$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f6f0fd5-3470-38ed-8466-89ca12ca1737.roa File: 5f6f0fd5-3470-38ed-8466-89ca12ca1737.roa (raw, json) Hash identifier: t1tx4JoHZ1mmc7s6+tQtNu5PGLIZsLhjm2yitbPrEII= Subject key identifier: 5A:9D:1F:54:D6:A6:6A:21:87:6F:6C:71:67:C0:02:62:B4:F8:35:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA241B2681F91666704E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f6f0fd5-3470-38ed-8466-89ca12ca1737.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.90.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:24:1b:26:81:f9:16:66:70:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=13523bb6-6791-421b-9031-8bfeb082a864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6e:14:65:a7:3e:cf:9e:05:64:66:c4:a9:73: d9:0c:38:02:19:2c:23:f6:dc:5b:2d:b9:3d:5e:af: e6:68:44:40:81:b3:c1:d1:12:57:c0:63:d4:77:93: 12:d8:ae:c6:88:c8:60:3d:14:36:51:46:1e:df:1b: 3b:9d:25:61:9b:0f:7e:9e:90:34:69:22:5b:a9:71: 36:2a:53:2a:da:c1:4e:d7:01:86:51:c0:a0:2f:da: 71:ba:51:2a:30:88:f8:f1:1d:54:04:02:e4:0c:b6: b5:e8:d5:ee:bc:57:8c:e4:4e:51:cb:30:fd:ae:6b: 18:39:37:20:21:45:59:3c:b2:bf:5a:4c:0c:2e:e2: e0:ab:73:ad:94:df:cb:06:71:e9:b5:4b:e4:de:7c: 45:1b:9c:8d:d3:0e:3b:db:97:a5:93:11:0b:1f:28: 18:06:85:39:a6:11:d1:ce:cb:40:b7:26:15:44:10: 24:e1:f7:d5:7d:34:dc:36:b2:b1:8b:a3:78:5d:f7: 62:3c:61:ac:c9:ac:d1:b6:dc:a7:db:e3:64:d4:07: 32:7d:71:52:16:fc:90:3a:3f:60:d7:91:3c:8c:6d: c2:9c:cb:ed:45:29:4c:32:a5:55:b0:ef:24:4e:fe: 4a:40:b6:c8:a6:1a:fe:23:4c:9e:2f:09:fa:9f:da: 8a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9D:1F:54:D6:A6:6A:21:87:6F:6C:71:67:C0:02:62:B4:F8:35:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f6f0fd5-3470-38ed-8466-89ca12ca1737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f4:42:d6:19:37:05:66:86:4e:9e:ef:97:21:a2:36:c0:39: b6:9f:1e:eb:8d:6b:c0:ab:70:e0:d2:c0:65:8e:15:ca:ad:08: 3f:b6:c7:ff:80:61:e4:44:75:1e:ff:92:57:61:22:5a:42:9d: 2d:8d:9c:61:4e:70:6a:8c:34:f5:2d:e5:1b:07:88:5a:4c:48: 9c:98:0e:f4:27:ee:3a:68:f2:82:43:75:50:8f:a7:6e:5c:c7: c3:67:da:4e:e0:4b:32:40:66:bb:8b:2b:34:fd:39:9c:37:2e: ab:19:c9:9d:4f:2b:e1:53:a7:61:4e:df:40:12:62:4d:48:54: a2:a5:32:78:7f:88:11:d0:e9:dd:36:a3:55:76:95:7b:f5:14: 28:cc:d9:cf:26:75:84:84:92:46:4f:94:80:1a:0f:41:2c:8d: 48:c2:4c:77:83:e7:41:0a:b9:80:83:92:94:52:7c:3f:c2:8c: 41:5b:f6:e9:1c:bb:a2:ab:86:28:d8:82:d2:7b:53:d3:52:cc: 1d:dc:68:ac:95:ff:a2:6d:6d:cc:a9:dc:69:fa:49:40:05:26: 6b:f3:43:9c:2e:9b:df:06:dd:16:1b:cc:ae:3b:0e:b1:de:18: 18:1f:2d:3e:cf:50:1e:1d:38:08:f1:8c:cd:e4:f7:bd:ba:a7: 25:fa:8a:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiQbJoH5FmZwToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk MTM1MjNiYjYtNjc5MS00MjFiLTkwMzEtOGJmZWIwODJhODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm4UZac+z54FZGbEqXPZDDgCGSwj9txbLbk9 Xq/maERAgbPB0RJXwGPUd5MS2K7GiMhgPRQ2UUYe3xs7nSVhmw9+npA0aSJbqXE2 KlMq2sFO1wGGUcCgL9pxulEqMIj48R1UBALkDLa16NXuvFeM5E5RyzD9rmsYOTcg IUVZPLK/WkwMLuLgq3OtlN/LBnHptUvk3nxFG5yN0w4725elkxELHygYBoU5phHR zstAtyYVRBAk4ffVfTTcNrKxi6N4XfdiPGGsyazRttyn2+Nk1AcyfXFSFvyQOj9g 15E8jG3CnMvtRSlMMqVVsO8kTv5KQLbIphr+I0yeLwn6n9qKrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqdH1TWpmohh29scWfAAmK0+DUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWY2ZjBmZDUtMzQ3MC0z OGVkLTg0NjYtODljYTEyY2ExNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/0QtYZNwVmhk6e75chojbAObafHuuNa8CrcODSwGWOFcqtCD+2x/+A YeREdR7/kldhIlpCnS2NnGFOcGqMNPUt5RsHiFpMSJyYDvQn7jpo8oJDdVCPp25c x8Nn2k7gSzJAZruLKzT9OZw3LqsZyZ1PK+FTp2FO30ASYk1IVKKlMnh/iBHQ6d02 o1V2lXv1FCjM2c8mdYSEkkZPlIAaD0EsjUjCTHeD50EKuYCDkpRSfD/CjEFb9ukc u6KrhijYgtJ7U9NSzB3caKyV/6Jtbcyp3Gn6SUAFJmvzQ5wum98G3RYbzK47DrHe GBgfLT7PUB4dOAjxjM3k9726pyX6ikk= -----END CERTIFICATE-----Generated at Mon Jun 16 21:58:59 2025 by rpki-client