$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/a1877769-61d0-3ebb-87f6-0594d5079303.roa File: a1877769-61d0-3ebb-87f6-0594d5079303.roa (raw, json) Hash identifier: 02d/ir9PvXqvspcfv6mNxgaM9IpqE4/LTtDxKfT1PPQ= Subject key identifier: 08:E9:85:EE:C4:E4:0C:27:96:69:27:60:2A:1D:F3:7F:F8:F5:3B:AC Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584A53359EF0CF8775B8AC48DF80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/a1877769-61d0-3ebb-87f6-0594d5079303.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 29802 IP address blocks: 94.72.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:9e:f0:cf:87:75:b8:ac:48:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=9d3296bf-1545-416b-bb6d-29978efd3cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:21:da:31:18:dd:b3:e5:31:92:6b:77:4d:57: 26:dd:db:f6:7d:6a:d0:8f:3c:8d:99:45:b3:6b:50: ea:9e:be:3b:30:66:fd:0c:13:e0:17:ae:b8:fb:74: 3b:e2:ef:27:e7:54:87:ae:a3:47:dc:ce:51:98:5b: e2:ad:e4:37:19:78:7b:b1:c9:e1:7d:ad:51:a0:2c: 68:8a:40:e9:e3:5f:49:d6:be:cf:6e:30:2c:20:e9: ed:f6:36:a9:99:7c:8e:53:af:4c:da:f2:6f:76:c2: d0:28:f2:f1:b1:27:0f:f3:5d:a6:46:70:f7:ae:04: df:c8:8a:e6:74:0b:f5:ee:42:cd:7a:83:71:a2:99: 58:e6:fc:b6:30:c3:b5:c2:c8:a0:eb:6f:59:27:63: c8:14:1a:24:c3:06:bf:c4:d6:d0:e4:65:1e:fa:3d: d1:62:db:75:bb:cf:1b:c2:c3:f2:12:7c:dd:80:2a: 01:08:96:4e:e5:49:e7:d5:43:39:c9:a3:69:76:25: 32:91:33:3f:5f:ab:76:ce:97:94:ee:c9:f1:39:fa: 6c:b6:e3:3c:22:10:17:50:87:9f:b5:c3:45:b7:8b: 18:df:09:39:04:c2:e6:b3:c2:33:f8:bd:d2:24:76: df:10:a2:3e:b4:61:c4:ab:06:a8:5a:bf:48:a9:3f: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E9:85:EE:C4:E4:0C:27:96:69:27:60:2A:1D:F3:7F:F8:F5:3B:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/a1877769-61d0-3ebb-87f6-0594d5079303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 94.72.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a9:ab:43:d4:ec:c7:8d:76:d1:7a:6f:96:5f:68:1e:05:cd: 40:e2:b9:85:ee:32:1d:7f:3b:0b:63:f3:70:c7:fd:13:24:9e: 5d:d3:c8:f5:9a:15:5f:44:7a:e3:60:46:8f:72:aa:79:85:04: 63:e4:c3:f5:a9:61:41:72:b7:00:c7:fa:cc:b8:18:c5:a6:28: 3c:b9:f4:32:c5:90:1e:b6:7e:42:69:f5:73:5c:a1:9e:7b:0a: 17:56:89:be:ca:50:68:83:1a:f1:c6:76:8d:a5:53:6e:b2:1b: b1:55:eb:68:0a:c8:cd:ca:b9:09:5c:17:46:a8:2f:f4:94:21: cc:52:f5:11:4a:1c:03:1f:43:cf:58:45:49:b5:c4:3a:96:84: bc:51:c1:03:7c:08:b9:f0:80:22:42:0a:73:d0:1e:c9:a8:35: b5:04:d0:18:91:57:00:41:ad:1f:4b:7c:91:49:38:c9:13:85: b2:b0:80:f6:1f:5b:fb:9f:5d:77:01:b5:14:b4:5a:5d:e1:63: 8f:45:37:e9:44:d7:21:64:c6:e6:32:fa:7a:d2:13:e2:28:74: f5:48:65:c0:df:d0:10:a6:88:5b:49:e3:b2:cd:69:6a:e6:7e: 49:ff:82:6c:c8:3d:45:ae:73:2b:1e:82:0c:ed:63:ef:6f:8d: 27:05:01:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNZ7wz4d1uKxI34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk OWQzMjk2YmYtMTU0NS00MTZiLWJiNmQtMjk5NzhlZmQzY2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSHaMRjds+Uxkmt3TVcm3dv2fWrQjzyNmUWz a1Dqnr47MGb9DBPgF664+3Q74u8n51SHrqNH3M5RmFvireQ3GXh7scnhfa1RoCxo ikDp419J1r7PbjAsIOnt9japmXyOU69M2vJvdsLQKPLxsScP812mRnD3rgTfyIrm dAv17kLNeoNxoplY5vy2MMO1wsig629ZJ2PIFBokwwa/xNbQ5GUe+j3RYtt1u88b wsPyEnzdgCoBCJZO5Unn1UM5yaNpdiUykTM/X6t2zpeU7snxOfpstuM8IhAXUIef tcNFt4sY3wk5BMLms8Iz+L3SJHbfEKI+tGHEqwaoWr9IqT8mBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjphe7E5AwnlmknYCod83/49TusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYTE4Nzc3NjktNjFkMC0z ZWJiLTg3ZjYtMDU5NGQ1MDc5MzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXkigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOpq0PU7MeNdtF6b5ZfaB4FzUDiuYXuMh1/Owtj83DH/RMknl3TyPWa FV9EeuNgRo9yqnmFBGPkw/WpYUFytwDH+sy4GMWmKDy59DLFkB62fkJp9XNcoZ57 ChdWib7KUGiDGvHGdo2lU26yG7FV62gKyM3KuQlcF0aoL/SUIcxS9RFKHAMfQ89Y RUm1xDqWhLxRwQN8CLnwgCJCCnPQHsmoNbUE0BiRVwBBrR9LfJFJOMkThbKwgPYf W/ufXXcBtRS0Wl3hY49FN+lE1yFkxuYy+nrSE+IodPVIZcDf0BCmiFtJ47LNaWrm fkn/gmzIPUWucyseggztY+9vjScFAeQ= -----END CERTIFICATE-----Generated at Tue Jul 1 14:49:29 2025 by rpki-client