$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f787aa56-d6b0-3cb5-b89e-5d1e4e731970.roa File: f787aa56-d6b0-3cb5-b89e-5d1e4e731970.roa (raw, json) Hash identifier: whHmcJDHJYkMDw5yc9O7EGGVq6s/w+GtSZsG+iV2LUc= Subject key identifier: 4E:08:4F:79:BC:1A:92:48:7D:78:F3:67:BA:4A:25:6F:24:76:B6:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB49306FEAFCC88BF07B580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f787aa56-d6b0-3cb5-b89e-5d1e4e731970.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 75.88.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:93:06:fe:af:cc:88:bf:07:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=8dfb7f65-bcc8-4bda-940f-307c00b969e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:33:80:cc:6b:7d:fb:fe:2d:70:bb:89:56:eb: 7b:40:76:bc:59:e9:ea:60:49:14:d7:5b:7c:36:5b: 3c:bc:72:4b:f8:3e:62:fb:c6:2c:62:ed:7e:c2:e1: 2f:ab:28:e1:3c:97:4d:56:59:14:5d:71:bd:8d:3c: 88:96:25:d8:92:9b:6d:54:b3:69:9b:d6:7a:56:1d: 39:64:4a:46:f7:0f:a6:e4:5b:c8:48:01:17:94:5b: 3b:24:37:ae:5f:2a:d6:52:9b:ec:67:1c:94:e8:3a: cb:b4:74:57:05:69:6b:e2:db:1b:d0:8f:d4:3a:07: 66:d7:33:c0:7e:08:73:73:d6:fe:73:b0:a3:68:4f: a9:84:ac:3f:3e:cb:a7:1f:ae:08:a3:d8:4c:0a:65: 22:84:cf:23:d1:1e:44:6a:d1:56:d5:b9:5d:82:17: 11:97:f5:09:b6:99:20:01:6d:d1:7f:4c:f0:2a:17: 0e:80:48:eb:9c:fc:61:86:d7:0f:ba:93:13:41:21: 9b:e8:47:99:48:54:f9:93:14:37:f5:d9:60:c6:4e: 08:76:50:26:ce:1f:de:75:b2:a1:2c:40:6d:31:80: e8:dd:75:12:7a:86:87:d5:67:30:e7:76:b7:bd:fc: 77:a7:46:82:69:44:87:d8:87:a4:ee:d5:62:49:26: 2c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:08:4F:79:BC:1A:92:48:7D:78:F3:67:BA:4A:25:6F:24:76:B6:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f787aa56-d6b0-3cb5-b89e-5d1e4e731970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b4:f9:c8:31:39:9b:26:37:be:7d:24:59:b6:36:11:f5:93: 29:25:f8:ca:cb:19:c6:58:52:1e:ff:c7:e0:98:cd:ad:48:9a: f1:45:e7:59:4b:f6:90:3a:09:95:16:62:b5:93:21:ce:c1:88: b4:21:40:05:ac:c5:ab:19:8d:c3:e5:f6:eb:c6:89:db:8b:b2: 6b:cd:83:f0:a3:53:c6:9d:f8:d7:79:e1:82:a9:88:b7:37:3e: 65:90:24:ff:58:e6:a7:90:da:c1:b6:ac:26:f9:df:4f:c2:31: 05:a6:81:20:9e:20:b3:a9:a5:86:6a:db:89:b9:5b:29:07:b2: 0d:3c:cc:c3:c7:06:73:dc:5d:6c:77:4f:e6:c4:7c:58:f6:b6: 62:96:3e:a8:27:8c:30:65:ed:eb:ad:72:64:64:74:fb:47:37: f2:72:e3:2a:ea:79:9f:77:e0:5a:b4:bb:4a:e5:87:2f:b7:df: 8e:15:d0:89:9d:8d:71:6b:d5:88:a4:3f:4b:94:c2:0b:28:11: 25:9d:67:da:c1:d7:99:64:b6:99:21:72:b5:68:5a:4a:77:5c: 02:9b:b6:3a:01:c6:a1:79:a0:2e:35:fd:12:56:00:d7:b7:e5: 98:ee:23:0f:63:73:3a:a5:ab:94:72:e9:a1:0f:08:bc:9b:20: f0:37:54:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJMG/q/MiL8HtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk OGRmYjdmNjUtYmNjOC00YmRhLTk0MGYtMzA3YzAwYjk2OWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTOAzGt9+/4tcLuJVut7QHa8WenqYEkU11t8 Nls8vHJL+D5i+8YsYu1+wuEvqyjhPJdNVlkUXXG9jTyIliXYkpttVLNpm9Z6Vh05 ZEpG9w+m5FvISAEXlFs7JDeuXyrWUpvsZxyU6DrLtHRXBWlr4tsb0I/UOgdm1zPA fghzc9b+c7CjaE+phKw/PsunH64Io9hMCmUihM8j0R5EatFW1bldghcRl/UJtpkg AW3Rf0zwKhcOgEjrnPxhhtcPupMTQSGb6EeZSFT5kxQ39dlgxk4IdlAmzh/edbKh LEBtMYDo3XUSeoaH1Wcw53a3vfx3p0aCaUSH2Iek7tViSSYsowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4IT3m8GpJIfXjzZ7pKJW8kdrZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjc4N2FhNTYtZDZiMC0z Y2I1LWI4OWUtNWQxZTRlNzMxOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu0+cgxOZsmN759JFm2NhH1kykl+MrLGcZYUh7/x+CYza1ImvFF51lL 9pA6CZUWYrWTIc7BiLQhQAWsxasZjcPl9uvGiduLsmvNg/CjU8ad+Nd54YKpiLc3 PmWQJP9Y5qeQ2sG2rCb530/CMQWmgSCeILOppYZq24m5WykHsg08zMPHBnPcXWx3 T+bEfFj2tmKWPqgnjDBl7eutcmRkdPtHN/Jy4yrqeZ934Fq0u0rlhy+3344V0Imd jXFr1YikP0uUwgsoESWdZ9rB15lktpkhcrVoWkp3XAKbtjoBxqF5oC41/RJWANe3 5ZjuIw9jczqlq5Ry6aEPCLybIPA3VOk= -----END CERTIFICATE-----Generated at Mon Apr 28 19:21:05 2025 by rpki-client