$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5958b06f-882f-37fc-a60c-23836249aceb.roa File: 5958b06f-882f-37fc-a60c-23836249aceb.roa (raw, json) Hash identifier: B+wDfw5uYfW6it84mBu+eM+YVdLMhtbVOttqD+vR0QY= Subject key identifier: 35:F7:A3:24:3A:3F:FE:A5:FB:92:49:D3:43:B4:60:70:B1:E5:04:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1654C3CE4D465B523D18080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5958b06f-882f-37fc-a60c-23836249aceb.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 75.88.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:4c:3c:e4:d4:65:b5:23:d1:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=83cd79ea-9e63-4612-b440-97687f925e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:75:1e:3b:6f:a9:3d:42:f0:87:8c:99:7e:af: be:8c:9f:6b:04:16:f6:36:ae:8b:d8:27:c6:c1:29: 51:5d:ce:eb:06:fc:37:6b:ac:41:9e:03:ae:a0:5a: 5d:c8:76:34:6a:46:5e:56:ad:57:e8:79:df:8f:fc: a5:49:c1:f6:2b:87:9d:10:00:98:c2:d3:15:c9:e8: 01:29:ef:79:18:e0:3a:d1:17:ee:52:57:a1:70:f6: 91:0b:ec:cd:d6:bb:1e:90:a7:be:29:35:31:4a:c9: 2d:56:76:1b:c9:a4:30:ac:e6:16:0a:05:95:c8:ef: c6:51:f9:06:7d:38:d7:0f:db:6c:91:c8:14:e0:f9: 96:4e:16:85:de:2e:b1:2e:b1:02:14:44:9d:fd:54: 4b:b2:e3:e2:42:0b:8f:bd:96:89:b5:1e:83:24:9c: b5:88:5c:39:1e:1c:63:45:38:68:cf:e0:7b:f9:b7: b1:9a:9f:f5:c7:2d:f3:fd:04:20:32:e4:ea:26:06: 0c:85:5b:7c:97:e3:ff:8e:9e:3b:80:0c:d7:9d:73: f9:3b:17:c6:c9:6f:39:fc:5e:37:a6:d1:0c:c1:4f: a6:cd:b5:15:3c:a3:1b:f9:cb:75:47:bd:32:6a:69: b3:df:42:ea:88:57:13:e1:08:57:8d:c1:cd:1a:50: ee:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F7:A3:24:3A:3F:FE:A5:FB:92:49:D3:43:B4:60:70:B1:E5:04:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5958b06f-882f-37fc-a60c-23836249aceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:8a:47:91:96:b5:f5:53:a4:6c:e6:5a:9c:38:4b:db:07:5f: 33:8e:5a:4e:b2:5d:75:13:d5:8c:e9:a6:c7:4d:3f:7d:ff:d2: fc:d1:7a:5b:6f:68:1d:e9:8c:d8:39:b8:6a:cd:af:37:78:f9: 69:2f:11:b7:78:45:21:9c:5e:18:30:cf:f8:f3:20:46:b4:e2: 92:c9:61:9d:ef:3d:63:a5:3a:f5:cd:9d:74:39:6d:b8:3a:bf: b1:86:b0:20:23:1b:74:24:6e:12:87:4b:af:8e:c5:4a:d1:d3: 08:59:52:84:e9:09:bc:69:36:ca:14:72:71:97:5b:1b:91:d5: 5e:b3:59:f4:72:6d:2a:55:d7:f2:25:5a:52:3c:94:d8:d0:91: b1:17:49:0b:5f:1b:49:73:a2:93:a0:ea:29:ac:06:09:a8:7a: 7c:26:70:77:7a:da:c9:63:24:9d:fc:e7:fb:9b:f3:76:97:ba: 3f:f3:ec:46:a5:3f:12:df:22:f6:2d:0c:f9:97:6c:b9:26:a5: c5:a6:0f:04:bb:53:ac:92:6d:c9:af:bf:ed:7e:d9:3d:cc:72: 1c:38:2c:c0:9b:1d:47:a3:14:18:8b:e5:08:55:ec:16:dd:7f: a0:9b:b2:09:ee:e8:a5:aa:52:73:73:e8:ad:59:bc:6c:f6:f4: bb:0c:63:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZUw85NRltSPRgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ODNjZDc5ZWEtOWU2My00NjEyLWI0NDAtOTc2ODdmOTI1ZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnUeO2+pPULwh4yZfq++jJ9rBBb2Nq6L2CfG wSlRXc7rBvw3a6xBngOuoFpdyHY0akZeVq1X6Hnfj/ylScH2K4edEACYwtMVyegB Ke95GOA60RfuUlehcPaRC+zN1rsekKe+KTUxSsktVnYbyaQwrOYWCgWVyO/GUfkG fTjXD9tskcgU4PmWThaF3i6xLrECFESd/VRLsuPiQguPvZaJtR6DJJy1iFw5Hhxj RThoz+B7+bexmp/1xy3z/QQgMuTqJgYMhVt8l+P/jp47gAzXnXP5OxfGyW85/F43 ptEMwU+mzbUVPKMb+ct1R70yammz30LqiFcT4QhXjcHNGlDudQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX3oyQ6P/6l+5JJ00O0YHCx5QSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTk1OGIwNmYtODgyZi0z N2ZjLWE2MGMtMjM4MzYyNDlhY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1j4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiKR5GWtfVTpGzmWpw4S9sHXzOOWk6yXXUT1YzppsdNP33/0vzReltv aB3pjNg5uGrNrzd4+WkvEbd4RSGcXhgwz/jzIEa04pLJYZ3vPWOlOvXNnXQ5bbg6 v7GGsCAjG3QkbhKHS6+OxUrR0whZUoTpCbxpNsoUcnGXWxuR1V6zWfRybSpV1/Il WlI8lNjQkbEXSQtfG0lzopOg6imsBgmoenwmcHd62sljJJ385/ub83aXuj/z7Eal PxLfIvYtDPmXbLkmpcWmDwS7U6ySbcmvv+1+2T3Mchw4LMCbHUejFBiL5QhV7Bbd f6Cbsgnu6KWqUnNz6K1ZvGz29LsMY9k= -----END CERTIFICATE-----Generated at Sun Jun 15 20:41:09 2025 by rpki-client