$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f27f29-4f00-3512-8518-4faa4857810d.roa File: 28f27f29-4f00-3512-8518-4faa4857810d.roa (raw, json) Hash identifier: shWUi+V4K2dj5bRK4mou0VoD6aFCJBe5PskU1pEXaXg= Subject key identifier: C8:02:EF:D5:16:5F:71:46:57:8C:2D:D5:D8:B1:0D:16:61:01:01:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491246C8A8EAF04B41C60BF1B0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f27f29-4f00-3512-8518-4faa4857810d.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 27206 IP address blocks: 72.16.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c8:a8:ea:f0:4b:41:c6:0b:f1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=e32543d2-d0cd-4af3-9dbd-166ec6f4f4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:b3:a6:3d:eb:70:68:0c:46:2f:1b:49:9e: eb:ce:75:e6:f0:2e:7b:0b:57:32:6d:d6:40:a2:3b: 75:8f:e0:3e:3b:c2:5f:11:de:11:a1:54:3c:5c:52: 5f:bf:17:4a:c0:fe:ad:97:14:c6:ac:e5:44:71:2a: 5a:bb:f8:9f:4f:12:f7:f1:78:9d:db:ba:46:99:cf: ce:50:d0:3c:07:25:7f:2e:3c:f3:0c:ea:23:fb:8d: 93:66:d7:77:bc:f7:fd:c5:22:a2:99:b3:17:95:45: 4b:7f:c0:87:88:ee:af:5f:fd:16:6d:14:ff:c8:9a: fd:f3:57:c7:cc:d3:ad:9e:12:26:62:20:36:94:0f: 36:a9:3c:0a:f8:d9:48:6f:f3:5b:09:ff:aa:37:08: 30:8f:cf:6e:31:4f:81:46:05:e6:3b:eb:7e:c3:d4: 03:4c:12:a7:1c:a5:bc:23:82:e0:5c:0c:05:2c:d5: ea:ad:49:36:58:49:62:20:07:ae:69:8e:64:fc:07: 8e:1f:16:c9:bc:08:6a:03:1b:ba:09:d9:e4:64:90: ff:57:fe:a2:14:49:15:d6:5f:93:53:02:71:9f:bc: 68:c8:cf:96:77:16:d0:be:7f:1f:61:f9:ed:7b:cd: a0:3d:44:80:04:88:9e:f0:c5:ed:2f:95:59:c9:d8: 10:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:02:EF:D5:16:5F:71:46:57:8C:2D:D5:D8:B1:0D:16:61:01:01:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f27f29-4f00-3512-8518-4faa4857810d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:80:a5:46:f9:bd:8f:3c:a1:cd:cc:2e:4b:92:94:10:e1:73: 77:1a:b5:1f:e4:51:f8:ca:ef:d6:0c:aa:01:7d:fd:15:32:8d: 21:80:3b:0b:57:5e:f4:bc:80:28:cc:b2:75:9d:af:14:d5:ed: dc:a0:82:fb:d6:0f:ef:d5:27:9d:dd:f4:64:cb:80:7c:f8:ec: 9e:81:b4:c8:cd:62:12:94:0e:b0:77:2b:60:90:4d:6e:5c:ea: a8:1e:cb:7c:43:04:ae:a5:2b:eb:7f:b4:73:ec:56:50:25:63: c0:33:f7:e6:0d:dd:1a:94:93:f8:06:7a:fa:2b:f7:af:14:28: cd:b3:94:12:c4:da:8a:85:6e:82:d0:96:b9:34:ce:85:f1:4a: cc:02:91:ac:2e:46:4f:20:d8:71:36:73:44:8f:c9:9b:c0:e9: 7b:70:28:d3:f8:4b:b1:c9:ce:1f:7d:e9:13:21:25:6b:ef:13: 0f:0d:c6:ad:9d:f3:9d:a8:7e:c0:a3:9c:87:c3:dc:37:ed:63: d4:b4:79:a9:64:b9:e4:0a:ab:e6:68:45:75:25:12:21:60:02: 1c:7a:ed:de:1a:37:82:dd:f4:1f:46:07:fa:63:da:9e:08:1c: 8c:a4:61:d7:b9:0c:bf:9c:5b:3f:a5:81:96:d8:b0:9f:94:3e: 7e:98:bd:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsio6vBLQcYL8bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZTMyNTQzZDItZDBjZC00YWYzLTlkYmQtMTY2ZWM2ZjRmNGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGmzpj3rcGgMRi8bSZ7rznXm8C57C1cybdZA ojt1j+A+O8JfEd4RoVQ8XFJfvxdKwP6tlxTGrOVEcSpau/ifTxL38Xid27pGmc/O UNA8ByV/LjzzDOoj+42TZtd3vPf9xSKimbMXlUVLf8CHiO6vX/0WbRT/yJr981fH zNOtnhImYiA2lA82qTwK+NlIb/NbCf+qNwgwj89uMU+BRgXmO+t+w9QDTBKnHKW8 I4LgXAwFLNXqrUk2WEliIAeuaY5k/AeOHxbJvAhqAxu6CdnkZJD/V/6iFEkV1l+T UwJxn7xoyM+WdxbQvn8fYfnte82gPUSABIie8MXtL5VZydgQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgC79UWX3FGV4wt1dixDRZhAQExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjhmMjdmMjktNGYwMC0z NTEyLTg1MTgtNGZhYTQ4NTc4MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBBRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCApUb5vY88oc3MLkuSlBDhc3catR/kUfjK79YMqgF9/RUyjSGAOwtX XvS8gCjMsnWdrxTV7dyggvvWD+/VJ53d9GTLgHz47J6BtMjNYhKUDrB3K2CQTW5c 6qgey3xDBK6lK+t/tHPsVlAlY8Az9+YN3RqUk/gGevor968UKM2zlBLE2oqFboLQ lrk0zoXxSswCkawuRk8g2HE2c0SPyZvA6XtwKNP4S7HJzh996RMhJWvvEw8Nxq2d 852ofsCjnIfD3DftY9S0ealkueQKq+ZoRXUlEiFgAhx67d4aN4Ld9B9GB/pj2p4I HIykYde5DL+cWz+lgZbYsJ+UPn6YvZM= -----END CERTIFICATE-----Generated at Mon Apr 7 12:08:43 2025 by rpki-client