$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa File: baeb3e2a-1ecc-336f-80c3-456c0c327903.roa (raw, json) Hash identifier: 86n5nKkjn9SqXtP5Ic46Iew5oeGCS/WTGOBt4k0ex7Q= Subject key identifier: E8:56:25:B6:6B:50:67:61:E1:8E:D9:2D:EF:CC:DF:D2:92:D5:0B:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA0B1C44374DB3577941C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 72.172.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0b:1c:44:37:4d:b3:57:79:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=ee43b89f-7049-4234-9cc0-984ff4a7f072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:83:14:f7:63:46:55:86:34:4e:6d:e6:99:8a: d5:6b:35:7f:6c:86:1c:fb:5d:49:ae:ae:83:c2:65: fd:53:27:52:cc:10:97:a0:c0:c4:62:5b:4e:02:4a: bf:73:af:92:e6:be:97:01:94:ac:26:3d:d5:52:34: c5:cb:33:c6:a1:a9:e8:a8:d7:47:f9:bf:8f:21:7d: bd:04:f9:8f:54:30:14:13:ef:1a:81:f7:43:94:d2: d6:be:4a:99:36:21:6c:63:2c:fc:3f:1a:07:79:32: 99:d3:fa:e8:14:4a:75:f0:3b:07:cd:36:3e:58:fa: 8b:cc:5b:19:9f:86:e4:bc:aa:d9:20:46:35:1a:d3: 83:e0:04:f7:d1:a3:db:11:1e:de:45:de:7e:7f:b3: a9:2d:ad:0f:e2:2d:5c:28:93:f2:35:36:9e:75:88: 55:f8:52:93:98:2f:a0:88:1d:d4:30:43:24:a1:5d: e7:34:b5:10:a1:99:d1:24:a6:0e:c7:d4:01:19:74: e1:26:cd:2c:85:79:07:0e:aa:7f:e6:56:63:6c:a0: 68:79:f0:b4:2b:14:6e:e3:45:37:44:d6:fc:03:a9: 89:43:55:ef:68:5a:31:86:fd:61:4b:a5:f8:ca:91: e5:89:20:48:3f:10:1d:55:fa:01:c0:cf:3a:9e:fc: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:56:25:B6:6B:50:67:61:E1:8E:D9:2D:EF:CC:DF:D2:92:D5:0B:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:1c:90:19:cf:93:69:8a:78:24:04:89:0b:d7:3e:c4:6b:cb: f5:b2:36:bf:ae:75:68:c8:84:29:78:69:bc:e3:db:1e:0b:40: 9a:78:0b:be:48:2d:2b:26:c7:e0:fd:fc:60:bb:c4:2b:97:fa: c1:a5:f4:fc:8a:8f:03:28:22:de:04:fc:ac:75:be:1a:ce:37: 32:df:61:bb:d1:cd:79:40:c5:f7:63:05:79:4f:92:26:e0:89: e7:a7:97:3c:66:db:c7:55:e4:70:2d:7a:f7:12:cc:04:2b:8c: 4a:1a:8c:7b:61:bb:85:01:8d:0e:3d:47:e8:b5:92:6c:6d:90: 18:59:ee:c8:5a:7a:64:9d:02:0e:29:63:a0:ff:e3:40:59:98: e7:78:a8:49:b4:58:a7:ca:61:46:20:ef:41:d0:4d:d3:c0:89: a8:1d:f1:51:cd:3c:c1:ad:77:a5:26:9c:6f:c6:2a:4f:04:2f: 36:2c:c3:ba:cc:b7:0e:29:d5:52:68:38:d7:a4:e0:05:56:f9: d9:56:ee:3a:b8:d0:d7:34:0e:5f:86:7a:10:49:a4:fd:51:08: 4f:6e:d2:5a:51:5e:6c:b1:b3:6d:eb:97:f1:c1:8c:55:b4:93: e0:14:00:6e:43:d3:a4:e9:7e:86:3e:2b:f7:c9:c8:07:78:95: a4:f3:68:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgscRDdNs1d5QcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ZWU0M2I4OWYtNzA0OS00MjM0LTljYzAtOTg0ZmY0YTdmMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYMU92NGVYY0Tm3mmYrVazV/bIYc+11Jrq6D wmX9UydSzBCXoMDEYltOAkq/c6+S5r6XAZSsJj3VUjTFyzPGoanoqNdH+b+PIX29 BPmPVDAUE+8agfdDlNLWvkqZNiFsYyz8PxoHeTKZ0/roFEp18DsHzTY+WPqLzFsZ n4bkvKrZIEY1GtOD4AT30aPbER7eRd5+f7OpLa0P4i1cKJPyNTaedYhV+FKTmC+g iB3UMEMkoV3nNLUQoZnRJKYOx9QBGXThJs0shXkHDqp/5lZjbKBoefC0KxRu40U3 RNb8A6mJQ1XvaFoxhv1hS6X4ypHliSBIPxAdVfoBwM86nvwKIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhWJbZrUGdh4Y7ZLe/M39KS1QvNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmFlYjNlMmEtMWVjYy0z MzZmLTgwYzMtNDU2YzBjMzI3OTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSKwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIockBnPk2mKeCQEiQvXPsRry/WyNr+udWjIhCl4abzj2x4LQJp4C75I LSsmx+D9/GC7xCuX+sGl9PyKjwMoIt4E/Kx1vhrONzLfYbvRzXlAxfdjBXlPkibg ieenlzxm28dV5HAtevcSzAQrjEoajHthu4UBjQ49R+i1kmxtkBhZ7shaemSdAg4p Y6D/40BZmOd4qEm0WKfKYUYg70HQTdPAiagd8VHNPMGtd6UmnG/GKk8ELzYsw7rM tw4p1VJoONek4AVW+dlW7jq40Nc0Dl+GehBJpP1RCE9u0lpRXmyxs23rl/HBjFW0 k+AUAG5D06TpfoY+K/fJyAd4laTzaMA= -----END CERTIFICATE-----Generated at Sat May 10 20:45:14 2025 by rpki-client