$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c25bdc42-ad53-34c3-ab64-c31fad42ef34.roa File: c25bdc42-ad53-34c3-ab64-c31fad42ef34.roa (raw, json) Hash identifier: bgcgAd9Xd/xgG9OQ3+HEZZWdFSi2+t+Eu2S8SwoRHxc= Subject key identifier: 52:C6:61:35:AF:72:70:AA:86:95:33:F7:EF:38:09:BA:3C:66:EF:29 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3D11E36C326945EA58B0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c25bdc42-ad53-34c3-ab64-c31fad42ef34.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 72.4.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3d:11:e3:6c:32:69:45:ea:58:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=db484525-c730-44b6-9924-0012d853efd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d4:c5:e3:9c:5e:e2:5b:e3:46:78:0c:ef:76: 54:85:65:8b:f7:ab:00:38:18:42:b3:1e:89:82:c5: 8a:d5:84:c6:41:28:c4:47:fe:63:ae:87:b7:ec:7b: 1c:b5:a3:64:0e:91:eb:6b:a7:da:5b:be:a9:04:05: b9:93:48:b7:69:1e:6c:91:39:19:06:e9:29:e5:53: 32:e5:27:b8:dc:e9:57:7c:de:2c:3e:0c:30:64:58: 12:35:e5:a7:22:e6:42:c4:87:b1:b0:98:5c:42:5d: c5:97:ee:6e:be:03:31:38:97:ae:f5:4b:0e:e9:2f: 1d:8a:6b:ce:4c:cc:07:45:aa:af:81:a7:e7:8f:b7: a7:59:cf:58:a3:fd:13:e2:c6:5c:62:b0:1f:35:e2: f9:93:d8:fe:5f:5c:82:6d:a3:a6:9d:c4:e2:1f:75: 9c:9e:b9:92:11:73:f5:23:60:cd:7f:c4:3f:43:e1: 70:80:01:d2:08:a2:9f:65:e0:98:08:22:2d:c5:e1: 33:72:dc:7a:3e:09:ad:45:7d:31:ed:14:fd:87:41: 52:bb:90:60:11:1c:92:6b:8c:99:83:5c:08:40:ba: 8e:67:9e:dd:ea:b1:3d:c9:4d:5a:88:fe:aa:63:2c: 9b:81:53:1d:65:2f:13:60:69:1c:8a:ba:ec:25:5c: ee:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C6:61:35:AF:72:70:AA:86:95:33:F7:EF:38:09:BA:3C:66:EF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c25bdc42-ad53-34c3-ab64-c31fad42ef34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:88:52:0c:e7:04:de:27:ab:a9:0c:f4:3f:d7:6c:9e:ed:94: 5e:30:f7:5c:48:84:ac:ca:e2:5c:36:0e:f2:a8:9b:49:4d:75: 5f:8c:d0:08:95:53:d7:bb:bd:fe:16:68:20:35:5f:f0:c4:ca: 11:7f:dc:2d:5a:5e:b6:7a:50:56:ec:15:c2:64:55:6b:09:04: b4:04:40:38:98:bb:ef:35:9c:32:6a:d3:f9:f1:e6:1c:ec:b0: 66:2c:e0:4b:55:12:07:43:36:07:99:52:33:c7:1d:bd:bb:56: d6:11:d4:4f:6b:df:85:0a:61:4c:b2:ff:6a:e5:6f:b9:6d:ae: d3:e9:5a:f2:16:b5:6b:f8:a5:a2:d2:88:58:5e:35:2f:21:3f: d7:7e:a4:74:34:57:97:2c:b8:fc:20:1e:20:d7:ee:6a:3c:7f: 4f:73:97:c9:c4:33:8a:40:b1:55:4f:c9:eb:3a:a4:b6:9e:b3: b3:7e:b9:25:9a:f3:19:3f:0b:93:ea:66:06:53:7c:2d:de:9e: ef:a4:6e:03:77:5f:a4:97:e1:db:16:1b:92:6f:74:16:f1:83: 9c:ff:f5:c0:5c:f6:e3:8b:f2:fe:2e:0f:7e:55:b7:05:80:8c: ac:03:c5:26:3c:f7:a9:54:3c:06:39:4b:da:f4:82:67:e8:92: ff:a9:d2:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj0R42wyaUXqWLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZGI0ODQ1MjUtYzczMC00NGI2LTk5MjQtMDAxMmQ4NTNlZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidTF45xe4lvjRngM73ZUhWWL96sAOBhCsx6J gsWK1YTGQSjER/5jroe37HsctaNkDpHra6faW76pBAW5k0i3aR5skTkZBukp5VMy 5Se43OlXfN4sPgwwZFgSNeWnIuZCxIexsJhcQl3Fl+5uvgMxOJeu9UsO6S8dimvO TMwHRaqvgafnj7enWc9Yo/0T4sZcYrAfNeL5k9j+X1yCbaOmncTiH3WcnrmSEXP1 I2DNf8Q/Q+FwgAHSCKKfZeCYCCItxeEzctx6PgmtRX0x7RT9h0FSu5BgERySa4yZ g1wIQLqOZ57d6rE9yU1aiP6qYyybgVMdZS8TYGkcirrsJVzuJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLGYTWvcnCqhpUz9+84Cbo8Zu8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzI1YmRjNDItYWQ1My0z NGMzLWFiNjQtYzMxZmFkNDJlZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSARAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGIUgznBN4nq6kM9D/XbJ7tlF4w91xIhKzK4lw2DvKom0lNdV+M0AiV U9e7vf4WaCA1X/DEyhF/3C1aXrZ6UFbsFcJkVWsJBLQEQDiYu+81nDJq0/nx5hzs sGYs4EtVEgdDNgeZUjPHHb27VtYR1E9r34UKYUyy/2rlb7ltrtPpWvIWtWv4paLS iFheNS8hP9d+pHQ0V5csuPwgHiDX7mo8f09zl8nEM4pAsVVPyes6pLaes7N+uSWa 8xk/C5PqZgZTfC3enu+kbgN3X6SX4dsWG5JvdBbxg5z/9cBc9uOL8v4uD35VtwWA jKwDxSY896lUPAY5S9r0gmfokv+p0nc= -----END CERTIFICATE-----Generated at Sat May 10 07:13:25 2025 by rpki-client