$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa File: baeb3e2a-1ecc-336f-80c3-456c0c327903.roa (raw, json) Hash identifier: GWHElyfdLAiFMraQgB5Kd9P6vlNAfPtbSKEUW+4o71k= Subject key identifier: 4B:DE:3D:94:A7:A9:25:FE:44:11:8D:62:D2:FB:8E:BA:F0:4E:82:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900CB8868CF56E5EE5A1540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 72.172.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cb:88:68:cf:56:e5:ee:5a:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=c6ed3b8f-1225-4c9b-b216-9802be5cad7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:38:bd:df:22:a2:22:05:0f:4f:a9:41:2d: 00:6c:52:80:63:38:dc:7f:41:5f:da:73:dd:5b:6f: 0c:ef:fd:3b:2c:ef:f7:85:00:17:2a:1b:70:ed:f8: 56:39:36:85:f5:30:d5:cc:7d:ac:70:70:ab:33:9d: f3:d8:c3:cb:b6:11:d5:34:8f:53:27:8c:b3:f5:0f: f9:9f:40:23:ba:e6:7e:e4:bf:39:40:a7:a6:4b:d1: b6:98:da:ec:c7:9b:12:05:e5:3c:65:0b:d6:8b:80: 0c:26:71:2e:17:58:d5:17:b8:76:1b:ff:94:d4:c3: 20:15:2c:5f:26:e7:bd:e3:0a:34:b9:98:9e:d3:c5: b6:4b:34:21:10:c4:dc:48:c5:b2:ad:4f:61:31:67: db:62:8a:8c:ae:3b:9b:3b:c6:f5:96:86:0b:47:7c: 92:a6:2e:3e:44:22:e8:d8:92:1a:db:53:39:2a:8e: 85:b0:c0:e9:6f:d2:09:19:3c:6f:3c:b4:44:f5:f3: f0:f8:a5:10:c3:ec:72:68:27:27:4b:40:ed:44:f5: b8:03:60:d2:e1:d2:e1:ca:11:b6:24:29:10:86:21: 31:f4:ab:4a:ed:e3:70:1a:fa:c4:83:89:8a:1d:0d: c6:7f:24:d4:63:1e:c3:03:59:97:b2:42:27:d6:22: 5f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DE:3D:94:A7:A9:25:FE:44:11:8D:62:D2:FB:8E:BA:F0:4E:82:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c2:7e:77:8a:f3:12:68:29:14:72:25:12:7c:51:37:0c:0c: a1:3d:4b:4e:0c:84:46:25:4a:11:d1:a3:42:16:e1:7b:da:91: 47:44:6f:52:b5:5e:3c:60:d4:f9:67:be:81:e4:97:7d:06:69: 84:6a:f4:6d:33:34:5e:22:38:01:8c:57:ca:eb:2f:8c:cb:61: 1f:93:13:33:67:5b:14:32:42:b2:4f:61:e8:1d:46:6b:92:85: 32:e6:1f:de:c8:da:49:ce:dc:74:0a:c3:a3:f8:76:eb:ba:b0: bb:07:f9:a2:19:81:b0:18:ac:42:6a:e4:5a:26:f2:7e:be:93: d4:2a:f3:45:a8:50:22:8f:82:e2:d2:71:2c:c0:fa:a3:f5:a7: d1:a8:2a:57:7f:7e:be:4b:1e:94:71:ec:7e:09:88:74:3f:01: c9:cc:08:29:d3:06:87:41:ba:25:8f:ae:97:65:9f:13:24:6d: fe:45:94:1b:1c:6e:2c:8e:46:92:b1:b4:20:e2:04:43:6a:8f: 7d:a0:3f:04:ad:72:71:18:61:f1:66:6e:ad:21:16:f0:65:c5: 85:a4:1a:7c:2e:fa:53:84:c1:be:57:c3:04:ae:94:90:99:d2: 23:32:95:51:f0:0a:7e:15:97:0e:a1:9d:ba:28:5b:0c:b9:d6: 11:22:95:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMuIaM9W5e5aFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YzZlZDNiOGYtMTIyNS00YzliLWIyMTYtOTgwMmJlNWNhZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+84vd8ioiIFD0+pQS0AbFKAYzjcf0Ff2nPd W28M7/07LO/3hQAXKhtw7fhWOTaF9TDVzH2scHCrM53z2MPLthHVNI9TJ4yz9Q/5 n0AjuuZ+5L85QKemS9G2mNrsx5sSBeU8ZQvWi4AMJnEuF1jVF7h2G/+U1MMgFSxf Jue94wo0uZie08W2SzQhEMTcSMWyrU9hMWfbYoqMrjubO8b1loYLR3ySpi4+RCLo 2JIa21M5Ko6FsMDpb9IJGTxvPLRE9fPw+KUQw+xyaCcnS0DtRPW4A2DS4dLhyhG2 JCkQhiEx9KtK7eNwGvrEg4mKHQ3GfyTUYx7DA1mXskIn1iJfVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvePZSnqSX+RBGNYtL7jrrwToKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmFlYjNlMmEtMWVjYy0z MzZmLTgwYzMtNDU2YzBjMzI3OTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSKwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXCfneK8xJoKRRyJRJ8UTcMDKE9S04MhEYlShHRo0IW4XvakUdEb1K1 Xjxg1PlnvoHkl30GaYRq9G0zNF4iOAGMV8rrL4zLYR+TEzNnWxQyQrJPYegdRmuS hTLmH97I2knO3HQKw6P4duu6sLsH+aIZgbAYrEJq5Fom8n6+k9Qq80WoUCKPguLS cSzA+qP1p9GoKld/fr5LHpRx7H4JiHQ/AcnMCCnTBodBuiWPrpdlnxMkbf5FlBsc biyORpKxtCDiBENqj32gPwStcnEYYfFmbq0hFvBlxYWkGnwu+lOEwb5XwwSulJCZ 0iMylVHwCn4Vlw6hnbooWwy51hEilRQ= -----END CERTIFICATE-----Generated at Wed Aug 6 10:09:28 2025 by rpki-client