$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa File: cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa (raw, json) Hash identifier: WKX+BfFXg0Ep2QcQZvkslRbUJPZPMmfE8KwELQCZ8BM= Subject key identifier: 4B:E9:67:8C:55:2D:4D:94:E6:EB:40:AE:70:F1:0E:C6:8D:8E:6E:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA6F018FAC0B485B35D028 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa Signing time: Thu 20 Feb 2025 18:15:55 +0000 ROA not before: Thu 20 Feb 2025 18:15:55 +0000 ROA not after: Wed 21 May 2025 17:15:55 +0000 asID: 7029 IP address blocks: 75.88.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:6f:01:8f:ac:0b:48:5b:35:d0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:55 2025 GMT Not After : May 21 17:15:55 2025 GMT Subject: CN=04222a2e-9684-4c74-92cb-89f198bc24eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0c:43:8c:49:cc:9a:77:ab:5e:bd:35:9f:db: d0:d9:6c:56:95:59:d7:11:b6:c6:38:ed:62:1e:c8: 21:ef:23:cb:f4:12:8e:fa:e0:62:c0:ca:a0:32:0f: 42:84:48:91:fe:4a:1f:84:5f:2c:96:51:94:7d:ee: 23:11:45:06:25:e2:5f:37:25:e4:d9:71:85:55:52: 4d:c7:96:87:9a:11:34:2c:18:5a:a2:dc:fe:73:d4: 45:ce:98:d6:bd:96:b2:a6:1b:d6:1c:2c:03:b7:eb: ea:61:fb:7e:07:78:57:11:a8:02:e3:15:ac:d3:93: 05:e7:87:04:51:dc:a6:47:63:88:90:8f:17:9f:01: 5c:7c:70:e6:3f:a4:26:15:31:2d:73:bb:48:fa:8a: 76:1f:95:ab:25:57:c3:03:48:4b:a2:e3:c3:16:60: 15:23:7f:37:42:ac:53:62:b8:72:ae:74:f4:d7:64: ba:47:4f:f9:10:2b:c9:64:a1:3b:c6:46:3a:f0:56: e7:88:71:80:31:59:c0:8d:6f:03:c4:9f:33:99:63: 93:6a:69:76:19:32:cd:c5:e6:11:de:8a:34:e4:74: a8:8a:15:ae:91:5a:5d:5e:ee:9b:a2:b7:dc:e0:b4: 11:fb:ee:ef:56:fc:07:38:55:c9:bd:9e:0d:2e:d2: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E9:67:8C:55:2D:4D:94:E6:EB:40:AE:70:F1:0E:C6:8D:8E:6E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:28:45:9f:72:4f:06:48:1e:c8:11:7b:c7:e4:85:e7:ab:64: 38:24:ae:38:b4:04:08:f5:18:e2:87:f7:46:bf:7e:51:7d:02: df:5c:ba:8f:41:0f:d0:8d:5f:a0:a3:df:b5:17:2b:96:b4:72: 0e:e7:56:80:2e:4f:2e:1b:f1:25:e5:b4:22:b1:46:f9:d6:16: 75:bb:17:7b:2b:3b:67:e3:f2:18:bc:a5:42:24:25:82:72:95: 77:1c:62:ae:16:6f:22:50:76:7c:0d:7b:b6:01:c2:96:f0:bb: 07:0e:a4:80:2a:33:96:8b:78:6d:4c:fe:66:fc:fe:ae:ec:66: 44:b2:9c:b3:1a:00:01:5c:fa:a3:af:7f:92:67:25:52:74:7b: 84:64:10:12:74:54:6b:54:1c:57:0f:2e:0f:a6:3a:6b:ba:74: ad:02:d3:04:52:9b:9c:17:52:58:6d:df:df:de:86:35:75:8c: 25:ae:ef:5d:92:05:86:b3:ea:e3:bd:fc:54:de:47:b3:2a:b8: 9a:07:e1:28:e6:cb:e6:6b:dd:63:01:b8:03:8c:ee:85:fd:99: fc:64:af:34:ca:5f:03:54:10:72:4e:b9:67:e0:ea:33:ba:bc: 02:3f:bc:94:87:a7:36:dc:07:fa:09:43:f7:b1:4c:7b:77:76: 06:96:66:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqm8Bj6wLSFs10CgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTU1NVoXDTI1MDUyMTE3MTU1NVowLzEtMCsGA1UEAxMk MDQyMjJhMmUtOTY4NC00Yzc0LTkyY2ItODlmMTk4YmMyNGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQxDjEnMmnerXr01n9vQ2WxWlVnXEbbGOO1i Hsgh7yPL9BKO+uBiwMqgMg9ChEiR/kofhF8sllGUfe4jEUUGJeJfNyXk2XGFVVJN x5aHmhE0LBhaotz+c9RFzpjWvZayphvWHCwDt+vqYft+B3hXEagC4xWs05MF54cE UdymR2OIkI8XnwFcfHDmP6QmFTEtc7tI+op2H5WrJVfDA0hLouPDFmAVI383QqxT YrhyrnT012S6R0/5ECvJZKE7xkY68FbniHGAMVnAjW8DxJ8zmWOTaml2GTLNxeYR 3oo05HSoihWukVpdXu6borfc4LQR++7vVvwHOFXJvZ4NLtJ5wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvpZ4xVLU2U5utArnDxDsaNjm75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Q0NDNiZjYtNDhlNS0z YjFkLTkyYmQtMjAxZWRiNmJlZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1jIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8oRZ9yTwZIHsgRe8fkheerZDgkrji0BAj1GOKH90a/flF9At9cuo9B D9CNX6Cj37UXK5a0cg7nVoAuTy4b8SXltCKxRvnWFnW7F3srO2fj8hi8pUIkJYJy lXccYq4WbyJQdnwNe7YBwpbwuwcOpIAqM5aLeG1M/mb8/q7sZkSynLMaAAFc+qOv f5JnJVJ0e4RkEBJ0VGtUHFcPLg+mOmu6dK0C0wRSm5wXUlht39/ehjV1jCWu712S BYaz6uO9/FTeR7MquJoH4Sjmy+Zr3WMBuAOM7oX9mfxkrzTKXwNUEHJOuWfg6jO6 vAI/vJSHpzbcB/oJQ/exTHt3dgaWZs4= -----END CERTIFICATE-----Generated at Sun Apr 27 01:12:52 2025 by rpki-client