$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cabfcde0-2b08-32b4-b2d0-fbdb4d4ad8bd.roa File: cabfcde0-2b08-32b4-b2d0-fbdb4d4ad8bd.roa (raw, json) Hash identifier: qYOtFbro9o1jR+3NzoBjAuipQ7JUNXTfvEfaXzGm9R0= Subject key identifier: CE:DB:3C:92:69:62:D2:C1:1D:CF:3D:56:F9:EB:E7:82:78:41:B1:9E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA22CEDA41304C97235300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cabfcde0-2b08-32b4-b2d0-fbdb4d4ad8bd.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.88.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:22:ce:da:41:30:4c:97:23:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=820f08df-0f89-485f-bec3-c32bed5e8852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ff:c9:0f:0a:dd:d3:e0:76:03:45:a4:71:88: dc:21:db:c3:00:1c:49:75:ec:84:3c:e2:4f:5b:2a: 94:38:a7:96:e5:e9:5d:31:29:c4:6e:34:5e:90:6c: d4:09:65:34:64:ff:cd:c4:e7:03:29:19:98:3b:b9: 24:15:80:a8:eb:5f:7f:c6:c8:e1:0e:22:fa:cd:00: 1e:4b:98:83:7e:f3:5f:bb:84:69:3a:f8:b9:5d:7a: 13:5c:45:18:96:f4:1f:f8:ce:63:b7:8a:1d:f3:a4: 66:10:8c:21:50:1a:6a:28:1a:fc:4a:ad:8b:48:dc: ac:40:f0:4b:5c:b9:1b:ec:eb:38:de:6c:9b:a6:71: c2:e9:05:91:f9:68:e0:14:0f:a5:69:00:c3:ec:96: a8:ed:28:cf:ed:79:8c:04:f7:5b:d8:8f:59:03:d1: af:a3:77:c5:03:73:bb:13:5f:eb:b3:8f:dc:47:b7: db:10:3a:d4:86:82:b0:24:b2:09:31:2b:e2:51:59: 9e:5f:2c:9b:4b:26:2b:e0:bf:ae:3a:94:f6:9c:54: c3:a0:db:13:bf:49:78:80:4a:c2:ca:32:17:cb:ee: 48:e5:df:3f:49:1d:2e:a3:d1:3e:60:24:d6:39:2d: cc:59:ea:f1:5e:a2:fd:a9:f5:48:3f:70:18:20:4d: 0b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DB:3C:92:69:62:D2:C1:1D:CF:3D:56:F9:EB:E7:82:78:41:B1:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cabfcde0-2b08-32b4-b2d0-fbdb4d4ad8bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:80:f2:34:7d:e1:42:00:1b:9f:ed:2a:44:11:7b:f0:fe:35: 30:00:d2:f1:f3:b8:7f:d0:88:57:5a:d0:d7:fa:f7:b6:7b:2f: 81:17:5f:3f:ca:f9:db:1f:3f:bd:29:82:d1:29:15:7f:2d:37: 5a:8d:8a:52:3f:bb:dd:ae:81:f9:d2:e9:80:6b:5b:fd:27:3d: a0:8e:6b:b7:4e:d7:50:eb:38:1c:c3:37:94:6c:6e:72:57:f6: 2b:68:41:cf:ac:8e:13:b4:88:33:13:3f:73:c9:97:6b:a0:1f: 1d:69:40:ff:d6:1e:b7:2a:9b:d2:51:a0:2d:a0:12:98:77:24: 36:e8:08:08:33:1f:ad:fd:4e:e8:30:9b:8e:b1:0d:02:13:9e: c8:63:88:11:2b:71:20:29:64:f5:c2:48:ae:b8:70:12:39:02: 6c:b3:7f:8e:21:93:22:b6:2c:8d:e2:1d:d6:c7:28:55:d7:0c: b8:b7:87:e1:a9:9a:e4:c3:f8:61:1c:68:37:b0:c5:12:61:3b: 02:45:87:ea:d0:b1:4e:55:75:96:24:4b:b4:3b:ce:6c:2d:48: c6:ca:9e:0b:b3:47:af:89:9c:63:19:ee:5a:b4:aa:52:d6:1c: 25:f9:ed:9d:a7:b2:90:9e:c3:7b:37:b0:01:3e:75:b8:fd:54: 95:07:a1:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiLO2kEwTJcjUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk ODIwZjA4ZGYtMGY4OS00ODVmLWJlYzMtYzMyYmVkNWU4ODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi//JDwrd0+B2A0WkcYjcIdvDABxJdeyEPOJP WyqUOKeW5eldMSnEbjRekGzUCWU0ZP/NxOcDKRmYO7kkFYCo619/xsjhDiL6zQAe S5iDfvNfu4RpOvi5XXoTXEUYlvQf+M5jt4od86RmEIwhUBpqKBr8Sq2LSNysQPBL XLkb7Os43mybpnHC6QWR+WjgFA+laQDD7Jao7SjP7XmMBPdb2I9ZA9Gvo3fFA3O7 E1/rs4/cR7fbEDrUhoKwJLIJMSviUVmeXyybSyYr4L+uOpT2nFTDoNsTv0l4gErC yjIXy+5I5d8/SR0uo9E+YCTWOS3MWerxXqL9qfVIP3AYIE0LYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7bPJJpYtLBHc89Vvnr54J4QbGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2FiZmNkZTAtMmIwOC0z MmI0LWIyZDAtZmJkYjRkNGFkOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1jEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyA8jR94UIAG5/tKkQRe/D+NTAA0vHzuH/QiFda0Nf697Z7L4EXXz/K +dsfP70pgtEpFX8tN1qNilI/u92ugfnS6YBrW/0nPaCOa7dO11DrOBzDN5RsbnJX 9itoQc+sjhO0iDMTP3PJl2ugHx1pQP/WHrcqm9JRoC2gEph3JDboCAgzH639Tugw m46xDQITnshjiBErcSApZPXCSK64cBI5Amyzf44hkyK2LI3iHdbHKFXXDLi3h+Gp muTD+GEcaDewxRJhOwJFh+rQsU5VdZYkS7Q7zmwtSMbKnguzR6+JnGMZ7lq0qlLW HCX57Z2nspCew3s3sAE+dbj9VJUHofE= -----END CERTIFICATE-----Generated at Sun Jun 15 11:46:06 2025 by rpki-client