$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a4227de-446b-3a2c-8da9-61e4da730c97.roa File: 6a4227de-446b-3a2c-8da9-61e4da730c97.roa (raw, json) Hash identifier: J5LY/NCdNz7/BcX6LCtwmU6jR1KZxCxCoqQ+GDxcFvI= Subject key identifier: 53:A1:34:45:AF:B1:C8:FD:BC:10:AC:CB:C6:4E:1E:BC:A0:70:88:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111E545246FB5A0B078A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a4227de-446b-3a2c-8da9-61e4da730c97.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 72.8.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1e:54:52:46:fb:5a:0b:07:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=25240e8c-9e92-4b6c-ae4f-5e4b6b1af27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:4f:0b:09:af:45:cf:88:34:42:e3:43:20: 80:2d:64:33:c6:8f:1f:41:9d:e7:0e:ce:46:42:a1: de:8f:36:98:95:8a:7a:04:b2:83:d7:76:d2:18:04: ac:6b:49:4c:19:db:6b:62:10:e3:b9:29:8d:8d:74: e8:a8:01:4a:8a:60:87:8d:cb:a5:03:ab:97:3d:a9: a9:f6:c8:86:a5:06:23:e1:70:0b:46:15:06:ef:22: cd:6a:92:55:a9:ce:5c:a8:ac:39:cb:91:7d:10:2b: 74:79:52:9d:cb:18:08:8b:f5:4a:5c:d0:89:6a:47: 99:aa:9c:4e:f2:16:6e:c8:1a:55:33:7e:ec:c5:1a: 29:cb:08:54:ce:83:9f:f7:5b:c7:c6:c3:9f:02:c2: 44:90:6e:b6:ab:fa:e7:95:89:03:47:cf:19:60:e8: 28:f8:54:5d:6c:b6:56:f1:44:68:4f:cb:8f:0b:0b: 90:97:83:eb:20:f6:ff:bd:f6:bf:cd:d6:22:f3:50: 33:58:ac:3f:e2:bf:9b:c6:c8:e9:4d:2b:72:61:ba: 6a:30:fc:e8:8c:ee:f6:ec:45:ee:89:17:b7:bf:56: 68:07:81:1e:14:38:b8:9c:1e:60:ce:c5:96:79:a9: fb:2c:b8:33:41:be:d2:1d:27:d0:97:ae:fa:91:e5: a9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A1:34:45:AF:B1:C8:FD:BC:10:AC:CB:C6:4E:1E:BC:A0:70:88:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6a4227de-446b-3a2c-8da9-61e4da730c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.8.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:1c:ee:8b:5d:e9:0a:b1:5f:bd:bd:0e:b7:fd:00:db:7c:dd: 6a:09:26:5e:6c:91:41:e6:c6:45:93:0d:00:81:9d:3e:45:26: aa:ce:71:67:54:c4:92:ab:7f:eb:c9:ee:ee:4b:df:ee:93:c7: b7:e4:77:8c:3a:f1:fb:69:8a:c0:d0:99:34:fb:86:42:b2:53: 63:bd:69:1c:d8:91:32:7e:80:fe:70:20:2f:74:9a:5b:62:fd: 77:2b:7b:4c:64:5d:c3:0b:56:9f:34:c7:e9:28:ab:51:df:30: 10:44:f8:fe:7b:83:cc:30:da:4d:c0:2a:7b:08:2c:35:d5:75: cf:ad:8c:af:b7:cd:f3:a1:7a:3f:47:09:6a:e4:8a:e7:4c:ce: fd:ab:f9:28:bb:1f:93:e5:1c:29:d8:9c:b2:91:f9:bc:ae:16: 6f:79:6f:df:ec:0e:4a:6b:02:25:90:97:f9:d6:1e:27:a8:c1: 11:43:0b:97:8c:39:74:1d:f8:6c:90:80:0b:e1:a3:36:d1:7c: e6:84:fa:99:b2:89:c7:c0:65:64:61:0c:01:cf:c0:97:0e:fa: fb:40:78:c0:07:d7:31:92:aa:b8:70:96:95:cf:4b:11:4f:87: 94:cd:dc:00:e9:66:01:d3:c9:91:f3:e7:f9:5d:c8:1a:c5:80: 1c:fd:e3:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSER5UUkb7WgsHikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjUyNDBlOGMtOWU5Mi00YjZjLWFlNGYtNWU0YjZiMWFmMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoulPCwmvRc+INELjQyCALWQzxo8fQZ3nDs5G QqHejzaYlYp6BLKD13bSGASsa0lMGdtrYhDjuSmNjXToqAFKimCHjculA6uXPamp 9siGpQYj4XALRhUG7yLNapJVqc5cqKw5y5F9ECt0eVKdyxgIi/VKXNCJakeZqpxO 8hZuyBpVM37sxRopywhUzoOf91vHxsOfAsJEkG62q/rnlYkDR88ZYOgo+FRdbLZW 8URoT8uPCwuQl4PrIPb/vfa/zdYi81AzWKw/4r+bxsjpTStyYbpqMPzojO727EXu iRe3v1ZoB4EeFDi4nB5gzsWWean7LLgzQb7SHSfQl676keWp/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOhNEWvscj9vBCsy8ZOHrygcIjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmE0MjI3ZGUtNDQ2Yi0z YTJjLThkYTktNjFlNGRhNzMwYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSAgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0c7otd6QqxX729Drf9ANt83WoJJl5skUHmxkWTDQCBnT5FJqrOcWdU xJKrf+vJ7u5L3+6Tx7fkd4w68ftpisDQmTT7hkKyU2O9aRzYkTJ+gP5wIC90mlti /Xcre0xkXcMLVp80x+koq1HfMBBE+P57g8ww2k3AKnsILDXVdc+tjK+3zfOhej9H CWrkiudMzv2r+Si7H5PlHCnYnLKR+byuFm95b9/sDkprAiWQl/nWHieowRFDC5eM OXQd+GyQgAvhozbRfOaE+pmyicfAZWRhDAHPwJcO+vtAeMAH1zGSqrhwlpXPSxFP h5TN3ADpZgHTyZHz5/ldyBrFgBz94zo= -----END CERTIFICATE-----Generated at Sun Apr 27 11:32:06 2025 by rpki-client