$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa File: c26c0b20-8706-3524-a0ea-85fc730e35b1.roa (raw, json) Hash identifier: o0D9vlgfhlJiqf44jw8JTVNwS5BamoQrlRWzBNcLpeI= Subject key identifier: C7:4D:02:53:ED:56:E8:E5:CB:58:4A:F4:8B:57:25:C8:94:DD:D9:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149FE1C2B490C0BB7A88280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 72.25.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:fe:1c:2b:49:0c:0b:b7:a8:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2fccacf7-501a-491a-a37d-6c8646ac64b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:e1:0c:41:88:d6:c9:db:36:f2:6a:94:a2: 50:06:f3:4f:fd:b8:fd:79:6d:69:8b:e4:8f:1b:13: a1:90:06:ee:e1:fd:6c:1c:95:77:93:37:77:f4:56: 8c:4f:f7:fa:9f:b7:a9:9c:70:be:c3:55:e7:09:c5: f2:ee:6d:80:de:04:03:7b:f7:1a:ef:26:b9:6f:78: a4:2f:95:61:11:62:50:4d:c6:67:88:3f:02:ba:7b: 62:a6:03:96:24:40:6a:0c:3d:4e:b0:6d:84:69:1a: 92:74:f9:c7:bd:76:c6:7c:5d:e1:83:a1:e0:d3:19: 92:fd:a1:74:f3:4d:38:f7:1e:ae:24:ca:cc:50:ff: 67:87:91:52:66:f6:38:e3:88:15:7c:27:7a:6c:57: 6b:fd:e0:54:ab:69:2f:70:ff:5a:5c:44:6a:f6:5f: c2:66:8a:81:e9:c8:20:ff:b5:08:b2:11:28:55:de: 5b:46:0e:1d:fa:32:93:1c:1d:90:e7:60:3a:53:55: 8a:a3:84:57:60:8a:a4:d4:e8:87:2b:a5:f5:a0:46: 49:85:10:81:6d:42:af:18:fc:22:88:a8:c7:e0:21: e4:ea:68:92:5f:93:85:b5:75:79:10:13:24:be:25: 5f:c6:74:a2:e6:9d:1d:a7:fb:d4:43:bf:b3:1a:51: 35:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4D:02:53:ED:56:E8:E5:CB:58:4A:F4:8B:57:25:C8:94:DD:D9:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.25.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3d:5e:4b:4b:ed:31:84:69:45:ff:fa:bf:5b:d9:33:b7:4a: be:a5:b6:73:16:73:f4:8f:cf:e5:9c:b6:f0:b9:d0:77:b8:b5: 70:4a:6b:d1:9c:8d:93:b4:cc:3d:c8:05:5c:2c:b5:a7:11:2f: 21:9f:17:4c:30:ae:57:d2:41:b3:bb:73:96:82:d0:81:a4:aa: cf:a5:17:13:64:1b:77:98:5e:74:66:8c:66:4b:5c:fd:26:82: 0d:33:04:95:71:12:78:a4:ab:1a:a8:0a:49:70:09:11:af:23: 24:96:30:0c:bb:2d:ae:72:d3:b9:39:bc:9d:d3:26:8e:e4:b6: 92:3b:53:cd:b2:b9:0b:d3:87:06:e3:ac:75:7c:56:63:36:bc: aa:d0:ae:1a:03:80:ef:3c:d2:e3:fd:14:8b:eb:e5:2d:a7:28: db:65:76:4c:fa:25:42:b5:3d:be:33:0d:e6:94:7a:cc:09:48: 11:c6:89:50:29:11:57:2d:1a:30:69:5c:74:57:d6:7b:f6:f9: f4:fa:1c:6b:62:df:7c:11:65:83:28:e7:c0:12:68:3e:12:f1: 7c:98:52:d4:fd:33:6b:b5:19:62:4e:0d:0b:9b:1b:f8:64:6e: 60:16:7e:e0:1d:bd:5a:b8:e4:c8:cf:c5:ca:83:90:d6:c6:12: 16:3b:1a:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSf4cK0kMC7eogoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MmZjY2FjZjctNTAxYS00OTFhLWEzN2QtNmM4NjQ2YWM2NGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEbhDEGI1snbNvJqlKJQBvNP/bj9eW1pi+SP GxOhkAbu4f1sHJV3kzd39FaMT/f6n7epnHC+w1XnCcXy7m2A3gQDe/ca7ya5b3ik L5VhEWJQTcZniD8CuntipgOWJEBqDD1OsG2EaRqSdPnHvXbGfF3hg6Hg0xmS/aF0 80049x6uJMrMUP9nh5FSZvY444gVfCd6bFdr/eBUq2kvcP9aXERq9l/CZoqB6cgg /7UIshEoVd5bRg4d+jKTHB2Q52A6U1WKo4RXYIqk1OiHK6X1oEZJhRCBbUKvGPwi iKjH4CHk6miSX5OFtXV5EBMkviVfxnSi5p0dp/vUQ7+zGlE1qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdNAlPtVujly1hK9ItXJciU3dlZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzI2YzBiMjAtODcwNi0z NTI0LWEwZWEtODVmYzczMGUzNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM9XktL7TGEaUX/+r9b2TO3Sr6ltnMWc/SPz+WctvC50He4tXBKa9Gc jZO0zD3IBVwstacRLyGfF0wwrlfSQbO7c5aC0IGkqs+lFxNkG3eYXnRmjGZLXP0m gg0zBJVxEnikqxqoCklwCRGvIySWMAy7La5y07k5vJ3TJo7ktpI7U82yuQvThwbj rHV8VmM2vKrQrhoDgO880uP9FIvr5S2nKNtldkz6JUK1Pb4zDeaUeswJSBHGiVAp EVctGjBpXHRX1nv2+fT6HGti33wRZYMo58ASaD4S8XyYUtT9M2u1GWJODQubG/hk bmAWfuAdvVq45MjPxcqDkNbGEhY7Guc= -----END CERTIFICATE-----Generated at Sat May 10 19:51:42 2025 by rpki-client