$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9987c34b-333f-3231-a413-7e5ed7d57c6b.roa File: 9987c34b-333f-3231-a413-7e5ed7d57c6b.roa (raw, json) Hash identifier: 3MEKjC+C/KGOpnr5ihwJ/Agzi76OdGk4pdo1lP8GqlQ= Subject key identifier: 5A:9E:51:61:75:E2:51:A8:02:E6:CF:29:0B:F4:73:30:B6:E1:DF:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA9116078B4B3376E7D5C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9987c34b-333f-3231-a413-7e5ed7d57c6b.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 75.90.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:91:16:07:8b:4b:33:76:e7:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=143bbab3-316c-4747-85d7-22c743af1641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0d:14:9c:c1:45:f2:d2:ef:43:a3:1d:d3:cd: 7d:11:5d:36:db:ae:38:68:82:a1:01:f2:4f:81:f1: 03:85:00:c8:c1:3a:34:bf:01:eb:9a:c3:18:4b:11: b7:9e:17:04:84:7d:9a:0e:01:5f:9b:81:6e:00:b9: d0:0c:02:7b:0f:b7:11:25:dd:3e:a1:6b:2c:6f:64: bd:e7:35:5a:9a:b2:16:d5:74:ba:17:0b:f6:50:96: 4e:1c:82:23:7d:3c:ba:4a:32:f7:59:ce:fa:f4:2b: a0:60:74:5e:03:07:e9:a4:71:df:b1:45:af:56:c9: 09:b8:c5:d8:59:f8:36:24:5b:7b:7e:1d:96:3e:21: 1c:0a:85:ab:97:19:8c:4d:ec:9b:52:d1:97:bd:e0: d3:4e:5e:9c:34:fd:60:9e:82:96:6e:92:f2:0c:67: 67:7d:58:fb:11:ec:77:67:39:c6:ce:5e:d6:d5:6c: b3:33:94:bc:89:f3:a6:c4:62:42:4e:12:b9:8e:d9: 75:35:c1:ef:55:43:3f:59:a7:a5:ed:ca:a5:5a:fa: cf:da:48:34:4e:ec:55:0f:84:c4:44:f1:48:9a:67: df:4a:61:d5:f3:13:96:29:e0:17:70:80:93:63:d6: 70:fb:6a:94:b2:0a:9e:d9:90:de:43:04:40:3b:34: 7c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9E:51:61:75:E2:51:A8:02:E6:CF:29:0B:F4:73:30:B6:E1:DF:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9987c34b-333f-3231-a413-7e5ed7d57c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:22:9c:2f:f1:95:df:00:cc:cb:a9:aa:3f:61:5c:49:49:f1: e1:9c:36:81:4c:98:0c:0d:f7:f5:6c:0e:0c:40:88:91:8e:5d: e1:2e:7b:49:5c:8e:a6:51:d9:8a:27:a3:0a:04:4e:9d:48:a0: 27:5a:99:96:d9:8b:4e:86:77:bc:3f:48:fc:08:a1:d8:03:d0: fd:09:f6:31:0f:36:08:de:6a:a0:f0:f6:4b:2a:86:2f:20:b1: 63:18:12:f9:39:ef:48:99:96:c3:d0:38:cb:96:e1:8a:d7:f6: b1:39:e4:48:0b:2b:78:dc:ef:f2:d3:b8:eb:f1:0f:70:b1:42: 4f:21:68:a5:8e:cf:bc:ff:9a:4c:1c:14:24:24:76:5f:99:9e: 46:bc:fc:3a:13:61:9b:0f:bf:f1:36:fb:5d:60:9b:10:7b:e9: 5d:40:85:f3:a8:d1:10:7e:da:e5:74:69:1d:69:54:69:46:ba: c0:54:98:0b:d5:09:c8:cb:de:58:94:f4:69:97:cb:c8:33:c8: b9:20:82:e6:18:6c:cd:b4:b3:0e:8b:87:1b:64:7f:92:9e:53: a5:eb:fd:68:34:7d:8e:be:2a:8d:7a:ec:ba:64:d1:75:d1:5b: 1e:80:e3:6e:d8:85:6b:1c:c7:22:c5:c2:4a:6f:17:0d:c1:17: 0b:6d:11:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpEWB4tLM3bn1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MTQzYmJhYjMtMzE2Yy00NzQ3LTg1ZDctMjJjNzQzYWYxNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw0UnMFF8tLvQ6Md0819EV022644aIKhAfJP gfEDhQDIwTo0vwHrmsMYSxG3nhcEhH2aDgFfm4FuALnQDAJ7D7cRJd0+oWssb2S9 5zVamrIW1XS6Fwv2UJZOHIIjfTy6SjL3Wc769CugYHReAwfppHHfsUWvVskJuMXY Wfg2JFt7fh2WPiEcCoWrlxmMTeybUtGXveDTTl6cNP1gnoKWbpLyDGdnfVj7Eex3 ZznGzl7W1WyzM5S8ifOmxGJCThK5jtl1NcHvVUM/Wael7cqlWvrP2kg0TuxVD4TE RPFImmffSmHV8xOWKeAXcICTY9Zw+2qUsgqe2ZDeQwRAOzR8HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqeUWF14lGoAubPKQv0czC24d9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTk4N2MzNGItMzMzZi0z MjMxLWE0MTMtN2U1ZWQ3ZDU3YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1rAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0inC/xld8AzMupqj9hXElJ8eGcNoFMmAwN9/VsDgxAiJGOXeEue0lc jqZR2YonowoETp1IoCdamZbZi06Gd7w/SPwIodgD0P0J9jEPNgjeaqDw9ksqhi8g sWMYEvk570iZlsPQOMuW4YrX9rE55EgLK3jc7/LTuOvxD3CxQk8haKWOz7z/mkwc FCQkdl+Znka8/DoTYZsPv/E2+11gmxB76V1AhfOo0RB+2uV0aR1pVGlGusBUmAvV CcjL3liU9GmXy8gzyLkgguYYbM20sw6Lhxtkf5KeU6Xr/Wg0fY6+Ko167Lpk0XXR Wx6A427YhWscxyLFwkpvFw3BFwttEU0= -----END CERTIFICATE-----Generated at Sun Jun 15 12:56:28 2025 by rpki-client