$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/318d2a9a-0afe-3947-b263-dd16183e227e.roa File: 318d2a9a-0afe-3947-b263-dd16183e227e.roa (raw, json) Hash identifier: R3wmzNJ+1dav2bGlb0WDYXShVAuCLTGUWIMrouJXWAo= Subject key identifier: 4C:49:CE:E9:87:37:47:E9:FF:8C:E2:F5:05:7E:61:9C:6E:73:71:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A193193F1EEE344E6CB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/318d2a9a-0afe-3947-b263-dd16183e227e.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 75.91.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:19:31:93:f1:ee:e3:44:e6:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=cb3f67c6-f07a-4f33-939a-f9fe784998cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b1:19:8f:91:e2:cb:98:34:eb:f1:d6:93:07: 38:96:a6:c7:9f:d2:c7:ac:c6:00:18:29:66:d2:32: f0:17:65:d9:fe:ab:e0:79:0e:17:3f:fa:22:1f:17: 97:e5:a7:ee:2f:c4:db:47:b4:0b:cc:37:03:53:8e: 59:19:fa:d7:4f:cd:85:ff:76:24:01:35:20:6b:37: d3:50:47:d5:2e:06:bf:29:75:8f:1b:40:0b:17:38: 5a:85:17:30:73:9f:99:b6:35:98:58:d6:1e:43:05: 9e:65:db:29:d8:62:e5:a7:64:c0:b9:d0:39:ab:7a: 77:a3:c7:59:ee:c8:d0:01:de:05:3c:a3:c6:98:44: e7:cf:eb:78:64:21:cf:73:df:d7:22:7e:c1:a9:c5: af:7d:35:58:00:3f:a9:d2:5e:30:0f:4a:1b:9f:1a: 1f:65:3b:bf:03:d4:f7:35:b1:91:09:ca:c9:c4:0b: 54:30:08:85:f3:e0:a9:46:dc:04:10:ca:8c:3e:aa: 56:51:36:e3:b3:81:44:6d:9c:d2:c4:55:12:9d:26: ad:81:1e:54:b1:38:d7:fb:75:94:d4:12:41:cb:a2: 16:55:e7:36:92:8e:41:39:4c:90:95:21:7e:81:e8: f4:06:90:89:59:3e:46:57:46:83:58:b4:e2:dd:92: 67:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:49:CE:E9:87:37:47:E9:FF:8C:E2:F5:05:7E:61:9C:6E:73:71:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/318d2a9a-0afe-3947-b263-dd16183e227e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:1f:20:0b:ef:91:55:2d:44:a3:e8:22:93:32:a1:d6:77:30: 0f:55:9b:4b:bb:b7:88:6f:71:eb:75:1f:f1:1b:ca:3c:cc:8b: a1:19:71:91:a2:82:10:08:0c:4b:60:89:6e:8e:80:dc:7e:39: b3:9e:9d:48:9c:d1:fb:77:ab:72:4f:08:85:08:39:bd:16:97: bd:23:04:0b:34:89:a1:c6:75:ed:84:44:df:ad:ab:a6:ed:73: 7e:7a:04:82:96:a5:d1:1d:32:76:7b:79:83:df:d1:76:e0:25: 5d:bf:21:dc:09:7f:c7:b5:47:b6:f8:f4:21:a8:e6:0e:ba:b4: 66:48:39:bd:76:70:85:b2:11:b5:2e:a2:de:29:de:4b:6a:99: 33:a1:0b:60:7b:89:03:93:3d:42:9b:6d:de:23:69:08:55:6f: 4b:09:78:5c:92:85:f9:33:36:33:8f:da:63:85:08:74:64:17: f2:4f:ec:c9:a8:8a:40:8e:46:42:4c:d1:4a:c3:37:b9:63:94: 11:bf:3e:e3:78:c5:ee:b5:9f:73:78:d7:69:11:28:8b:d0:57: 39:a6:aa:5d:f5:ce:65:6d:fc:2f:af:ec:6a:5a:03:d2:b2:b4: 55:04:98:d3:46:36:74:19:e8:3e:5c:33:59:63:54:8b:c9:d1: bc:80:06:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhkxk/Hu40TmywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk Y2IzZjY3YzYtZjA3YS00ZjMzLTkzOWEtZjlmZTc4NDk5OGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrEZj5Hiy5g06/HWkwc4lqbHn9LHrMYAGClm 0jLwF2XZ/qvgeQ4XP/oiHxeX5afuL8TbR7QLzDcDU45ZGfrXT82F/3YkATUgazfT UEfVLga/KXWPG0ALFzhahRcwc5+ZtjWYWNYeQwWeZdsp2GLlp2TAudA5q3p3o8dZ 7sjQAd4FPKPGmETnz+t4ZCHPc9/XIn7BqcWvfTVYAD+p0l4wD0obnxofZTu/A9T3 NbGRCcrJxAtUMAiF8+CpRtwEEMqMPqpWUTbjs4FEbZzSxFUSnSatgR5UsTjX+3WU 1BJBy6IWVec2ko5BOUyQlSF+gej0BpCJWT5GV0aDWLTi3ZJnmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExJzumHN0fp/4zi9QV+YZxuc3HjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzE4ZDJhOWEtMGFmZS0z OTQ3LWIyNjMtZGQxNjE4M2UyMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcfIAvvkVUtRKPoIpMyodZ3MA9Vm0u7t4hvcet1H/EbyjzMi6EZcZGi ghAIDEtgiW6OgNx+ObOenUic0ft3q3JPCIUIOb0Wl70jBAs0iaHGde2ERN+tq6bt c356BIKWpdEdMnZ7eYPf0XbgJV2/IdwJf8e1R7b49CGo5g66tGZIOb12cIWyEbUu ot4p3ktqmTOhC2B7iQOTPUKbbd4jaQhVb0sJeFyShfkzNjOP2mOFCHRkF/JP7Mmo ikCORkJM0UrDN7ljlBG/PuN4xe61n3N412kRKIvQVzmmql31zmVt/C+v7GpaA9Ky tFUEmNNGNnQZ6D5cM1ljVIvJ0byABvg= -----END CERTIFICATE-----Generated at Mon Apr 28 21:45:43 2025 by rpki-client