$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/b72dadc8-cc14-3741-a346-3df15bd64a4d.roa File: b72dadc8-cc14-3741-a346-3df15bd64a4d.roa (raw, json) Hash identifier: CV6rzp4pqQWbD8BuWsF5RgxsHsT8JO+jRUyUH8upkGQ= Subject key identifier: 0B:4E:08:EE:2B:CF:A2:CF:8F:2D:3D:61:0C:EF:96:05:36:17:38:03 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F43285849BDDA291426AE116394ACF3C0 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/b72dadc8-cc14-3741-a346-3df15bd64a4d.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 33139 IP address blocks: 66.49.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:29:14:26:ae:11:63:94:ac:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=2d9eba62-4848-4907-8318-f3107676c933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:37:ce:0d:8d:7d:ee:73:04:0b:e3:55:64: 46:9b:5d:60:7c:af:3a:7d:f0:e8:3d:96:c7:b6:63: 2c:ca:9a:05:07:e7:b1:37:56:6a:c9:57:d0:61:4c: 29:6b:6f:86:e3:8a:7a:c6:84:46:86:e2:21:69:61: 2a:4b:f8:8e:c6:f5:49:e2:df:ad:8b:d2:af:d2:0a: a8:91:79:d7:e0:57:bf:f2:7d:94:6e:8e:06:3a:e4: d6:a8:76:27:5a:64:7c:9e:d8:4b:26:99:e8:0c:22: ef:f3:45:72:95:92:07:c0:54:e8:cf:5c:11:de:7f: c6:be:48:ad:4e:d7:b2:a3:48:c1:5d:f6:35:e4:62: 4d:35:bb:2e:4d:d2:f4:cb:69:ae:e4:24:86:5f:bf: 3a:6d:ec:ac:1e:32:31:c8:4b:f9:38:23:97:03:4f: 1e:da:d5:ad:20:7f:08:96:24:3a:36:4e:8c:a8:ef: d7:88:d6:06:81:cf:32:21:d9:3d:a4:9c:49:a8:d3: c4:f6:18:9c:2b:48:b1:26:c3:c3:a1:f0:3a:d3:4a: 35:fa:16:a6:1f:61:20:2b:4e:b5:d9:f9:d1:11:e7: 92:d3:7f:8d:ee:f0:35:a9:91:67:2e:ab:bf:8f:b5: aa:97:92:b7:9f:33:ed:74:1a:b7:7e:57:0c:a7:00: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4E:08:EE:2B:CF:A2:CF:8F:2D:3D:61:0C:EF:96:05:36:17:38:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/b72dadc8-cc14-3741-a346-3df15bd64a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:eb:85:81:6c:37:98:51:30:ca:56:3c:d5:83:02:12:6b:b8: 82:c6:74:91:72:06:19:b2:e4:e4:7c:9d:5c:1e:38:45:83:05: 00:c4:f1:22:2c:2a:41:ca:e3:45:b0:fa:59:aa:1d:b8:3d:15: f6:80:55:74:84:18:08:80:f7:3a:c6:72:7a:a8:5e:99:ba:13: ee:0c:b2:a5:67:e6:84:32:28:19:b8:a9:e9:b2:b4:06:8c:fe: 83:f7:73:18:71:fd:04:63:2a:f6:e7:8b:d0:2b:44:82:92:86: 06:89:fd:42:b9:12:c4:39:87:79:e9:74:df:c1:eb:96:3d:8c: d0:f6:6f:c4:c1:9b:39:e7:28:f4:44:d7:0c:10:c2:02:2b:99: 8b:49:81:4e:d9:1f:4a:cc:ff:d0:bb:5a:17:3e:fa:ed:79:fa: f7:4c:01:fc:a9:b1:90:d7:7d:76:96:60:47:34:50:c1:9d:a0: 37:e1:ca:fb:8f:07:26:e1:4e:a9:b0:b2:eb:7b:c9:99:7d:a3: 2c:96:19:4e:30:f2:69:34:b2:d1:6a:6c:7c:61:33:85:89:50: 91:e3:13:19:70:37:18:04:c6:41:4c:a1:85:e0:06:f0:03:12: ba:57:6d:70:0b:2d:41:71:60:4f:ed:b8:a5:af:b7:36:bc:76: 66:e6:8b:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92ikUJq4RY5Ss88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MmQ5ZWJhNjItNDg0OC00OTA3LTgzMTgtZjMxMDc2NzZjOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAc3zg2Nfe5zBAvjVWRGm11gfK86ffDoPZbH tmMsypoFB+exN1ZqyVfQYUwpa2+G44p6xoRGhuIhaWEqS/iOxvVJ4t+ti9Kv0gqo kXnX4Fe/8n2Ubo4GOuTWqHYnWmR8nthLJpnoDCLv80VylZIHwFToz1wR3n/Gvkit Tteyo0jBXfY15GJNNbsuTdL0y2mu5CSGX786beysHjIxyEv5OCOXA08e2tWtIH8I liQ6Nk6MqO/XiNYGgc8yIdk9pJxJqNPE9hicK0ixJsPDofA600o1+hamH2EgK061 2fnREeeS03+N7vA1qZFnLqu/j7Wql5K3nzPtdBq3flcMpwDJZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtOCO4rz6LPjy09YQzvlgU2FzgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvYjcyZGFkYzgtY2MxNC0z NzQxLWEzNDYtM2RmMTViZDY0YTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQjHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3rhYFsN5hRMMpWPNWDAhJruILGdJFyBhmy5OR8nVweOEWDBQDE8SIs KkHK40Ww+lmqHbg9FfaAVXSEGAiA9zrGcnqoXpm6E+4MsqVn5oQyKBm4qemytAaM /oP3cxhx/QRjKvbni9ArRIKShgaJ/UK5EsQ5h3npdN/B65Y9jND2b8TBmznnKPRE 1wwQwgIrmYtJgU7ZH0rM/9C7Whc++u15+vdMAfypsZDXfXaWYEc0UMGdoDfhyvuP BybhTqmwsut7yZl9oyyWGU4w8mk0stFqbHxhM4WJUJHjExlwNxgExkFMoYXgBvAD ErpXbXALLUFxYE/tuKWvtza8dmbmizw= -----END CERTIFICATE-----Generated at Sun May 11 15:25:39 2025 by rpki-client