$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebd02ac-aaa2-3c5c-96ba-3f00ccfbb529.roa File: 8ebd02ac-aaa2-3c5c-96ba-3f00ccfbb529.roa (raw, json) Hash identifier: 9K4jUtSgp0+3nLfz/ru6Esp/trqE5Umvw5le0MC8kdk= Subject key identifier: 7E:B2:5F:45:A4:B4:89:A3:72:CF:90:7C:B0:BB:28:15:AF:45:90:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D0ABB9BE6D2CBB1BC3838A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebd02ac-aaa2-3c5c-96ba-3f00ccfbb529.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 72.25.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b9:be:6d:2c:bb:1b:c3:83:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=40047bb5-0ceb-4c86-9bae-71a6d49013ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4c:35:98:ce:f0:d5:d0:79:f3:a4:6f:d9:21: 10:10:97:57:f0:01:3e:f7:47:fd:12:3e:57:ab:34: d3:c1:79:0e:90:a5:8c:b8:b6:57:46:88:a8:eb:9e: 1e:77:ce:6d:2d:0a:1e:9e:fd:ec:23:b4:1a:d0:fb: e1:6e:a7:fc:a3:74:ae:c1:94:d3:50:0b:03:d5:37: 9d:f1:99:cb:61:86:d3:63:10:26:9f:8a:4c:90:12: f3:d1:86:ff:9b:d2:31:74:61:36:cf:ca:57:8b:c7: 8e:9f:fc:91:a6:c6:7c:b5:c0:39:a8:42:31:92:52: 08:f9:34:1e:8a:8f:4e:b7:f3:1b:c2:dc:08:bd:86: 2a:9a:5c:19:b9:48:9a:65:58:92:0b:1e:9b:a8:0d: a1:68:fc:d2:ec:f6:be:16:09:b5:d6:44:ff:11:03: 57:4b:f0:e1:d9:be:67:1d:1c:5c:30:16:2b:6a:d7: 61:b3:ba:8c:bd:8e:c8:33:34:b2:ac:66:af:74:9e: f1:fd:24:54:63:d6:bf:e2:0b:e1:76:06:fb:d0:16: 89:d9:45:82:cd:49:e5:0b:a7:c5:2c:23:cf:c6:43: 11:de:3c:52:2e:c7:5d:a7:1c:79:9f:16:a1:cb:de: d7:f8:3b:af:2c:dd:0a:6b:87:fa:79:54:34:a4:4b: 61:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B2:5F:45:A4:B4:89:A3:72:CF:90:7C:B0:BB:28:15:AF:45:90:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebd02ac-aaa2-3c5c-96ba-3f00ccfbb529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.25.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:30:68:a8:e8:c2:5e:83:f3:0a:a3:6e:00:4f:48:18:4c:07: f9:ed:a4:dd:c1:da:9a:9b:81:c3:bd:6a:74:0b:f3:96:5e:20: 3b:8d:4b:c4:3e:11:eb:88:79:a9:f3:61:55:d6:ae:e2:a0:37: 7b:45:fb:45:c4:1d:78:5b:a8:4c:9c:96:08:2e:cc:99:e0:30: aa:f9:1d:d9:d3:a4:8d:3c:a3:f0:32:db:9b:95:20:d8:e6:cc: 09:ee:44:3a:5a:87:43:fb:eb:b0:16:3b:ef:df:02:f1:7e:e1: 5e:b1:99:a0:95:50:a2:e1:ac:88:df:7b:a6:6e:44:00:80:f8: e3:91:13:53:bb:db:7b:ee:e2:99:50:73:37:cc:bd:2a:78:88: 6f:25:5f:b4:c4:44:94:1f:d8:6d:f6:76:d2:29:9f:8c:a7:2e: f8:07:4d:36:10:6e:a0:d5:b1:d7:ef:ef:ca:c6:1a:05:6e:dd: ad:1e:91:8d:3e:1c:ad:c8:8b:fb:43:c8:a8:81:04:56:d1:e3: b2:3a:22:9e:6a:4f:e0:7a:ec:14:ba:1b:73:80:22:f5:e0:b0: dc:d4:fb:d2:18:18:f0:ca:cd:09:b5:83:3b:70:6a:15:dd:3e: 88:7d:2d:f3:94:72:07:9e:ea:d5:e9:35:ba:b0:d0:bb:ad:cd: 28:66:bf:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7m+bSy7G8ODioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NDAwNDdiYjUtMGNlYi00Yzg2LTliYWUtNzFhNmQ0OTAxM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkw1mM7w1dB586Rv2SEQEJdX8AE+90f9Ej5X qzTTwXkOkKWMuLZXRoio654ed85tLQoenv3sI7Qa0Pvhbqf8o3SuwZTTUAsD1Ted 8ZnLYYbTYxAmn4pMkBLz0Yb/m9IxdGE2z8pXi8eOn/yRpsZ8tcA5qEIxklII+TQe io9Ot/MbwtwIvYYqmlwZuUiaZViSCx6bqA2haPzS7Pa+Fgm11kT/EQNXS/Dh2b5n HRxcMBYratdhs7qMvY7IMzSyrGavdJ7x/SRUY9a/4gvhdgb70BaJ2UWCzUnlC6fF LCPPxkMR3jxSLsddpxx5nxahy97X+DuvLN0Ka4f6eVQ0pEthfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6yX0WktImjcs+QfLC7KBWvRZDWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGViZDAyYWMtYWFhMi0z YzVjLTk2YmEtM2YwMGNjZmJiNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIwaKjowl6D8wqjbgBPSBhMB/ntpN3B2pqbgcO9anQL85ZeIDuNS8Q+ EeuIeanzYVXWruKgN3tF+0XEHXhbqEyclgguzJngMKr5HdnTpI08o/Ay25uVINjm zAnuRDpah0P767AWO+/fAvF+4V6xmaCVUKLhrIjfe6ZuRACA+OORE1O723vu4plQ czfMvSp4iG8lX7TERJQf2G32dtIpn4ynLvgHTTYQbqDVsdfv78rGGgVu3a0ekY0+ HK3Ii/tDyKiBBFbR47I6Ip5qT+B67BS6G3OAIvXgsNzU+9IYGPDKzQm1gztwahXd Poh9LfOUcgee6tXpNbqw0LutzShmv3k= -----END CERTIFICATE-----Generated at Sun Apr 6 03:20:23 2025 by rpki-client