$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa File: 94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa (raw, json) Hash identifier: M3zZ37yhNwJlWGI+cr6SYt/DoIEe2wNgM2Ou7zpzu0w= Subject key identifier: 69:2D:58:4B:6F:02:C7:60:D6:29:1B:6C:FF:70:46:CA:14:12:25:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1658719B133973C53BE8280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 75.89.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:87:19:b1:33:97:3c:53:be:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=c1c9d3dc-e524-4106-8a49-288c24eb35b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5a:8a:57:d1:91:81:cd:b3:e2:f3:e2:f3:e5: ec:5a:5f:08:03:de:37:75:0d:9d:37:db:01:34:00: 25:c2:f8:bb:33:30:20:bb:86:a1:7a:51:ac:4e:4d: 68:a1:93:d5:96:53:26:cf:5d:b3:dd:f1:5d:12:7e: f9:7b:d1:92:b4:c6:e9:89:d9:0a:14:17:a7:55:5b: 8c:91:bc:6d:d2:ca:aa:e9:e5:ec:76:24:ba:67:17: 3d:32:46:df:55:a7:c5:52:02:49:11:20:a8:83:d3: ce:d0:79:18:db:0a:55:49:20:0c:19:4e:cc:e4:38: 96:ea:95:a1:a2:1a:79:33:d9:59:23:ec:35:bd:6f: 86:03:d6:e6:59:d4:2c:17:fb:ca:84:f0:d1:a5:af: 79:24:d4:56:b2:d0:d1:62:a4:14:17:29:57:09:13: c8:68:1e:77:9f:78:e7:1d:77:e4:70:9d:44:36:dd: f1:4e:cd:62:cf:37:3a:92:5a:fc:ad:6d:fd:30:e7: 9d:45:18:fe:49:97:0a:13:68:76:32:81:42:bc:a8: 57:92:ea:fb:a6:c8:33:ad:d6:08:01:45:b3:47:83: 1b:87:4a:71:e3:f1:cf:34:86:cc:c0:6a:22:5d:e5: b1:0c:b0:22:67:c4:a5:19:16:1a:9f:49:54:a0:0d: f4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2D:58:4B:6F:02:C7:60:D6:29:1B:6C:FF:70:46:CA:14:12:25:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ec:8d:5c:d9:5e:a6:6a:fa:6d:07:67:ab:d3:0e:2b:93:64: 83:a9:74:86:81:aa:c8:fd:f1:7a:b1:5c:48:03:17:a0:f2:c0: 0e:15:10:35:20:f4:89:97:93:b2:f2:d0:d9:f9:56:02:84:be: 68:67:07:ba:65:2d:23:ae:0d:d5:57:51:ef:99:10:14:15:3a: 9e:bf:40:e5:80:0b:74:4b:8f:1c:10:21:63:d0:64:0d:f7:de: 5d:88:a0:2a:b6:d9:e1:80:21:2c:a8:12:d1:f6:8d:92:56:8a: be:16:61:28:a2:dc:34:52:06:67:4f:ab:85:93:89:c5:e9:26: 61:15:a5:58:6d:80:d9:35:88:58:42:89:50:e9:80:86:8d:45: 72:21:de:be:96:3b:83:a3:f2:75:9a:72:7c:62:cb:1d:52:9c: b6:b3:7c:16:e8:8f:f7:88:aa:8e:ec:e1:58:c5:56:18:06:05: 42:11:21:11:0f:fa:1d:9d:61:08:f9:a6:65:81:87:32:8e:25: d6:d4:b8:50:9a:d4:5b:56:81:4a:71:ef:18:85:31:2a:85:d6: 6d:02:c8:77:f9:9a:e4:4c:a3:39:e2:26:34:e4:9b:10:c7:98: 89:b1:0c:ca:91:2c:ad:0c:58:49:bf:ad:e9:e9:84:c7:24:04: 82:a7:47:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYcZsTOXPFO+goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk YzFjOWQzZGMtZTUyNC00MTA2LThhNDktMjg4YzI0ZWIzNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVqKV9GRgc2z4vPi8+XsWl8IA943dQ2dN9sB NAAlwvi7MzAgu4ahelGsTk1ooZPVllMmz12z3fFdEn75e9GStMbpidkKFBenVVuM kbxt0sqq6eXsdiS6Zxc9MkbfVafFUgJJESCog9PO0HkY2wpVSSAMGU7M5DiW6pWh ohp5M9lZI+w1vW+GA9bmWdQsF/vKhPDRpa95JNRWstDRYqQUFylXCRPIaB53n3jn HXfkcJ1ENt3xTs1izzc6klr8rW39MOedRRj+SZcKE2h2MoFCvKhXkur7psgzrdYI AUWzR4Mbh0px4/HPNIbMwGoiXeWxDLAiZ8SlGRYan0lUoA30IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGktWEtvAsdg1ikbbP9wRsoUEiXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTRiZjVhNTItM2MxOS0z YjU3LWEzMTQtZjk0NDlhMGEzYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnsjVzZXqZq+m0HZ6vTDiuTZIOpdIaBqsj98XqxXEgDF6DywA4VEDUg 9ImXk7Ly0Nn5VgKEvmhnB7plLSOuDdVXUe+ZEBQVOp6/QOWAC3RLjxwQIWPQZA33 3l2IoCq22eGAISyoEtH2jZJWir4WYSii3DRSBmdPq4WTicXpJmEVpVhtgNk1iFhC iVDpgIaNRXIh3r6WO4Oj8nWacnxiyx1SnLazfBboj/eIqo7s4VjFVhgGBUIRIREP +h2dYQj5pmWBhzKOJdbUuFCa1FtWgUpx7xiFMSqF1m0CyHf5muRMozniJjTkmxDH mImxDMqRLK0MWEm/renphMckBIKnR9s= -----END CERTIFICATE-----Generated at Sun Jun 15 13:24:05 2025 by rpki-client