$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6870d8c7-4e6a-3b64-8df8-a3dc7d26f2ca.roa File: 6870d8c7-4e6a-3b64-8df8-a3dc7d26f2ca.roa (raw, json) Hash identifier: CjwqQbcLYRCfzCW0qy4nGt7D3lyN45m2ctULghYs1kw= Subject key identifier: 7E:B3:9F:9B:AB:C0:31:BA:50:4A:ED:6E:03:15:AA:B9:38:A7:75:BA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707918A8E5C31FF431BF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6870d8c7-4e6a-3b64-8df8-a3dc7d26f2ca.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 72.16.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:79:18:a8:e5:c3:1f:f4:31:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=2164ffcb-206e-4bd9-8d09-eb2b7324c8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:f8:96:85:f3:ec:e9:1c:0d:41:c0:b7:8c:9b: 4f:6f:6e:2a:9d:80:6e:60:0e:2f:b2:cd:42:81:88: 92:10:76:da:c7:e5:69:f7:b1:cd:f5:d6:7b:47:3a: 10:a5:31:19:56:0d:c6:4a:64:14:78:e9:11:1c:d1: 8a:17:b8:12:32:9d:e7:ff:42:c2:9b:7c:75:f1:b9: 89:7f:f2:5f:71:d8:38:c6:58:d0:e0:3e:22:0c:cd: ae:06:d2:39:5c:74:bf:b4:9e:e8:01:be:bd:5a:de: 11:d2:25:ae:ea:b5:8e:cf:9f:b2:32:e0:a1:92:4f: e8:c8:fa:c0:26:11:2c:7f:4a:6c:98:55:a8:2a:29: 05:64:87:2e:6f:ee:53:71:42:eb:19:f5:9f:32:cd: 30:3e:d1:aa:96:88:b8:d5:97:b1:3c:69:37:19:26: 24:68:c4:f8:16:55:57:1e:9e:f9:de:7f:c0:0c:a3: 28:d2:65:b1:8e:b0:a6:8a:5d:19:8b:41:40:9e:7e: c9:07:0c:a9:79:72:bb:64:f8:38:05:aa:94:7a:94: e2:d3:38:76:cf:36:4a:ff:87:1b:a1:b1:45:ab:88: 37:ab:df:e2:7a:94:3c:5c:ae:70:18:1c:af:22:20: 71:bf:d8:ca:b7:ce:80:e6:8b:0b:78:85:19:33:ec: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B3:9F:9B:AB:C0:31:BA:50:4A:ED:6E:03:15:AA:B9:38:A7:75:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6870d8c7-4e6a-3b64-8df8-a3dc7d26f2ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e9:d2:d8:e0:ef:9a:bb:18:46:62:e8:2a:cb:56:50:bd:bc: 77:58:b0:37:77:b7:85:04:fe:dc:30:98:09:62:93:0b:ab:c1: 9b:95:a8:af:8e:dd:30:37:4a:5b:c1:76:75:8a:db:78:33:d6: 09:b2:54:7e:a7:f9:4d:3e:cc:3f:28:2a:37:c8:99:09:19:66: 38:ec:a9:3c:61:38:96:35:d7:c1:7e:2d:92:98:43:98:db:00: af:97:ef:06:a7:42:c2:ca:b3:f2:72:fa:50:8f:a6:c2:41:e4: 24:33:c9:e6:58:0b:da:7e:e5:a7:66:83:76:83:19:6e:a1:68: c4:b8:c2:a3:a3:35:f1:e1:47:15:b4:3c:80:9d:bb:30:c3:05: b3:47:21:2b:50:58:c4:d0:e1:c8:a1:50:64:99:0a:e6:db:c1: 86:cb:1d:78:2a:97:42:fd:3f:72:e3:39:98:b7:4c:5f:4a:bc: b7:72:bf:e1:7a:e9:92:34:df:58:ef:1e:3c:74:4d:b1:db:f9: d3:6b:12:93:95:40:8b:60:3e:aa:7d:95:39:62:48:c6:2b:78: 96:1c:14:7a:8e:e5:ab:fa:ac:63:04:43:3a:30:98:e8:65:df: b5:19:70:5b:e0:bf:a3:4e:1c:f9:a3:90:2e:2a:8e:52:81:be: 69:0b:72:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHkYqOXDH/QxvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MjE2NGZmY2ItMjA2ZS00YmQ5LThkMDktZWIyYjczMjRjOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+viWhfPs6RwNQcC3jJtPb24qnYBuYA4vss1C gYiSEHbax+Vp97HN9dZ7RzoQpTEZVg3GSmQUeOkRHNGKF7gSMp3n/0LCm3x18bmJ f/Jfcdg4xljQ4D4iDM2uBtI5XHS/tJ7oAb69Wt4R0iWu6rWOz5+yMuChkk/oyPrA JhEsf0psmFWoKikFZIcub+5TcULrGfWfMs0wPtGqloi41ZexPGk3GSYkaMT4FlVX Hp753n/ADKMo0mWxjrCmil0Zi0FAnn7JBwypeXK7ZPg4BaqUepTi0zh2zzZK/4cb obFFq4g3q9/iepQ8XK5wGByvIiBxv9jKt86A5osLeIUZM+w6KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6zn5urwDG6UErtbgMVqrk4p3W6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjg3MGQ4YzctNGU2YS0z YjY0LThkZjgtYTNkYzdkMjZmMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLp0tjg75q7GEZi6CrLVlC9vHdYsDd3t4UE/twwmAlikwurwZuVqK+O 3TA3SlvBdnWK23gz1gmyVH6n+U0+zD8oKjfImQkZZjjsqTxhOJY118F+LZKYQ5jb AK+X7wanQsLKs/Jy+lCPpsJB5CQzyeZYC9p+5admg3aDGW6haMS4wqOjNfHhRxW0 PICduzDDBbNHIStQWMTQ4cihUGSZCubbwYbLHXgql0L9P3LjOZi3TF9KvLdyv+F6 6ZI031jvHjx0TbHb+dNrEpOVQItgPqp9lTliSMYreJYcFHqO5av6rGMEQzowmOhl 37UZcFvgv6NOHPmjkC4qjlKBvmkLciY= -----END CERTIFICATE-----Generated at Sun Jun 29 01:41:27 2025 by rpki-client