$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da535eca-101a-3a88-9eb1-9d2684331996.roa File: da535eca-101a-3a88-9eb1-9d2684331996.roa (raw, json) Hash identifier: gQLsRoK+IQQmp+9SSBHnHH7ymKMtQeWoae5TqVTbecI= Subject key identifier: C9:2F:12:58:E2:6A:46:63:16:55:48:64:00:04:13:40:33:0A:27:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA250FA2D18EAB90325E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da535eca-101a-3a88-9eb1-9d2684331996.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.91.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:25:0f:a2:d1:8e:ab:90:32:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=0fe57f36-4c13-45a1-8612-f27b0312387e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d3:44:b8:20:d4:e3:1b:52:f7:6d:6f:c6:de: e7:8b:44:5e:64:aa:bb:2d:d1:32:97:c3:e5:12:0b: 6a:ac:73:c8:a4:9b:31:f2:de:60:7f:84:0f:12:49: fa:c0:31:16:70:15:4b:5d:6d:cf:09:5a:73:56:b1: e2:54:d6:70:85:a0:8c:90:c2:02:20:a0:f7:a5:ab: db:07:73:64:e8:0f:83:80:18:e7:fb:42:70:c9:4b: 22:20:1d:d6:17:87:96:87:33:a3:e2:e5:af:8d:45: f4:a4:48:52:9a:41:db:6c:23:94:74:31:e5:e6:7e: f9:a5:8b:55:f2:dd:07:8e:0f:01:73:b2:1c:18:67: a7:c4:d5:5d:cd:28:9a:27:06:71:96:db:74:00:07: 65:fe:d8:69:e4:86:52:92:31:e2:17:9a:de:e3:f2: 06:05:8d:06:66:8a:5f:61:2e:9e:b9:d2:2f:53:9f: 5f:6e:88:f7:ab:f2:a1:e0:b2:e0:5e:e8:34:2a:ca: cf:4a:c6:de:37:ef:a4:cf:9b:37:3a:46:3f:f3:f0: 3d:fd:94:ee:21:f5:14:f3:f4:60:41:51:c5:60:b6: c8:1b:05:1e:f5:68:9e:1c:d4:4c:e2:e0:7a:f7:a8: 7c:90:1a:43:52:3b:2a:31:26:12:75:74:83:b9:7a: dd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2F:12:58:E2:6A:46:63:16:55:48:64:00:04:13:40:33:0A:27:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da535eca-101a-3a88-9eb1-9d2684331996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:66:52:7b:6d:ed:de:f3:e6:c1:b3:54:3c:cd:65:b3:b5:87: 80:da:2e:3c:10:f1:39:6a:cd:75:8b:09:7f:06:11:11:6e:d5: 0f:47:ea:2f:c6:7d:e8:5c:8c:da:0b:4b:5e:91:c4:99:08:25: 87:05:d8:13:34:97:46:c3:fd:34:67:7b:34:21:13:0a:44:d6: 30:9e:1f:3a:5a:29:fe:d1:56:8f:af:80:9a:03:04:1a:b2:d2: f7:0e:8b:dd:62:03:b9:c7:f6:d0:3e:df:d5:7a:39:9a:dc:47: 61:75:69:3e:8a:2c:35:e7:1f:ed:b6:11:37:10:01:30:5d:29: 5f:62:ae:72:90:b6:55:10:f4:a0:52:de:30:e9:c5:c9:fb:8b: 30:96:0d:61:53:a5:24:d6:5b:12:0c:1c:28:a7:85:c3:0d:8f: ec:1f:00:2f:8b:25:09:04:f9:82:9e:a8:a6:b3:8c:af:cd:d7: d5:4a:02:7f:47:b6:79:f5:b1:46:87:7a:c5:d0:84:cb:a4:8d: 46:08:a5:31:de:ff:40:38:e7:8f:36:45:dd:39:3e:76:9e:47: 8e:fd:55:8e:5b:4e:40:ab:6c:a7:76:fd:b7:9b:fb:18:a6:d9: d3:84:18:93:5a:d1:56:de:bc:a5:10:d5:8e:b9:8e:5c:29:29: cb:c1:8d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiUPotGOq5AyXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk MGZlNTdmMzYtNGMxMy00NWExLTg2MTItZjI3YjAzMTIzODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitNEuCDU4xtS921vxt7ni0ReZKq7LdEyl8Pl EgtqrHPIpJsx8t5gf4QPEkn6wDEWcBVLXW3PCVpzVrHiVNZwhaCMkMICIKD3pavb B3Nk6A+DgBjn+0JwyUsiIB3WF4eWhzOj4uWvjUX0pEhSmkHbbCOUdDHl5n75pYtV 8t0Hjg8Bc7IcGGenxNVdzSiaJwZxltt0AAdl/thp5IZSkjHiF5re4/IGBY0GZopf YS6eudIvU59fboj3q/Kh4LLgXug0KsrPSsbeN++kz5s3OkY/8/A9/ZTuIfUU8/Rg QVHFYLbIGwUe9WieHNRM4uB696h8kBpDUjsqMSYSdXSDuXrdKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkvEljiakZjFlVIZAAEE0AzCidBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGE1MzVlY2EtMTAxYS0z YTg4LTllYjEtOWQyNjg0MzMxOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1tIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlmUntt7d7z5sGzVDzNZbO1h4DaLjwQ8TlqzXWLCX8GERFu1Q9H6i/G fehcjNoLS16RxJkIJYcF2BM0l0bD/TRnezQhEwpE1jCeHzpaKf7RVo+vgJoDBBqy 0vcOi91iA7nH9tA+39V6OZrcR2F1aT6KLDXnH+22ETcQATBdKV9irnKQtlUQ9KBS 3jDpxcn7izCWDWFTpSTWWxIMHCinhcMNj+wfAC+LJQkE+YKeqKazjK/N19VKAn9H tnn1sUaHesXQhMukjUYIpTHe/0A45482Rd05PnaeR479VY5bTkCrbKd2/beb+xim 2dOEGJNa0VbevKUQ1Y65jlwpKcvBjQw= -----END CERTIFICATE-----Generated at Tue Jun 17 01:24:47 2025 by rpki-client