$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa File: ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa (raw, json) Hash identifier: yXKHk94OdSkiNW8sWzPi0gF7Px9U6IX4myL8LXHi1ic= Subject key identifier: 00:DE:A5:56:01:4A:72:70:BF:BC:66:9A:E8:E0:1E:85:8D:CD:FD:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB93F208761FB17A19E89D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa Signing time: Thu 06 Feb 2025 18:14:04 +0000 ROA not before: Thu 06 Feb 2025 18:14:04 +0000 ROA not after: Wed 07 May 2025 17:14:04 +0000 asID: 7029 IP address blocks: 75.89.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:93:f2:08:76:1f:b1:7a:19:e8:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:14:04 2025 GMT Not After : May 7 17:14:04 2025 GMT Subject: CN=d6ec24e6-c367-404c-b7db-72e93eaa8006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:07:19:34:85:aa:94:1d:cf:30:76:d6:6b:0f: ec:69:da:04:da:90:37:10:c4:80:fb:03:16:f3:ee: 56:58:8f:f7:9d:6a:de:bb:f0:5b:67:11:ad:99:73: 6e:91:25:6a:4a:92:72:6b:63:97:8d:41:cf:ab:13: a3:fb:b2:42:85:bd:45:49:ad:42:67:96:79:55:24: ac:5f:27:f0:38:16:77:3a:eb:ed:30:f2:6d:e2:51: 57:1c:ee:c5:ce:a7:61:f6:c5:25:30:9a:6e:1c:e5: 19:35:2b:4d:fc:c8:c2:a1:0d:4f:c5:80:3d:8d:4e: da:77:2f:2e:6f:f3:b3:61:c9:fe:09:93:cf:11:a1: 93:e1:41:60:45:25:32:9c:d7:0c:ce:bd:31:bf:2b: f7:27:3a:c1:bc:dc:87:83:6f:30:02:20:5b:b5:d4: 9d:2b:3c:09:a0:76:11:6a:31:15:51:a3:b7:22:8d: 70:74:ef:58:68:23:ca:6c:42:e2:7f:71:08:19:14: e3:15:65:4c:79:47:12:a1:f7:18:7d:99:55:db:ee: 13:3b:e3:35:ad:13:d7:f9:9e:31:86:76:df:05:d3: 71:93:f2:c5:f5:7b:c0:1e:11:7e:20:8f:fa:f5:55: e0:c5:51:38:05:2b:b4:9a:a0:ad:9e:4b:82:cd:38: e8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DE:A5:56:01:4A:72:70:BF:BC:66:9A:E8:E0:1E:85:8D:CD:FD:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ad:6b:bf:ab:c9:69:22:38:1b:24:19:38:56:ff:cc:1a:ab: e3:a3:48:12:af:b9:26:c1:e8:d3:24:3e:92:2b:3d:b5:0f:23: 8d:1d:e9:a3:2d:68:c7:96:a3:ed:ef:45:4c:03:48:36:fc:b5: 0c:db:89:4a:ab:34:73:4a:c4:f6:64:17:56:2c:8b:68:3b:3a: 0b:33:4e:0f:bb:7c:f6:23:85:88:93:27:18:fb:5e:38:7a:2f: fe:f9:37:1b:fe:0a:98:86:23:96:90:63:12:48:19:f5:48:ee: 11:e3:3e:c5:0d:63:ae:3f:fd:94:45:03:25:2a:37:53:d2:e5: ae:26:c1:04:38:38:7f:02:a8:70:fd:62:5a:3a:be:98:ae:5b: e7:72:75:cd:65:5c:3c:83:df:8b:be:a1:54:ba:9c:dd:8d:c6: d9:34:7a:d4:bf:a2:0d:1c:d1:dd:21:03:c6:ef:57:95:45:f5: a5:cc:62:61:ea:d7:b9:be:fe:6e:e9:5a:59:28:53:64:e5:a5: 55:29:55:9a:47:0d:30:9e:4c:2d:4d:da:d5:7f:e5:6b:7e:01: f9:fb:33:e8:0b:62:19:63:53:83:3c:e9:3b:7c:7a:86:77:ce: 7d:f8:ca:ff:93:d5:63:1e:d4:52:21:de:4e:42:2f:ee:4b:38: d2:d6:9b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLk/IIdh+xehnonUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTQwNFoXDTI1MDUwNzE3MTQwNFowLzEtMCsGA1UEAxMk ZDZlYzI0ZTYtYzM2Ny00MDRjLWI3ZGItNzJlOTNlYWE4MDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gcZNIWqlB3PMHbWaw/sadoE2pA3EMSA+wMW 8+5WWI/3nWreu/BbZxGtmXNukSVqSpJya2OXjUHPqxOj+7JChb1FSa1CZ5Z5VSSs XyfwOBZ3OuvtMPJt4lFXHO7Fzqdh9sUlMJpuHOUZNStN/MjCoQ1PxYA9jU7ady8u b/OzYcn+CZPPEaGT4UFgRSUynNcMzr0xvyv3JzrBvNyHg28wAiBbtdSdKzwJoHYR ajEVUaO3Io1wdO9YaCPKbELif3EIGRTjFWVMeUcSofcYfZlV2+4TO+M1rRPX+Z4x hnbfBdNxk/LF9XvAHhF+II/69VXgxVE4BSu0mqCtnkuCzTjo3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADepVYBSnJwv7xmmujgHoWNzf0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWE3M2FjZjYtNjZiNi0z ZmI5LTg1YzUtYzRhMzJhZmY2NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGta7+ryWkiOBskGThW/8waq+OjSBKvuSbB6NMkPpIrPbUPI40d6aMt aMeWo+3vRUwDSDb8tQzbiUqrNHNKxPZkF1Ysi2g7OgszTg+7fPYjhYiTJxj7Xjh6 L/75Nxv+CpiGI5aQYxJIGfVI7hHjPsUNY64//ZRFAyUqN1PS5a4mwQQ4OH8CqHD9 Ylo6vpiuW+dydc1lXDyD34u+oVS6nN2Nxtk0etS/og0c0d0hA8bvV5VF9aXMYmHq 17m+/m7pWlkoU2TlpVUpVZpHDTCeTC1N2tV/5Wt+Afn7M+gLYhljU4M86Tt8eoZ3 zn34yv+T1WMe1FIh3k5CL+5LONLWm+U= -----END CERTIFICATE-----Generated at Sun Apr 27 09:52:58 2025 by rpki-client