$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a4227de-446b-3a2c-8da9-61e4da730c97.roa File: 6a4227de-446b-3a2c-8da9-61e4da730c97.roa (raw, json) Hash identifier: oR4L+6ExTLpyyVmkV5vLFL6l6UkKONPp3LkOjXLAZRU= Subject key identifier: 7C:2A:96:85:E1:20:2D:AE:10:EC:58:3C:62:06:13:92:A8:B0:0D:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3D1DD0D0EE30121CE0F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a4227de-446b-3a2c-8da9-61e4da730c97.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 72.8.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3d:1d:d0:d0:ee:30:12:1c:e0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=9e855b7a-c20e-4bda-bc70-6ef91c6f011f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:da:5d:d4:93:33:1d:81:21:3b:f5:cf:02: 4e:f8:f2:9c:26:a3:ff:cd:7d:94:d6:8b:4c:bc:f8: 06:9f:ab:be:35:95:48:bc:bc:94:e6:04:ef:bc:b3: 4c:48:3f:52:67:26:ee:29:c9:91:8c:d7:97:c2:b6: ec:87:9a:4e:1c:21:41:7e:71:e1:a3:52:16:be:3d: f8:ec:c1:bc:3c:d5:a1:c3:c0:eb:27:78:f9:dd:e1: cd:8c:ba:d3:bb:ba:6f:77:13:ee:be:a9:9b:4b:2c: 03:7c:34:c0:cb:fe:06:04:ff:d9:8b:f4:74:09:24: 26:7a:a6:42:a2:d6:50:39:1c:1a:5f:4c:35:ab:49: 3f:57:8d:f6:21:53:38:f5:60:43:c1:01:56:5e:e3: 42:ef:54:6d:64:26:23:3a:b0:b4:98:48:94:a4:fa: cb:e9:b1:94:b2:2b:3c:34:ae:64:3a:90:7a:15:8f: e4:8b:76:f8:54:07:61:4f:33:21:26:1c:9f:f6:52: 5a:7e:ff:37:53:20:4e:22:cc:40:67:c7:85:c6:79: ae:9d:a1:bb:8d:20:5c:e9:06:74:da:c4:14:c6:8e: ac:e8:59:d1:71:d2:a4:73:10:4a:70:60:f7:96:91: 13:34:e8:a7:7a:b1:e9:9e:a2:c7:cc:7f:57:62:96: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2A:96:85:E1:20:2D:AE:10:EC:58:3C:62:06:13:92:A8:B0:0D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a4227de-446b-3a2c-8da9-61e4da730c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.8.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b3:26:73:70:83:99:87:5e:16:e8:b8:2b:ea:5a:95:a1:de: ea:62:71:e9:b8:2d:76:70:76:57:59:41:90:8f:ba:e3:c5:f6: 2c:40:8c:5e:80:b3:43:df:28:55:17:8c:03:46:bf:3b:a5:fa: e0:47:ed:41:cc:18:60:4d:0c:41:3a:4f:f0:6b:e3:2d:c3:fc: c5:9e:46:4b:75:bd:32:39:63:7c:75:d7:97:f1:c1:ae:74:7f: 5a:32:1f:19:20:f8:e0:9a:e2:aa:21:8f:f0:7b:e2:b7:9a:51: 61:49:2e:2d:d4:a9:9c:90:e6:4b:43:b3:04:30:e0:d7:a4:0c: 20:98:e1:4d:48:4a:9e:02:5d:c5:13:a5:67:4f:83:d8:17:06: 84:73:eb:b5:5f:10:ff:78:33:b9:26:52:5b:b7:ae:9c:57:26: 21:12:18:ef:21:eb:da:75:9e:a2:4b:a6:9b:58:41:02:55:29: 0b:b1:ea:20:b7:4a:2a:cd:52:36:18:b4:28:6d:15:8e:b5:3b: ab:0d:7c:9a:73:c9:80:58:82:90:e5:a0:a9:20:b9:f0:d2:7f: 5c:a9:fb:1c:5f:8a:27:ba:0d:9a:d1:9f:8a:b3:2a:74:65:ee: 35:31:24:12:0f:bb:9a:f0:76:5b:36:62:48:a4:99:5c:d1:bd: 97:ec:d8:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj0d0NDuMBIc4PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OWU4NTViN2EtYzIwZS00YmRhLWJjNzAtNmVmOTFjNmYwMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0raXdSTMx2BITv1zwJO+PKcJqP/zX2U1otM vPgGn6u+NZVIvLyU5gTvvLNMSD9SZybuKcmRjNeXwrbsh5pOHCFBfnHho1IWvj34 7MG8PNWhw8DrJ3j53eHNjLrTu7pvdxPuvqmbSywDfDTAy/4GBP/Zi/R0CSQmeqZC otZQORwaX0w1q0k/V432IVM49WBDwQFWXuNC71RtZCYjOrC0mEiUpPrL6bGUsis8 NK5kOpB6FY/ki3b4VAdhTzMhJhyf9lJafv83UyBOIsxAZ8eFxnmunaG7jSBc6QZ0 2sQUxo6s6FnRcdKkcxBKcGD3lpETNOinerHpnqLHzH9XYpaqFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwqloXhIC2uEOxYPGIGE5KosA1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmE0MjI3ZGUtNDQ2Yi0z YTJjLThkYTktNjFlNGRhNzMwYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSAgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+zJnNwg5mHXhbouCvqWpWh3upicem4LXZwdldZQZCPuuPF9ixAjF6A s0PfKFUXjANGvzul+uBH7UHMGGBNDEE6T/Br4y3D/MWeRkt1vTI5Y3x115fxwa50 f1oyHxkg+OCa4qohj/B74reaUWFJLi3UqZyQ5ktDswQw4NekDCCY4U1ISp4CXcUT pWdPg9gXBoRz67VfEP94M7kmUlu3rpxXJiESGO8h69p1nqJLpptYQQJVKQux6iC3 SirNUjYYtChtFY61O6sNfJpzyYBYgpDloKkgufDSf1yp+xxfiie6DZrRn4qzKnRl 7jUxJBIPu5rwdls2YkikmVzRvZfs2Hk= -----END CERTIFICATE-----Generated at Fri May 9 21:04:56 2025 by rpki-client