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfsO76svHIm8J++XCo+30tdjGV087eC/C4o14JLQXkTgR0XB2ext+t7 CjM126kNwwE21a77Emc6RMxAKiaVzI0VQnJrBDL2IM2OmAzW3iCGTkW/FIPjgqLL 8KJbTBxSQO8fzESercxIPhV3W6HwulHr2bAnvmryl9pXWBsFv4ekDTkfow+Ea6/9 1k9j42g+FKSrqD7kjjw/9NeR3wMGKsHq7H8e96qvII9DVwEV/ebkr9H033eciH1n Vcqq7rNp0CwUXfvnQ8BfK8Gx3dW1B4IlCXObNyRG3pws5kfBQ/Il122dzU7V9ufF oBPr0KBRrQIyLWHZdJ3Dl5qKEvOSC2w= -----END CERTIFICATE-----Generated at Fri Mar 14 08:48:44 2025 by rpki-client