$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f29689c8-51e8-333f-a82c-945ea0f294cd.roa File: f29689c8-51e8-333f-a82c-945ea0f294cd.roa (raw, json) Hash identifier: 3zY2mHZHbCgO+6B1Kc0xqGx4r9hBRS0j85839ugUTzc= Subject key identifier: 40:70:A2:33:E5:F3:C3:83:C4:EB:8E:83:8A:08:59:06:67:1C:7F:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4BCA995B94E69EFF34C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f29689c8-51e8-333f-a82c-945ea0f294cd.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 53435 IP address blocks: 72.4.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4b:ca:99:5b:94:e6:9e:ff:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4a53328c-7ca2-4883-a30e-8333c75bee7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f4:ca:cd:95:8a:75:e6:cb:62:aa:dd:f2:cd: 66:57:45:6a:a2:1c:07:57:e0:01:df:c4:a5:76:01: 6b:55:6f:e8:be:25:67:68:6a:38:e1:eb:18:b0:12: 0a:0b:b2:a8:72:1e:ea:42:28:b2:c5:49:a8:a6:7e: 9a:51:a8:a2:5d:94:6c:e7:99:32:24:10:8e:80:48: c5:d5:58:05:f3:32:24:dc:46:b9:d3:41:3d:ab:2a: 53:d5:65:5f:6e:18:39:82:01:53:1a:3a:6c:e8:b4: 8d:4e:74:5e:a0:af:08:27:74:59:22:1c:67:d2:a8: 19:64:a9:23:7d:a9:f8:fa:b5:56:a9:db:f9:69:b3: 8a:fe:c3:97:5c:17:e7:09:16:bc:b9:dd:34:17:4f: fb:49:32:cc:54:51:59:a6:56:92:cb:96:04:3a:21: b8:13:dd:f1:59:40:e7:ee:ee:84:7c:40:95:f9:c4: 47:8a:bb:70:17:ba:8c:9f:19:cb:20:72:92:54:0d: f2:7c:b5:73:69:16:46:39:a1:95:9e:7b:49:d4:0a: 59:d0:a7:ce:58:7c:ab:74:8b:07:dd:b5:94:d8:d2: 7b:b7:09:8a:91:de:f7:51:ed:63:74:61:48:70:d4: f6:30:c6:87:59:17:71:06:51:29:33:ad:51:c4:09: 3e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:70:A2:33:E5:F3:C3:83:C4:EB:8E:83:8A:08:59:06:67:1C:7F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f29689c8-51e8-333f-a82c-945ea0f294cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ba:51:43:4b:a6:76:e0:3f:8b:cd:7a:aa:a3:7d:21:4e:53: b9:77:5c:d7:af:5c:a3:4a:9b:30:15:97:83:9f:7a:8d:75:43: 40:48:fb:6e:67:81:6d:a5:6b:36:b9:b6:4d:d6:80:85:4e:c4: ad:7e:d7:6b:c3:aa:8f:e8:c5:84:b0:f5:0f:15:b8:24:9f:1f: 50:33:18:3f:0f:92:c2:b8:00:e7:bf:0b:51:fb:19:d2:db:07: a1:68:ae:44:b5:2b:50:c2:c3:98:1d:b1:52:c4:52:94:06:72: 18:7a:c1:e1:20:31:fa:d8:d6:e2:a3:59:39:fd:39:47:e1:ec: 1d:73:96:18:8c:00:02:aa:44:7a:cd:c7:e8:a1:ce:ee:25:85: 39:5d:35:de:fd:b7:6c:40:2c:d6:25:98:b8:bd:eb:f2:20:a6: 50:f1:ed:a2:fe:59:c4:45:55:50:5b:61:54:12:7e:fc:c4:b5: 29:a2:ad:c0:30:85:ec:ec:02:df:9e:97:33:6b:db:23:36:cc: d8:81:21:9f:69:15:b8:13:e0:00:4e:85:51:37:bf:5d:f3:12: dc:cd:2f:18:bc:5c:5e:2f:34:6d:27:76:10:81:2e:ce:1c:97: 29:42:ee:25:19:0c:30:dd:15:84:70:b1:db:64:96:12:d3:7c: d7:f6:dd:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkvKmVuU5p7/NMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NGE1MzMyOGMtN2NhMi00ODgzLWEzMGUtODMzM2M3NWJlZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PTKzZWKdebLYqrd8s1mV0VqohwHV+AB38Sl dgFrVW/oviVnaGo44esYsBIKC7Koch7qQiiyxUmopn6aUaiiXZRs55kyJBCOgEjF 1VgF8zIk3Ea500E9qypT1WVfbhg5ggFTGjps6LSNTnReoK8IJ3RZIhxn0qgZZKkj fan4+rVWqdv5abOK/sOXXBfnCRa8ud00F0/7STLMVFFZplaSy5YEOiG4E93xWUDn 7u6EfECV+cRHirtwF7qMnxnLIHKSVA3yfLVzaRZGOaGVnntJ1ApZ0KfOWHyrdIsH 3bWU2NJ7twmKkd73Ue1jdGFIcNT2MMaHWRdxBlEpM61RxAk+BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBwojPl88ODxOuOg4oIWQZnHH9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjI5Njg5YzgtNTFlOC0z MzNmLWE4MmMtOTQ1ZWEwZjI5NGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm6UUNLpnbgP4vNeqqjfSFOU7l3XNevXKNKmzAVl4Ofeo11Q0BI+25n gW2laza5tk3WgIVOxK1+12vDqo/oxYSw9Q8VuCSfH1AzGD8PksK4AOe/C1H7GdLb B6ForkS1K1DCw5gdsVLEUpQGchh6weEgMfrY1uKjWTn9OUfh7B1zlhiMAAKqRHrN x+ihzu4lhTldNd79t2xALNYlmLi96/IgplDx7aL+WcRFVVBbYVQSfvzEtSmircAw hezsAt+elzNr2yM2zNiBIZ9pFbgT4ABOhVE3v13zEtzNLxi8XF4vNG0ndhCBLs4c lylC7iUZDDDdFYRwsdtklhLTfNf23VM= -----END CERTIFICATE-----Generated at Sat May 10 14:47:43 2025 by rpki-client