$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db864009-5792-3ef2-ae28-c97e5430da9a.roa File: db864009-5792-3ef2-ae28-c97e5430da9a.roa (raw, json) Hash identifier: 8jrYZ275PReV15YrzJpsWeAxHGicnbZa5Sx3wNiMPjM= Subject key identifier: 28:56:34:AA:4D:C1:31:F6:E9:51:25:01:ED:5B:11:F9:C3:2B:D4:6B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1658732155D21DCAB9C4000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db864009-5792-3ef2-ae28-c97e5430da9a.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 75.91.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:87:32:15:5d:21:dc:ab:9c:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=4d71032e-9908-4577-8266-431d156dc961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:dd:00:ad:a0:d3:84:87:41:da:b1:b7:5c: 09:e3:57:b3:60:11:9e:1e:cb:fb:1b:53:3e:cb:cf: 12:7d:e0:63:9d:e4:0e:d5:88:b4:ce:55:24:58:43: c3:a9:9e:e7:50:da:4c:63:63:71:f3:14:60:97:7b: ab:bf:ba:91:dd:55:6e:37:0e:6f:4f:5d:8e:a2:0b: db:47:1f:d3:a7:d9:45:a0:fe:12:9a:68:56:40:bf: ae:74:5e:1e:e2:48:d6:6a:28:b0:03:b3:d1:5b:1d: ff:e5:69:14:ea:b7:af:fc:84:72:09:e3:f3:9b:01: ff:94:4a:a3:3b:56:d3:09:a9:6e:4c:f4:02:ce:dd: 27:f7:c9:a5:13:ac:f3:9f:23:6e:32:ff:48:5e:30: 2b:2d:79:2b:81:4d:d9:e5:2f:a4:eb:ac:a5:95:59: c4:70:6c:fe:ca:30:8e:5f:7d:92:b0:89:4c:85:ef: 88:43:dd:a7:e5:2e:18:9a:31:be:9d:ae:e6:f8:bb: 3a:ba:52:3e:a2:c8:c3:ad:6d:2f:bd:d5:ad:11:49: 35:ec:65:a0:cb:1d:83:15:7c:25:51:d0:c6:54:23: 6a:09:c7:9f:3d:0b:36:79:3c:09:20:68:09:bd:bb: f3:a6:b2:b2:e8:df:a3:2c:19:19:b4:6f:b7:a2:71: 68:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:56:34:AA:4D:C1:31:F6:E9:51:25:01:ED:5B:11:F9:C3:2B:D4:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db864009-5792-3ef2-ae28-c97e5430da9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6e:34:de:5e:3a:f8:b0:72:1f:0c:4f:f7:e7:bf:28:30:e5: aa:73:09:a3:fe:2f:65:cf:b2:fd:78:71:b9:52:ce:97:a2:83: 7a:e5:a2:0e:81:f5:e6:09:ce:58:7f:c7:01:d4:3f:51:95:41: 67:3e:a6:5b:c1:5a:38:19:1a:07:46:0a:56:25:ec:39:07:46: 76:45:f7:30:59:f0:2b:94:cc:24:e2:87:b2:26:f4:12:63:46: 7d:bd:19:43:13:02:19:eb:7b:d5:ea:5c:65:5a:86:48:8c:53: da:39:d9:a6:8e:3f:23:7f:f9:9a:2f:44:03:c5:bc:e0:c2:81: 28:00:82:ee:84:5f:b9:a4:79:b2:2d:4e:e6:93:cb:4f:68:f5: a4:05:ef:45:c1:3e:bb:a2:ed:47:bf:76:37:2e:eb:1b:35:b4: a6:ad:e0:74:b6:f0:7f:b6:ae:3b:0c:ad:e4:10:7b:fc:7d:6c: 8e:9b:1e:12:b9:94:51:19:35:b5:b3:dd:72:31:f3:3f:b1:5d: 94:36:3f:b6:2b:0b:5e:98:9a:75:2b:87:24:ea:33:53:57:44: 43:03:7f:a7:6d:74:f4:a4:0f:ca:e4:12:fa:71:17:d8:69:6f: ca:f0:d2:86:82:d2:70:25:73:88:52:ed:df:15:29:00:71:20: 7c:b4:fb:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYcyFV0h3KucQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NGQ3MTAzMmUtOTkwOC00NTc3LTgyNjYtNDMxZDE1NmRjOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/TdAK2g04SHQdqxt1wJ41ezYBGeHsv7G1M+ y88SfeBjneQO1Yi0zlUkWEPDqZ7nUNpMY2Nx8xRgl3urv7qR3VVuNw5vT12Oogvb Rx/Tp9lFoP4SmmhWQL+udF4e4kjWaiiwA7PRWx3/5WkU6rev/IRyCePzmwH/lEqj O1bTCaluTPQCzt0n98mlE6zznyNuMv9IXjArLXkrgU3Z5S+k66yllVnEcGz+yjCO X32SsIlMhe+IQ92n5S4YmjG+na7m+Ls6ulI+osjDrW0vvdWtEUk17GWgyx2DFXwl UdDGVCNqCcefPQs2eTwJIGgJvbvzprKy6N+jLBkZtG+3onFo7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChWNKpNwTH26VElAe1bEfnDK9RrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGI4NjQwMDktNTc5Mi0z ZWYyLWFlMjgtYzk3ZTU0MzBkYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1uwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBuNN5eOviwch8MT/fnvygw5apzCaP+L2XPsv14cblSzpeig3rlog6B 9eYJzlh/xwHUP1GVQWc+plvBWjgZGgdGClYl7DkHRnZF9zBZ8CuUzCTih7Im9BJj Rn29GUMTAhnre9XqXGVahkiMU9o52aaOPyN/+ZovRAPFvODCgSgAgu6EX7mkebIt TuaTy09o9aQF70XBPrui7Ue/djcu6xs1tKat4HS28H+2rjsMreQQe/x9bI6bHhK5 lFEZNbWz3XIx8z+xXZQ2P7YrC16YmnUrhyTqM1NXREMDf6dtdPSkD8rkEvpxF9hp b8rw0oaC0nAlc4hS7d8VKQBxIHy0+zY= -----END CERTIFICATE-----Generated at Sun Jun 15 20:41:54 2025 by rpki-client