$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3295264a-c1a1-3d5e-9514-6a927455b612.roa File: 3295264a-c1a1-3d5e-9514-6a927455b612.roa (raw, json) Hash identifier: 8sulvVIKtYosfe8xjBuVNhoE3E853rVNNbKQgGglXEE= Subject key identifier: 96:C6:CD:F1:A3:B5:59:53:F2:83:9F:91:8C:D3:AC:D4:87:F3:23:AE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211021BBD6675716E385500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3295264a-c1a1-3d5e-9514-6a927455b612.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 26717 IP address blocks: 72.4.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:02:1b:bd:66:75:71:6e:38:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=43c5ca5a-0cbc-4f80-be4e-b476706c802f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:3c:80:a5:6d:4d:14:7d:b9:3d:09:a8:58: e6:66:7c:a5:75:90:2b:ea:23:ae:ec:56:33:bd:fe: a3:99:37:48:50:1a:3a:e1:e5:51:06:4a:31:50:59: 66:2b:c0:e0:ac:47:bf:49:99:bf:41:e3:33:a2:59: 6d:79:e7:65:42:65:c6:62:02:6c:40:40:e2:5d:f3: 14:95:c4:46:6a:ac:22:0c:c3:13:95:2e:c0:1c:92: 2e:a0:db:8b:4c:58:34:2a:48:ab:cf:39:36:c5:ec: 2b:e5:92:e7:03:64:23:ab:5c:a1:e5:b8:91:c2:28: fb:bb:07:a5:97:cf:26:cd:fb:64:52:6f:85:4f:5b: 2b:62:d1:dc:95:b1:7b:a5:d8:10:5b:e5:4d:8b:b4: fe:23:83:7b:52:87:9a:fd:c5:f7:78:19:de:ef:84: 85:ee:85:47:aa:4e:14:0d:97:28:b5:4e:fc:dc:65: 92:de:e2:a8:fa:d3:22:18:e5:d8:28:f7:8e:02:61: e8:5d:da:b0:70:dd:39:7c:84:8d:75:eb:e5:8b:51: 60:b0:79:22:ff:d8:3a:9b:3f:f1:36:cd:66:83:d9: 82:fe:0c:fb:e7:74:2d:74:af:6e:11:f0:5b:d2:3d: 71:38:18:87:bd:8b:49:18:49:57:c0:00:77:a3:4e: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C6:CD:F1:A3:B5:59:53:F2:83:9F:91:8C:D3:AC:D4:87:F3:23:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3295264a-c1a1-3d5e-9514-6a927455b612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6c:51:90:e9:da:24:e3:46:c5:ee:43:7f:1b:33:4f:bf:b1: 01:93:d1:06:28:d6:9f:d1:cf:de:9b:c1:65:49:4d:42:95:50: 64:5c:f1:7f:58:eb:85:48:b6:5e:4c:32:c6:51:10:25:ce:2e: 5b:a9:6a:1e:c3:75:d7:8d:42:b0:df:63:07:3b:05:65:96:43: b5:c9:9f:ea:fb:dd:3c:2c:74:ea:25:69:3b:76:3b:1b:e6:d2: 2d:71:ae:7f:65:d4:78:dd:07:86:9b:da:9f:57:90:04:7a:ea: 1a:f9:ed:3a:02:60:67:b4:25:a6:d3:dc:8a:1b:e4:7a:ba:bc: 61:b1:a9:ca:47:0b:90:9f:c5:57:f2:b1:b4:2b:b0:93:5c:d0: ac:99:5e:5e:0f:21:cc:9c:39:66:78:51:55:43:41:22:70:ce: cf:65:86:ca:43:0a:27:c5:f0:de:e6:39:f9:6a:00:b3:b3:c3: 43:f2:4d:30:03:54:59:6a:32:c1:a7:d8:87:06:f2:b0:84:44: 04:63:a9:a1:01:6b:d1:e7:05:f6:89:93:04:48:75:76:5a:9c: 46:51:82:af:e5:03:04:08:1b:62:c3:6f:ac:f8:20:75:91:55: e1:7b:cf:db:39:06:da:5d:fa:0d:d3:2b:28:b1:e6:dc:83:09: b8:bb:b9:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQIbvWZ1cW44VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NDNjNWNhNWEtMGNiYy00ZjgwLWJlNGUtYjQ3NjcwNmM4MDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBQ8gKVtTRR9uT0JqFjmZnyldZAr6iOu7FYz vf6jmTdIUBo64eVRBkoxUFlmK8DgrEe/SZm/QeMzollteedlQmXGYgJsQEDiXfMU lcRGaqwiDMMTlS7AHJIuoNuLTFg0Kkirzzk2xewr5ZLnA2Qjq1yh5biRwij7uwel l88mzftkUm+FT1srYtHclbF7pdgQW+VNi7T+I4N7Uoea/cX3eBne74SF7oVHqk4U DZcotU783GWS3uKo+tMiGOXYKPeOAmHoXdqwcN05fISNdevli1FgsHki/9g6mz/x Ns1mg9mC/gz753QtdK9uEfBb0j1xOBiHvYtJGElXwAB3o05LJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbGzfGjtVlT8oOfkYzTrNSH8yOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzI5NTI2NGEtYzFhMS0z ZDVlLTk1MTQtNmE5Mjc0NTViNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASARfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJsUZDp2iTjRsXuQ38bM0+/sQGT0QYo1p/Rz96bwWVJTUKVUGRc8X9Y 64VItl5MMsZRECXOLlupah7DddeNQrDfYwc7BWWWQ7XJn+r73TwsdOolaTt2Oxvm 0i1xrn9l1HjdB4ab2p9XkAR66hr57ToCYGe0JabT3Iob5Hq6vGGxqcpHC5CfxVfy sbQrsJNc0KyZXl4PIcycOWZ4UVVDQSJwzs9lhspDCifF8N7mOflqALOzw0PyTTAD VFlqMsGn2IcG8rCERARjqaEBa9HnBfaJkwRIdXZanEZRgq/lAwQIG2LDb6z4IHWR VeF7z9s5Btpd+g3TKyix5tyDCbi7uWk= -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:23 2025 by rpki-client