$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92f1d447-3df8-3d57-bb51-f15d27193a93.roa File: 92f1d447-3df8-3d57-bb51-f15d27193a93.roa (raw, json) Hash identifier: pifOob00Wdy6mrsaz1YXieUAjtvGGYbo+dcNw7AVHLo= Subject key identifier: B2:74:50:F0:1A:3A:96:C0:32:69:19:2D:BB:00:B9:F5:C4:CC:42:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149F80C19E5838160B0B53A Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92f1d447-3df8-3d57-bb51-f15d27193a93.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 72.25.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f8:0c:19:e5:83:81:60:b0:b5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=45a0fddd-cdeb-4ab8-9411-a59f4465a0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:18:9d:97:7c:83:4c:b2:b0:dc:bd:35:b8: 83:58:0e:e0:da:e6:28:51:70:78:25:5a:55:34:02: 02:98:5d:74:60:06:c4:00:42:76:5c:9b:30:e7:fa: c5:25:94:f1:ae:30:86:61:8b:29:67:41:c2:45:1c: 51:a5:72:d2:18:8a:cb:86:49:66:de:a4:0e:31:b8: 55:ce:4f:e1:88:7a:69:c0:23:0d:4d:2e:49:e5:ad: 29:04:d6:80:5a:27:c5:c4:24:22:55:03:e4:14:b6: 18:df:4f:2d:03:a8:87:ae:1f:a0:d4:d0:b2:9c:db: 1a:69:be:8f:90:cd:ef:6b:2f:4b:ac:1b:d2:13:47: b8:64:e8:ef:54:39:19:1d:22:6a:19:95:3c:8d:43: 09:4a:51:84:0b:e4:40:ff:91:71:c0:46:9e:8b:bb: 3a:e6:f1:2f:3c:cc:2e:ca:22:bd:41:0c:b9:e3:fd: 86:fa:ef:1e:c5:4d:92:f3:9d:f9:03:3d:5d:fa:20: f4:4c:d4:b8:91:0d:ed:de:ba:f5:07:ee:5c:3e:36: 01:0c:db:32:6e:95:98:f0:72:9b:db:ea:90:81:7b: a7:a0:71:4e:56:75:9b:90:a2:23:c1:40:7b:ff:b1: 14:39:f2:f4:83:27:02:8d:c4:1c:77:0d:38:e3:b9: 71:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:74:50:F0:1A:3A:96:C0:32:69:19:2D:BB:00:B9:F5:C4:CC:42:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92f1d447-3df8-3d57-bb51-f15d27193a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.25.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f7:aa:ef:82:c1:65:79:e3:94:79:4b:64:80:9c:d8:6a:e1: 23:69:cd:10:ba:a5:ac:62:6a:bf:e0:de:70:e4:9e:96:95:db: 88:e2:ef:63:6a:41:3b:9d:e9:30:33:cb:99:2b:9d:19:0e:0e: 3b:2c:a6:18:d5:24:d1:37:b6:56:48:33:93:08:9e:53:07:ce: d5:28:55:23:78:32:67:74:e2:70:8e:9b:2b:6b:6a:22:f9:5f: b6:b2:a3:f6:3a:f5:d7:df:a1:30:6d:dc:cb:c1:af:03:da:58: ef:a7:0d:4a:63:51:92:8e:c6:87:e8:c1:95:d7:6e:33:52:45: ba:3a:92:60:29:f0:fc:e7:15:83:c3:5d:29:42:e8:93:97:6a: 24:b9:fc:bd:07:2a:cb:3e:23:a7:3a:01:70:ca:d5:14:8d:da: 90:d1:8f:c7:fe:15:f0:41:77:0b:71:e3:db:41:18:67:82:ce: be:fd:ba:b4:db:dd:fb:98:25:a5:bd:d2:d2:6c:ee:4e:ac:06: 5c:d7:f6:18:ce:84:92:c4:0a:36:dc:43:b0:ee:4b:70:49:50: 77:99:e1:91:d8:f7:b1:34:05:7f:94:d3:35:b4:ef:a4:1f:23: b1:80:af:c2:e1:04:b8:21:0b:fa:2c:4c:f6:a4:47:70:a9:c6: 5b:d7:a7:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfgMGeWDgWCwtTowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDVhMGZkZGQtY2RlYi00YWI4LTk0MTEtYTU5ZjQ0NjVhMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnsYnZd8g0yysNy9NbiDWA7g2uYoUXB4JVpV NAICmF10YAbEAEJ2XJsw5/rFJZTxrjCGYYspZ0HCRRxRpXLSGIrLhklm3qQOMbhV zk/hiHppwCMNTS5J5a0pBNaAWifFxCQiVQPkFLYY308tA6iHrh+g1NCynNsaab6P kM3vay9LrBvSE0e4ZOjvVDkZHSJqGZU8jUMJSlGEC+RA/5FxwEaei7s65vEvPMwu yiK9QQy54/2G+u8exU2S8535Az1d+iD0TNS4kQ3t3rr1B+5cPjYBDNsybpWY8HKb 2+qQgXunoHFOVnWbkKIjwUB7/7EUOfL0gycCjcQcdw0447lxYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ0UPAaOpbAMmkZLbsAufXEzELSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTJmMWQ0NDctM2RmOC0z ZDU3LWJiNTEtZjE1ZDI3MTkzYTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX3qu+CwWV545R5S2SAnNhq4SNpzRC6paxiar/g3nDknpaV24ji72Nq QTud6TAzy5krnRkODjssphjVJNE3tlZIM5MInlMHztUoVSN4Mmd04nCOmytraiL5 X7ayo/Y69dffoTBt3MvBrwPaWO+nDUpjUZKOxofowZXXbjNSRbo6kmAp8PznFYPD XSlC6JOXaiS5/L0HKss+I6c6AXDK1RSN2pDRj8f+FfBBdwtx49tBGGeCzr79urTb 3fuYJaW90tJs7k6sBlzX9hjOhJLECjbcQ7DuS3BJUHeZ4ZHY97E0BX+U0zW076Qf I7GAr8LhBLghC/osTPakR3CpxlvXpz4= -----END CERTIFICATE-----Generated at Sun May 11 04:21:40 2025 by rpki-client