$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa File: 7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa (raw, json) Hash identifier: ZR8YzivWtOCRV0w4OZYNoCc2AJvAQcOqEUszTp+GonM= Subject key identifier: D5:5F:84:4E:BB:47:8D:59:43:16:28:42:BC:31:85:C8:B7:F0:EA:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3D3525945A182B267F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 72.25.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3d:35:25:94:5a:18:2b:26:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=acbbafd5-6f4b-48de-942f-4775284e7a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:e2:fa:f5:38:b7:62:a7:f8:a4:57:d3:e9: 7f:bd:dc:6d:b0:2d:82:cd:c5:13:a2:b9:5c:2a:c9: 3d:86:ab:59:57:8f:33:5f:d7:03:cd:88:b4:77:10: a7:14:4f:cc:74:94:48:4f:6d:95:40:57:de:c2:07: 64:a2:92:6a:bc:95:4f:a3:b5:53:bd:71:02:c1:70: dd:f6:82:5a:64:db:d7:54:0a:2f:a8:15:a3:d2:ab: 57:56:8f:27:5c:bd:46:8c:66:63:4b:49:86:b5:3f: 11:f1:51:81:30:2b:c1:65:5b:2d:76:14:7b:8f:da: 51:a9:31:3d:73:2e:7c:d1:33:5a:e1:ed:c0:d2:11: 98:64:15:bf:43:fe:a4:ad:f5:16:5b:f9:ab:f5:a5: 20:d6:1a:61:1f:5e:db:31:4f:9d:3c:7c:af:0d:9d: d2:72:44:84:b1:85:0b:15:7d:35:b5:1b:7c:32:67: d1:10:32:41:96:bc:2e:41:c1:66:a8:2b:a5:c9:2b: d6:ff:b6:5e:5d:19:39:16:ec:f6:ee:24:46:a2:7e: 47:b6:a6:57:ec:a7:a8:53:23:56:1d:2e:b8:6a:50: fa:4e:83:f5:f3:d6:52:d2:ed:77:6b:d2:c9:13:4f: 0c:fd:e5:e4:46:8b:30:14:de:db:92:f1:6d:42:43: ab:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5F:84:4E:BB:47:8D:59:43:16:28:42:BC:31:85:C8:B7:F0:EA:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.25.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:db:45:04:84:ce:b2:1c:25:e4:2c:5a:9f:1f:9d:56:4a:5a: 47:b0:e8:7a:22:a6:ad:77:01:33:83:a7:dc:67:fa:1f:81:71: b0:42:2a:7c:14:ca:26:54:5f:1c:49:e1:76:e1:a3:3c:4a:6f: 27:a3:df:e1:74:4b:b6:7a:af:65:c3:2e:14:a9:59:c6:97:b8: 1e:43:ed:d4:30:51:2b:d4:13:72:a9:72:44:e1:4a:73:01:af: a3:b8:95:6c:71:be:87:4a:5e:c5:a8:3c:7d:be:f7:c9:b5:85: 03:4e:01:56:b3:1c:6a:ef:f6:e1:65:e9:7e:b5:2d:8b:2f:42: ed:97:4d:9b:87:89:14:04:38:30:d0:df:13:e2:e6:4b:90:d4: 13:b8:5b:48:0f:2c:90:f4:eb:76:a4:3a:9f:c9:fd:f4:ce:38: 3c:e3:5e:2c:f4:84:24:cd:7c:d3:1e:7c:a4:94:b6:de:ca:d7: 8e:08:d1:47:9b:da:cd:2a:9f:94:c1:02:51:e1:70:9a:23:3b: 95:ac:b9:29:be:ce:a7:b8:33:30:5e:1b:ca:7a:2c:27:1d:eb: d4:e7:65:37:8e:0b:a7:e2:2c:c4:4f:4e:75:63:2c:31:2a:48: 00:02:81:8b:29:03:84:c9:ec:94:86:0e:4f:cf:d3:f1:55:fe: 17:26:da:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj01JZRaGCsmf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YWNiYmFmZDUtNmY0Yi00OGRlLTk0MmYtNDc3NTI4NGU3YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l7i+vU4t2Kn+KRX0+l/vdxtsC2CzcUTorlc Ksk9hqtZV48zX9cDzYi0dxCnFE/MdJRIT22VQFfewgdkopJqvJVPo7VTvXECwXDd 9oJaZNvXVAovqBWj0qtXVo8nXL1GjGZjS0mGtT8R8VGBMCvBZVstdhR7j9pRqTE9 cy580TNa4e3A0hGYZBW/Q/6krfUWW/mr9aUg1hphH17bMU+dPHyvDZ3SckSEsYUL FX01tRt8MmfREDJBlrwuQcFmqCulySvW/7ZeXRk5Fuz27iRGon5HtqZX7KeoUyNW HS64alD6ToP189ZS0u13a9LJE08M/eXkRoswFN7bkvFtQkOrxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVfhE67R41ZQxYoQrwxhci38Oo9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2UwMTI1ZDAtYjUxNy0z NjEyLTlmMzctYzM1YzM1ZTllM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXbRQSEzrIcJeQsWp8fnVZKWkew6Hoipq13ATODp9xn+h+BcbBCKnwU yiZUXxxJ4XbhozxKbyej3+F0S7Z6r2XDLhSpWcaXuB5D7dQwUSvUE3KpckThSnMB r6O4lWxxvodKXsWoPH2+98m1hQNOAVazHGrv9uFl6X61LYsvQu2XTZuHiRQEODDQ 3xPi5kuQ1BO4W0gPLJD063akOp/J/fTOODzjXiz0hCTNfNMefKSUtt7K144I0Ueb 2s0qn5TBAlHhcJojO5WsuSm+zqe4MzBeG8p6LCcd69TnZTeOC6fiLMRPTnVjLDEq SAACgYspA4TJ7JSGDk/P0/FV/hcm2rk= -----END CERTIFICATE-----Generated at Sat May 10 04:52:38 2025 by rpki-client