$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa File: cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa (raw, json) Hash identifier: gtODD75SWefKfkT2G0RoLpxwsLnSMy3pz/CZNcDv3oc= Subject key identifier: 3E:BA:3A:2B:6C:04:A4:53:41:06:59:4A:F3:29:44:03:91:7A:4A:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA23C575539AE2783157F8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.88.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:23:c5:75:53:9a:e2:78:31:57:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=3f686dc0-6302-41d6-8b55-28bd11862c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:6e:de:5f:f5:e8:51:d5:1f:8f:ae:fd:06: 6d:ff:af:f5:89:2f:15:d1:3d:1e:fe:7d:bd:a1:69: 52:5a:91:26:d9:f0:a2:0c:64:5e:7e:a9:20:22:70: 25:d9:a6:d8:05:7b:25:e9:dd:3c:92:54:50:b2:39: 44:6b:5d:bf:d3:94:23:bf:f0:dc:c3:e1:3e:54:eb: 41:4c:8e:30:c5:f8:2f:b7:c1:7c:3e:50:67:ca:73: e3:c8:48:72:5b:89:e6:92:41:43:1f:00:8a:e1:2d: 03:43:e5:57:8f:b6:8e:c6:45:e4:ce:03:78:22:0d: 0b:49:ea:d3:74:46:c5:14:e6:b7:aa:9e:56:f6:18: 84:47:2e:2b:8a:fd:c8:cf:4a:11:08:ff:db:35:c2: a4:a6:cc:9c:b0:d8:b9:dd:b3:f2:16:ed:c6:2b:4c: 2d:c7:54:49:04:7f:36:e1:8c:41:b6:f0:69:2f:1c: 1b:66:49:09:3d:9f:a5:46:53:63:da:26:7c:20:a1: f1:90:ad:66:82:7e:49:9f:3c:cc:9b:d5:8c:97:0b: 1d:18:ea:54:8f:46:28:63:de:6a:9c:1f:72:f7:88: c5:8b:ff:41:00:b6:5a:28:09:78:fb:a0:76:3e:7e: 53:37:35:d0:fe:aa:16:3e:bc:f2:f5:9c:b2:40:fd: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BA:3A:2B:6C:04:A4:53:41:06:59:4A:F3:29:44:03:91:7A:4A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8a:4f:00:ca:fb:e1:77:ec:7d:cd:f4:31:3c:8a:78:25:08: d8:99:91:9c:35:6f:ec:f7:86:bd:6a:c6:ed:d4:3f:6c:0c:8e: 22:b7:25:c4:f5:50:dc:39:d4:22:32:ad:f8:d5:b8:7f:9e:ed: ff:8c:e7:79:52:0d:1a:88:b6:d2:dc:34:ff:01:a1:77:3d:da: 9b:48:19:c9:3c:65:1a:4e:b9:99:87:37:fd:54:0b:4d:f6:a4: 31:32:70:5c:61:28:7a:0c:13:2a:04:44:59:54:f4:aa:3c:2b: 67:23:f2:47:89:09:5b:37:7a:3b:c6:f7:e7:5b:de:0c:a7:68: 6c:81:7d:6a:51:96:c7:67:ca:55:3a:fa:3a:e1:ad:d9:b2:87: f0:6f:f3:dc:63:d8:a0:fe:e9:08:d7:2e:08:c3:d6:ea:10:a4: ac:09:3d:26:84:02:75:bc:c7:6c:82:e2:29:82:c1:e1:b4:8d: 4e:5b:e4:9a:6f:a6:2c:be:a4:1c:65:a1:e4:49:44:06:0c:48: ae:7b:a1:02:79:3c:cb:fc:86:6f:57:0a:b5:96:b9:c9:65:37: 4a:80:36:c1:7f:8c:d3:06:68:9e:b0:59:1f:ec:07:39:7f:4f: 17:8e:2a:ce:93:fd:1a:5d:e4:56:cf:38:f7:10:a7:99:8e:96: 40:9f:34:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiPFdVOa4ngxV/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk M2Y2ODZkYzAtNjMwMi00MWQ2LThiNTUtMjhiZDExODYyYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaxu3l/16FHVH4+u/QZt/6/1iS8V0T0e/n29 oWlSWpEm2fCiDGRefqkgInAl2abYBXsl6d08klRQsjlEa12/05Qjv/Dcw+E+VOtB TI4wxfgvt8F8PlBnynPjyEhyW4nmkkFDHwCK4S0DQ+VXj7aOxkXkzgN4Ig0LSerT dEbFFOa3qp5W9hiERy4riv3Iz0oRCP/bNcKkpsycsNi53bPyFu3GK0wtx1RJBH82 4YxBtvBpLxwbZkkJPZ+lRlNj2iZ8IKHxkK1mgn5JnzzMm9WMlwsdGOpUj0YoY95q nB9y94jFi/9BALZaKAl4+6B2Pn5TNzXQ/qoWPrzy9ZyyQP3ftwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD66OitsBKRTQQZZSvMpRAORekrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Q0NDNiZjYtNDhlNS0z YjFkLTkyYmQtMjAxZWRiNmJlZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1jIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6KTwDK++F37H3N9DE8inglCNiZkZw1b+z3hr1qxu3UP2wMjiK3JcT1 UNw51CIyrfjVuH+e7f+M53lSDRqIttLcNP8BoXc92ptIGck8ZRpOuZmHN/1UC032 pDEycFxhKHoMEyoERFlU9Ko8K2cj8keJCVs3ejvG9+db3gynaGyBfWpRlsdnylU6 +jrhrdmyh/Bv89xj2KD+6QjXLgjD1uoQpKwJPSaEAnW8x2yC4imCweG0jU5b5Jpv piy+pBxloeRJRAYMSK57oQJ5PMv8hm9XCrWWucllN0qANsF/jNMGaJ6wWR/sBzl/ TxeOKs6T/Rpd5FbPOPcQp5mOlkCfNGc= -----END CERTIFICATE-----Generated at Sun Jun 15 12:27:08 2025 by rpki-client