$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6ad3934-5def-36fa-b599-9684664b4032.roa File: e6ad3934-5def-36fa-b599-9684664b4032.roa (raw, json) Hash identifier: srGyBpCgUZLxdZPi1COxEtSkltALZWb/dwkh8pSqxE0= Subject key identifier: 01:D1:C0:2B:B3:09:A2:2B:B0:BB:6A:DC:F1:F3:15:D1:AE:15:15:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA10E3E7B618382096D300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6ad3934-5def-36fa-b599-9684664b4032.roa Signing time: Thu 20 Feb 2025 18:15:10 +0000 ROA not before: Thu 20 Feb 2025 18:15:10 +0000 ROA not after: Wed 21 May 2025 17:15:10 +0000 asID: 7029 IP address blocks: 75.91.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:10:e3:e7:b6:18:38:20:96:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:10 2025 GMT Not After : May 21 17:15:10 2025 GMT Subject: CN=1d87835c-e0e6-4a43-be66-5b33395e69f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:a8:0a:67:07:e6:18:7a:36:9b:c5:b9:5e: 22:b1:45:ac:1d:fd:f2:93:ad:5c:6a:36:c0:a2:19: 19:28:9d:84:2c:98:b4:48:53:36:1d:46:51:6f:be: 2e:e5:eb:d7:0c:72:8d:cc:28:4a:af:4f:82:0e:ec: 07:be:38:79:c5:87:35:28:0f:e1:c2:a8:c1:a4:af: bd:58:97:cf:c9:be:19:97:9b:49:2a:7f:cb:80:7d: f3:a8:35:0c:19:36:bf:3c:07:8f:e0:82:da:53:b5: 1b:ef:fa:9d:44:af:bd:8b:bf:b9:2c:5f:a8:f3:ef: 8b:93:cf:58:ba:93:20:3e:b8:d5:5d:8a:10:02:90: c1:5b:7a:45:3a:f3:c3:e6:ca:28:94:70:28:87:1c: fd:94:99:27:f5:ed:f8:7e:a1:8c:fd:a7:bb:e4:99: eb:00:77:78:bd:c7:1d:b3:6c:68:57:76:71:4c:28: af:59:ac:46:f2:22:c1:05:9a:ac:fb:73:df:51:38: f0:7a:c6:76:c0:53:b3:51:b0:cb:b1:61:dd:0a:48: 9f:85:df:9d:13:b1:80:27:d5:a8:74:09:a3:72:56: b7:6e:4b:32:04:b7:fa:d0:0f:7a:fe:ba:be:cb:f4: 38:d4:5d:17:05:86:f8:a5:fc:e7:e8:34:40:a0:5b: a4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D1:C0:2B:B3:09:A2:2B:B0:BB:6A:DC:F1:F3:15:D1:AE:15:15:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6ad3934-5def-36fa-b599-9684664b4032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:33:e9:98:ab:e6:fd:44:a9:60:6b:fb:74:3b:82:4f:16:a4: 97:16:79:90:e3:67:02:a6:09:ad:02:44:98:da:d6:91:c5:d1: 38:c4:15:de:61:dd:81:50:d5:bc:44:28:cf:2c:fe:09:e5:a0: 42:97:d4:2c:67:64:37:e7:84:c6:49:7b:4c:12:c6:b7:83:b8: 0e:e1:67:12:f9:03:0d:08:77:7c:c2:9f:42:fd:72:86:3f:c8: b3:07:67:66:90:4d:1c:2b:18:39:7f:91:01:5d:69:a3:fa:27: 88:31:e3:3d:2a:e7:3e:4b:19:b2:4c:df:91:d2:d4:2f:44:ea: f9:5b:36:2c:ef:a4:cb:83:95:6d:5f:07:e2:e0:01:8f:d0:51: 39:80:d6:de:8a:eb:86:27:ba:54:99:ad:43:db:63:1d:11:31: 1c:c1:ad:44:b9:ab:a6:0f:d9:8d:a0:35:14:17:af:32:d2:ef: a9:16:e9:36:19:00:2c:99:64:d0:74:ef:14:71:5f:c4:d1:ce: 6d:40:2a:9f:bc:23:1c:3a:17:34:a1:de:27:ea:ec:a4:40:d4: 9d:97:a9:74:1f:e4:4a:52:2c:da:c3:23:1e:6e:39:2d:6a:b8: d3:53:2e:fb:a0:87:0f:1a:af:fb:c8:3a:b7:04:11:7e:d3:2d: 0b:c2:02:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqhDj57YYOCCW0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTUxMFoXDTI1MDUyMTE3MTUxMFowLzEtMCsGA1UEAxMk MWQ4NzgzNWMtZTBlNi00YTQzLWJlNjYtNWIzMzM5NWU2OWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJCoCmcH5hh6NpvFuV4isUWsHf3yk61cajbA ohkZKJ2ELJi0SFM2HUZRb74u5evXDHKNzChKr0+CDuwHvjh5xYc1KA/hwqjBpK+9 WJfPyb4Zl5tJKn/LgH3zqDUMGTa/PAeP4ILaU7Ub7/qdRK+9i7+5LF+o8++Lk89Y upMgPrjVXYoQApDBW3pFOvPD5soolHAohxz9lJkn9e34fqGM/ae75JnrAHd4vccd s2xoV3ZxTCivWaxG8iLBBZqs+3PfUTjwesZ2wFOzUbDLsWHdCkifhd+dE7GAJ9Wo dAmjcla3bksyBLf60A96/rq+y/Q41F0XBYb4pfzn6DRAoFuk1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHRwCuzCaIrsLtq3PHzFdGuFRVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTZhZDM5MzQtNWRlZi0z NmZhLWI1OTktOTY4NDY2NGI0MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8z6Zir5v1EqWBr+3Q7gk8WpJcWeZDjZwKmCa0CRJja1pHF0TjEFd5h 3YFQ1bxEKM8s/gnloEKX1CxnZDfnhMZJe0wSxreDuA7hZxL5Aw0Id3zCn0L9coY/ yLMHZ2aQTRwrGDl/kQFdaaP6J4gx4z0q5z5LGbJM35HS1C9E6vlbNizvpMuDlW1f B+LgAY/QUTmA1t6K64YnulSZrUPbYx0RMRzBrUS5q6YP2Y2gNRQXrzLS76kW6TYZ ACyZZNB07xRxX8TRzm1AKp+8Ixw6FzSh3ifq7KRA1J2XqXQf5EpSLNrDIx5uOS1q uNNTLvughw8ar/vIOrcEEX7TLQvCAlA= -----END CERTIFICATE-----Generated at Wed Apr 30 02:54:55 2025 by rpki-client