$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c25bdc42-ad53-34c3-ab64-c31fad42ef34.roa File: c25bdc42-ad53-34c3-ab64-c31fad42ef34.roa (raw, json) Hash identifier: /gd2J0dekUXVwvNGdNLFb42/KWZQW+vNFFvqn0KwMD8= Subject key identifier: 1A:C2:D6:E6:CD:D1:40:B7:8D:12:7E:F6:B1:C3:F3:54:96:E1:9D:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111E4868D26A570AD0CA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c25bdc42-ad53-34c3-ab64-c31fad42ef34.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 72.4.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1e:48:68:d2:6a:57:0a:d0:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=53d5320f-a12b-436e-878c-b2eb1b2be769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c0:07:12:1b:a0:ec:fd:c2:0c:20:09:74:0b: 3f:09:4b:86:39:57:81:1d:aa:ff:d2:97:ba:92:7e: bd:59:4e:b7:61:71:87:5e:e3:39:a9:93:68:d4:7d: 25:c4:d0:0a:f7:1c:fd:ee:b8:18:4e:6c:03:53:50: 54:96:6f:4a:a3:a6:d0:7c:c9:19:31:68:76:b1:ac: b6:42:70:f3:56:ae:10:0f:f2:bf:49:28:48:26:fc: 46:6a:56:54:65:d9:1a:51:8b:29:41:49:23:c7:cc: ee:4b:11:91:b0:ce:09:3f:44:24:79:81:6b:d0:18: cb:40:09:e2:55:b6:e0:0c:62:ee:89:03:51:b8:43: ed:fc:de:78:b3:99:30:1a:83:7f:ba:6d:b2:7b:5a: a2:44:4e:42:75:62:cd:17:8d:c8:d0:2f:7c:b1:59: 62:b3:18:03:7d:d6:7b:36:47:90:30:3f:62:a3:4e: ad:80:c3:37:fd:bd:fd:c1:1e:6b:6b:40:13:60:62: 31:cc:e1:87:33:47:9a:59:c9:70:2a:d5:5b:98:9a: 45:cf:d1:db:03:0b:30:0e:41:38:cd:c5:e1:6b:b9: 5a:03:d1:92:4a:04:dc:b1:81:27:ac:51:03:49:ac: 0c:d7:8c:1b:62:0a:e4:e6:7b:36:b8:6f:d7:b2:51: d1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C2:D6:E6:CD:D1:40:B7:8D:12:7E:F6:B1:C3:F3:54:96:E1:9D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c25bdc42-ad53-34c3-ab64-c31fad42ef34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:79:6b:ec:1f:7e:a7:9f:79:21:0c:c7:bb:32:3b:82:14:00: 39:4c:c1:83:55:22:f9:29:e0:24:f5:cc:a9:59:ad:fd:41:5d: e9:d8:9f:43:87:bf:d3:61:a8:7a:e2:22:d1:18:67:6c:42:33: 2c:42:b8:0c:7f:84:93:02:7d:ea:d6:eb:53:45:0f:e5:b7:ad: cd:fc:e8:22:a4:d6:be:91:00:2a:fa:e9:1d:a9:87:b8:d1:79: 2b:f8:45:58:fa:a2:a6:ff:59:8a:66:1a:11:3b:9c:66:e8:0c: ce:7d:fb:34:14:0e:e7:4a:aa:e0:39:4f:87:ed:dd:d2:35:60: d3:14:37:b2:d1:43:d5:30:03:db:2b:ff:f2:6d:a7:a0:92:42: 77:b2:03:8f:b7:50:f5:e4:be:d5:5b:dd:37:7c:34:77:e7:dd: 01:65:0b:6a:4b:60:18:04:e8:6f:97:90:bd:aa:1c:f2:e6:1e: f7:94:c2:ff:90:ea:a1:ef:73:2e:1e:1c:d9:f3:fc:6f:bc:b3: ea:de:08:30:de:4a:b6:fe:ae:07:89:1d:c2:67:db:22:07:16: 36:29:e4:05:e5:32:65:a3:7b:56:5e:a0:87:c1:b3:29:fc:13: 87:b6:22:cb:17:92:06:e6:6b:51:e4:1a:9c:21:5a:f4:09:5e: 75:44:73:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSER5IaNJqVwrQygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NTNkNTMyMGYtYTEyYi00MzZlLTg3OGMtYjJlYjFiMmJlNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sAHEhug7P3CDCAJdAs/CUuGOVeBHar/0pe6 kn69WU63YXGHXuM5qZNo1H0lxNAK9xz97rgYTmwDU1BUlm9Ko6bQfMkZMWh2say2 QnDzVq4QD/K/SShIJvxGalZUZdkaUYspQUkjx8zuSxGRsM4JP0QkeYFr0BjLQAni VbbgDGLuiQNRuEPt/N54s5kwGoN/um2ye1qiRE5CdWLNF43I0C98sVlisxgDfdZ7 NkeQMD9io06tgMM3/b39wR5ra0ATYGIxzOGHM0eaWclwKtVbmJpFz9HbAwswDkE4 zcXha7laA9GSSgTcsYEnrFEDSawM14wbYgrk5ns2uG/XslHR7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrC1ubN0UC3jRJ+9rHD81SW4Z3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzI1YmRjNDItYWQ1My0z NGMzLWFiNjQtYzMxZmFkNDJlZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSARAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN5a+wffqefeSEMx7syO4IUADlMwYNVIvkp4CT1zKlZrf1BXenYn0OH v9NhqHriItEYZ2xCMyxCuAx/hJMCferW61NFD+W3rc386CKk1r6RACr66R2ph7jR eSv4RVj6oqb/WYpmGhE7nGboDM59+zQUDudKquA5T4ft3dI1YNMUN7LRQ9UwA9sr //Jtp6CSQneyA4+3UPXkvtVb3Td8NHfn3QFlC2pLYBgE6G+XkL2qHPLmHveUwv+Q 6qHvcy4eHNnz/G+8s+reCDDeSrb+rgeJHcJn2yIHFjYp5AXlMmWje1ZeoIfBsyn8 E4e2IssXkgbma1HkGpwhWvQJXnVEcwQ= -----END CERTIFICATE-----Generated at Fri Mar 14 08:42:54 2025 by rpki-client