$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0e03c45-18a5-306a-8358-92809edb25d1.roa File: c0e03c45-18a5-306a-8358-92809edb25d1.roa (raw, json) Hash identifier: K2HPpacXB3jwhId12LiLSIfJxizWzfo94GqGxlLMkkM= Subject key identifier: 59:70:8C:6E:47:1B:F3:2F:8E:83:07:D2:A6:AC:77:1E:E6:35:E9:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848E006861D9E15A6A4C004A500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0e03c45-18a5-306a-8358-92809edb25d1.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.88.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:86:1d:9e:15:a6:a4:c0:04:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=65a8f3e3-54f3-43ba-8b89-aa5dad8ab6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:fe:e6:80:18:d2:ae:84:30:ae:1f:eb:d7: 60:c4:be:e4:60:04:1b:45:d6:e1:dd:70:c5:f8:bb: f2:da:fc:13:a6:33:9f:e2:bf:17:ea:52:55:c1:a2: 6b:9c:b3:11:a1:43:5c:08:85:df:3d:68:95:46:dc: a0:7e:5a:b8:0e:01:a3:7f:07:8b:95:ad:28:89:ac: c0:f5:e3:9c:ff:cd:13:d6:5f:56:6c:ba:67:0d:c3: 8f:7d:0f:d3:40:dc:6b:09:61:f6:df:9d:a4:a2:93: 0a:74:ab:a6:bd:6b:dc:7f:ae:83:b2:0e:dd:4d:7a: 78:12:83:00:87:3c:58:b8:5a:f6:74:d2:3e:fa:fa: a4:fc:43:14:da:41:00:da:3f:53:ce:7f:44:ba:24: b7:7b:6c:aa:4d:a1:ab:00:d3:a6:68:c3:36:ab:56: c8:a5:1e:fb:c0:e2:2a:98:20:f8:6b:29:70:d2:a4: d9:3b:85:6e:fa:e0:09:f6:d9:f9:a5:8b:a0:3e:7e: 8f:6c:c1:82:c8:12:e9:84:cb:6f:f3:88:17:be:d6: 95:eb:66:cf:d3:34:d0:19:1c:da:e2:26:96:7b:06: ee:f7:ce:f9:0d:1e:51:20:21:da:1d:6a:c1:74:75: 58:78:16:fa:07:2a:9f:a5:6c:28:00:d6:d4:fb:cb: d7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:70:8C:6E:47:1B:F3:2F:8E:83:07:D2:A6:AC:77:1E:E6:35:E9:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c0e03c45-18a5-306a-8358-92809edb25d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a6:bd:30:20:77:75:84:ac:23:04:99:fd:64:cc:e6:71:36: aa:a8:df:e5:06:0f:23:da:08:34:8c:b8:ba:7d:41:22:f8:e5: 84:e3:64:e3:33:6b:d8:e9:87:a6:a2:f5:3f:b7:8d:32:b7:16: 78:55:69:d3:50:e5:78:d3:24:d4:d9:48:87:de:bd:3d:ac:b7: e9:f3:6f:7d:b1:85:a9:0a:a6:e4:dd:8a:8a:2c:58:41:e0:d1: 19:dc:6c:d1:ff:a1:97:84:39:80:8e:4b:14:b8:f9:cb:4f:15: 7d:5a:74:68:87:09:59:ad:94:8c:7a:6c:2b:ee:9a:20:f0:b9: e4:be:24:2a:3b:20:4c:c4:bb:81:e4:4a:f1:60:ff:67:d6:45: db:2e:c2:34:d5:bb:3e:4e:55:a3:2a:c2:d5:2b:93:0f:1a:84: 3b:14:c0:ae:43:f2:37:20:89:69:62:e7:9b:a2:10:57:0b:7c: ab:5d:db:f3:9c:80:8d:2c:a2:f7:ea:0c:e9:95:29:bf:98:2a: b9:43:03:6f:3a:5b:f3:dc:2a:d6:31:f7:8f:d5:5e:7f:8e:7e: 3c:03:aa:88:53:d8:9d:a1:ca:16:59:00:7a:28:a0:db:43:e3: 42:12:38:20:5a:68:5e:a1:e8:27:92:be:a1:35:96:2f:7b:be: 85:eb:e8:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBoYdnhWmpMAEpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NjVhOGYzZTMtNTRmMy00M2JhLThiODktYWE1ZGFkOGFiNmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHP+5oAY0q6EMK4f69dgxL7kYAQbRdbh3XDF +Lvy2vwTpjOf4r8X6lJVwaJrnLMRoUNcCIXfPWiVRtygflq4DgGjfweLla0oiazA 9eOc/80T1l9WbLpnDcOPfQ/TQNxrCWH2352kopMKdKumvWvcf66Dsg7dTXp4EoMA hzxYuFr2dNI++vqk/EMU2kEA2j9Tzn9EuiS3e2yqTaGrANOmaMM2q1bIpR77wOIq mCD4aylw0qTZO4Vu+uAJ9tn5pYugPn6PbMGCyBLphMtv84gXvtaV62bP0zTQGRza 4iaWewbu9875DR5RICHaHWrBdHVYeBb6ByqfpWwoANbU+8vXPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlwjG5HG/MvjoMH0qasdx7mNeldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzBlMDNjNDUtMThhNS0z MDZhLTgzNTgtOTI4MDllZGIyNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGimvTAgd3WErCMEmf1kzOZxNqqo3+UGDyPaCDSMuLp9QSL45YTjZOMz a9jph6ai9T+3jTK3FnhVadNQ5XjTJNTZSIfevT2st+nzb32xhakKpuTdioosWEHg 0RncbNH/oZeEOYCOSxS4+ctPFX1adGiHCVmtlIx6bCvumiDwueS+JCo7IEzEu4Hk SvFg/2fWRdsuwjTVuz5OVaMqwtUrkw8ahDsUwK5D8jcgiWli55uiEFcLfKtd2/Oc gI0sovfqDOmVKb+YKrlDA286W/PcKtYx94/VXn+OfjwDqohT2J2hyhZZAHoooNtD 40ISOCBaaF6h6CeSvqE1li97voXr6Og= -----END CERTIFICATE-----Generated at Sun Apr 27 03:49:49 2025 by rpki-client