$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/021894f7-4fdb-3f4e-84d9-603e0b5bf875.roa File: 021894f7-4fdb-3f4e-84d9-603e0b5bf875.roa (raw, json) Hash identifier: 9xJKerlmGu/jJYCSebBHhMrAgrwAyHZf7yz2ASI9d0M= Subject key identifier: F9:8E:97:B3:9C:30:0C:69:2D:9F:52:6B:3F:45:8A:63:1C:DF:28:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11F5C3F4CD5565312AA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/021894f7-4fdb-3f4e-84d9-603e0b5bf875.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 75.90.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1f:5c:3f:4c:d5:56:53:12:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=df1a992f-16b4-48b8-a447-4342050cb0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:80:b3:97:74:37:c3:39:76:21:31:45:0c:4b: 34:b0:31:04:ce:50:ce:32:c2:60:93:d0:65:44:3a: e9:52:4b:13:a0:1e:46:ea:03:22:88:82:25:b0:b1: cf:39:00:58:65:23:fd:aa:51:18:64:8f:9a:15:04: 2f:44:bc:2f:1c:13:2c:b8:d6:9d:30:14:6a:fb:36: 94:56:d4:f7:d0:e2:1a:01:f6:5d:d8:91:8b:ab:62: 6e:01:5f:86:01:77:9d:f6:fc:f7:f7:c2:c3:9e:88: 01:12:8f:13:6e:22:40:a6:98:e5:1f:b6:ce:a1:33: 0c:8a:39:b0:3f:65:a6:24:f4:1e:a8:09:5f:58:ce: 6e:51:82:92:cb:3f:08:69:ae:ac:76:26:ec:53:d6: 83:58:15:1e:14:1e:bf:0c:f5:ef:06:72:2e:1c:6d: 86:f5:d3:b3:a9:d0:2f:f6:9f:93:c4:90:b3:54:6a: 7b:87:73:d6:5d:e4:03:a0:5c:bd:1d:ee:ca:bf:1b: d4:83:ed:89:d0:6a:b9:71:17:cb:3c:00:7a:eb:58: 2b:f7:65:a8:81:77:58:b1:6f:1c:8c:7a:4a:8b:a5: 56:f4:5e:fa:3c:b8:e4:ce:17:99:40:3a:2d:90:b3: e3:da:eb:2b:cc:ed:a6:18:24:c5:3d:3c:b4:be:4e: 2d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8E:97:B3:9C:30:0C:69:2D:9F:52:6B:3F:45:8A:63:1C:DF:28:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/021894f7-4fdb-3f4e-84d9-603e0b5bf875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8c:77:90:c4:e7:5c:a6:60:6b:66:0d:eb:3f:13:cf:c7:50: 1b:dd:50:8e:6f:40:67:7e:ba:1c:0d:b0:8f:ec:83:65:e1:18: 3d:08:f5:dc:8f:3c:e1:31:3e:7e:9a:02:b8:b5:78:2b:50:f1: e1:c2:4a:a8:56:a7:83:3c:cb:89:50:de:9b:62:20:14:ec:44: bd:70:a0:a8:a2:0d:c5:cf:3f:b1:b6:e2:89:35:8b:24:36:45: 23:e8:09:68:be:8b:87:91:ad:39:2e:d6:63:ca:b5:e4:12:c8: 00:0a:49:55:2e:05:04:d0:27:d3:c9:81:cc:1d:25:1e:13:1c: 53:10:d7:e0:1e:84:f5:9a:3f:91:0b:f1:d0:08:3f:7c:ce:1e: 83:d3:c6:02:30:f3:54:62:11:f0:87:c4:4a:27:05:c6:84:61: b8:a1:0f:58:14:4f:4d:f7:97:8d:ee:9d:ed:59:3d:05:18:1a: c1:d6:07:2e:87:67:26:ff:7a:41:58:8b:d2:05:8b:c5:9f:c9: 7a:c7:75:bf:d4:64:69:2f:9e:75:4b:f6:40:3a:7f:a8:81:f1: b1:7d:bc:1e:b4:e6:2e:33:7a:0c:fb:86:63:65:6e:06:99:90: 88:d0:43:97:65:a9:dc:03:00:23:3a:14:4e:12:34:b5:22:74: 64:e0:87:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R9cP0zVVlMSqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZGYxYTk5MmYtMTZiNC00OGI4LWE0NDctNDM0MjA1MGNiMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkICzl3Q3wzl2ITFFDEs0sDEEzlDOMsJgk9Bl RDrpUksToB5G6gMiiIIlsLHPOQBYZSP9qlEYZI+aFQQvRLwvHBMsuNadMBRq+zaU VtT30OIaAfZd2JGLq2JuAV+GAXed9vz398LDnogBEo8TbiJAppjlH7bOoTMMijmw P2WmJPQeqAlfWM5uUYKSyz8Iaa6sdibsU9aDWBUeFB6/DPXvBnIuHG2G9dOzqdAv 9p+TxJCzVGp7h3PWXeQDoFy9He7KvxvUg+2J0Gq5cRfLPAB661gr92WogXdYsW8c jHpKi6VW9F76PLjkzheZQDotkLPj2usrzO2mGCTFPTy0vk4tLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmOl7OcMAxpLZ9Saz9FimMc3yg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDIxODk0ZjctNGZkYi0z ZjRlLTg0ZDktNjAzZTBiNWJmODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1pwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWMd5DE51ymYGtmDes/E8/HUBvdUI5vQGd+uhwNsI/sg2XhGD0I9dyP POExPn6aAri1eCtQ8eHCSqhWp4M8y4lQ3ptiIBTsRL1woKiiDcXPP7G24ok1iyQ2 RSPoCWi+i4eRrTku1mPKteQSyAAKSVUuBQTQJ9PJgcwdJR4THFMQ1+AehPWaP5EL 8dAIP3zOHoPTxgIw81RiEfCHxEonBcaEYbihD1gUT033l43une1ZPQUYGsHWBy6H Zyb/ekFYi9IFi8WfyXrHdb/UZGkvnnVL9kA6f6iB8bF9vB605i4zegz7hmNlbgaZ kIjQQ5dlqdwDACM6FE4SNLUidGTghyY= -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:18 2025 by rpki-client