$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5206a7d8-9dde-3613-bfee-14c20338d4d3.roa File: 5206a7d8-9dde-3613-bfee-14c20338d4d3.roa (raw, json) Hash identifier: 9q5RP0zLxO7g++7XjqPZBmsErC7VL4nnuKRIkIYCttg= Subject key identifier: AF:A5:71:33:D7:98:AF:22:BA:D1:37:C2:5A:27:A2:BD:CC:8E:08:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA23E71D7E020029883300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5206a7d8-9dde-3613-bfee-14c20338d4d3.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.89.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:23:e7:1d:7e:02:00:29:88:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=ac2558ef-45c1-4525-afe2-29e7a9505e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:84:0a:1f:8b:f9:29:b6:44:bf:47:ca:f1: f4:e3:19:ae:8b:b6:f1:27:47:56:52:47:6b:af:d7: ea:0f:5b:40:a4:ef:97:97:c3:e2:06:64:32:94:e8: 8e:5f:60:74:16:df:c3:d7:85:d8:d5:bc:60:be:c8: b8:a5:c8:72:cd:24:d1:b3:96:dd:85:3c:23:d9:d4: 86:bc:41:58:73:34:9d:00:eb:e5:35:60:fa:fa:5d: 9f:ce:f8:b1:8f:af:b0:78:22:41:2b:9e:56:c8:0a: 4e:85:b5:aa:e0:c7:65:a0:d7:6a:ff:a3:0c:65:fc: f1:24:1f:b1:fe:94:45:96:ff:8a:bf:f9:91:8b:1d: 61:b4:70:42:d3:ec:8c:b0:e6:19:f9:21:d5:c0:1b: ee:51:3d:f1:a7:05:4f:43:d7:89:7c:b1:9a:69:c4: c3:6f:2d:e9:7f:5d:ae:84:d8:dd:5b:0e:a2:9c:20: e1:12:18:a8:4f:32:a1:bf:f9:64:28:30:b2:b7:37: 26:03:1e:31:7d:66:bf:94:f4:a6:d1:e0:b0:1f:8b: 28:4e:99:3f:28:e4:e0:56:c9:d9:c8:cc:8d:bd:91: 1f:57:0f:99:a7:83:ba:18:4a:15:16:fe:26:f5:03: a6:ce:81:a7:16:c4:be:46:42:fe:94:b3:43:f6:6c: 7d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A5:71:33:D7:98:AF:22:BA:D1:37:C2:5A:27:A2:BD:CC:8E:08:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5206a7d8-9dde-3613-bfee-14c20338d4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:fe:c9:85:9e:9f:69:6f:f7:5c:20:0b:1a:a1:03:db:9e:ca: ed:ec:af:bc:66:2e:e3:32:cf:b7:fb:7c:71:41:27:ce:74:47: 4c:8a:78:03:17:35:ff:fb:67:f9:ee:a6:b8:e1:a1:40:51:37: c6:d6:eb:1a:83:53:77:14:1a:43:35:e5:42:f0:f2:bf:09:72: 56:e7:a0:e6:b3:ab:96:ad:b3:6e:b2:99:97:ed:4e:0b:55:4b: a8:a3:8a:00:d0:d9:ab:c7:50:e8:c5:0c:c1:7e:cd:65:1a:83: f9:e2:6c:ff:f9:be:54:cd:76:0b:dc:1e:5d:c1:87:a6:fa:4d: 11:65:cc:1d:68:0e:cf:8f:f1:fe:15:26:fb:61:f7:1c:15:8c: 83:1d:91:08:1a:e7:70:0e:70:9d:04:eb:4f:38:e3:23:27:4c: 29:51:25:ab:21:fc:8b:84:d2:30:3e:df:57:2a:92:c1:3f:6d: 0a:1b:c3:7b:8d:66:ef:9d:a0:4b:66:8b:35:c4:45:b2:a1:1c: da:79:7a:ca:42:95:b3:9f:a9:83:da:25:9f:06:1b:3b:c6:0d: 6c:69:89:a2:5f:c2:48:47:d5:9d:53:72:ab:b2:ba:1c:b5:3a: 03:8e:04:c2:d0:c8:83:1a:e5:16:be:1b:52:de:7d:b6:57:57: ed:d3:33:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiPnHX4CACmIMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk YWMyNTU4ZWYtNDVjMS00NTI1LWFmZTItMjllN2E5NTA1ZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyGECh+L+Sm2RL9HyvH04xmui7bxJ0dWUkdr r9fqD1tApO+Xl8PiBmQylOiOX2B0Ft/D14XY1bxgvsi4pchyzSTRs5bdhTwj2dSG vEFYczSdAOvlNWD6+l2fzvixj6+weCJBK55WyApOhbWq4MdloNdq/6MMZfzxJB+x /pRFlv+Kv/mRix1htHBC0+yMsOYZ+SHVwBvuUT3xpwVPQ9eJfLGaacTDby3pf12u hNjdWw6inCDhEhioTzKhv/lkKDCytzcmAx4xfWa/lPSm0eCwH4soTpk/KOTgVsnZ yMyNvZEfVw+Zp4O6GEoVFv4m9QOmzoGnFsS+RkL+lLND9mx99QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+lcTPXmK8iutE3wlonor3MjgjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIwNmE3ZDgtOWRkZS0z NjEzLWJmZWUtMTRjMjAzMzhkNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1kwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn+yYWen2lv91wgCxqhA9ueyu3sr7xmLuMyz7f7fHFBJ850R0yKeAMX Nf/7Z/nuprjhoUBRN8bW6xqDU3cUGkM15ULw8r8JclbnoOazq5ats26ymZftTgtV S6ijigDQ2avHUOjFDMF+zWUag/nibP/5vlTNdgvcHl3Bh6b6TRFlzB1oDs+P8f4V Jvth9xwVjIMdkQga53AOcJ0E60844yMnTClRJash/IuE0jA+31cqksE/bQobw3uN Zu+doEtmizXERbKhHNp5espClbOfqYPaJZ8GGzvGDWxpiaJfwkhH1Z1Tcquyuhy1 OgOOBMLQyIMa5Ra+G1LefbZXV+3TM3Q= -----END CERTIFICATE-----Generated at Mon Jun 16 02:28:30 2025 by rpki-client