$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06cb9a01-6aac-3d30-a839-60cb3e6385d2.roa File: 06cb9a01-6aac-3d30-a839-60cb3e6385d2.roa (raw, json) Hash identifier: 1iWTbtbSc3AIzIv5QFAEXOipA6z0GTksJmHPLpplkOY= Subject key identifier: FB:C2:23:8D:D8:7E:57:1F:89:61:9A:1A:68:69:97:DA:02:68:19:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584898D61E961AA9E0FE77FDC280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06cb9a01-6aac-3d30-a839-60cb3e6385d2.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 7029 IP address blocks: 75.90.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:1e:96:1a:a9:e0:fe:77:fd:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=2fb9bbec-4959-4f66-ba51-b3bb53cba216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:82:2b:6c:86:f6:b2:59:05:74:9f:9a:ae: 2a:df:4b:a0:65:84:10:20:9c:94:04:71:e2:c3:5e: 5d:f3:17:aa:7d:70:47:fe:25:46:44:21:0c:e5:35: 74:65:54:31:1f:89:af:93:25:32:2e:da:4e:4d:26: e6:07:c2:aa:03:e1:5f:68:74:24:4a:8c:e4:72:47: 51:be:ad:25:41:af:df:97:6d:ea:86:d3:c0:8d:9e: c7:03:8d:a6:0f:f5:7a:23:86:a5:e4:cc:09:df:9f: 0e:96:2e:4f:b9:62:04:50:5f:9c:57:9a:4a:4f:1e: 86:b6:8a:eb:09:99:53:af:47:b2:d6:21:de:80:67: db:68:a6:e4:53:eb:fc:f2:de:69:9c:00:b9:5e:23: 41:be:6c:48:21:72:db:da:cf:e5:0e:e9:71:39:9d: d9:cd:67:0d:6b:88:43:fb:54:aa:40:e2:93:a7:68: c3:61:fd:2d:6a:ed:1f:6d:2f:b9:9d:43:ef:37:dc: 0a:a9:b9:1c:8c:84:4d:d8:5a:e8:10:89:48:66:c3: 40:9b:2c:3b:ee:d8:fa:ef:ec:7e:2c:d2:b5:b6:d8: 57:50:1a:85:8d:c9:88:63:75:b6:8a:f4:57:38:94: c9:1b:7d:db:e3:0e:b8:23:81:75:d1:d4:4c:36:22: b4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C2:23:8D:D8:7E:57:1F:89:61:9A:1A:68:69:97:DA:02:68:19:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06cb9a01-6aac-3d30-a839-60cb3e6385d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:9e:d6:53:dc:94:98:c0:f1:77:0a:8a:20:dd:cd:3a:b9:20: f7:0d:9a:23:7a:a7:ad:92:3f:d0:15:6d:98:81:9e:52:5d:7d: 11:db:5d:c1:66:da:cc:91:13:f2:72:02:41:ce:64:a7:4d:21: f0:3d:91:de:b3:c6:05:13:f9:4b:42:e8:cf:b1:73:1a:1e:a9: 82:65:a4:9d:1c:d8:bd:78:6d:25:68:a3:17:56:a8:8b:8a:ce: b6:b8:80:ce:19:57:21:5c:30:a2:62:d1:bf:3e:54:2d:73:a7: 5b:0a:bb:75:ee:a4:20:c3:36:6d:0f:3b:5e:95:11:33:87:12: 6d:02:bd:61:36:47:51:ba:1c:69:ef:7a:1e:8b:e5:16:42:de: 61:09:ef:09:c8:c4:8d:8b:0a:b7:76:33:7e:5d:a4:b1:5d:1a: 1d:8f:eb:6b:3d:f9:65:cf:0f:f4:b5:c7:d2:1a:fe:c5:bb:21: 98:f4:a9:98:ee:07:d7:4d:7d:9e:9d:87:93:ba:ff:73:5d:1b: eb:4d:ae:31:d0:2c:4f:6c:ce:9f:15:59:cc:4b:25:d4:97:92: 37:cb:a0:d9:2e:90:a3:98:43:5f:0c:cd:73:92:29:89:46:63: d9:9a:f8:da:79:df:ad:aa:6a:5d:36:7f:f7:e3:91:f1:4a:15: 61:bf:d1:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1h6WGqng/nf9woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk MmZiOWJiZWMtNDk1OS00ZjY2LWJhNTEtYjNiYjUzY2JhMjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG+CK2yG9rJZBXSfmq4q30ugZYQQIJyUBHHi w15d8xeqfXBH/iVGRCEM5TV0ZVQxH4mvkyUyLtpOTSbmB8KqA+FfaHQkSozkckdR vq0lQa/fl23qhtPAjZ7HA42mD/V6I4al5MwJ358Oli5PuWIEUF+cV5pKTx6Gtorr CZlTr0ey1iHegGfbaKbkU+v88t5pnAC5XiNBvmxIIXLb2s/lDulxOZ3ZzWcNa4hD +1SqQOKTp2jDYf0tau0fbS+5nUPvN9wKqbkcjIRN2FroEIlIZsNAmyw77tj67+x+ LNK1tthXUBqFjcmIY3W2ivRXOJTJG33b4w64I4F10dRMNiK0WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvCI43YflcfiWGaGmhpl9oCaBkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDZjYjlhMDEtNmFhYy0z ZDMwLWE4MzktNjBjYjNlNjM4NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6e1lPclJjA8XcKiiDdzTq5IPcNmiN6p62SP9AVbZiBnlJdfRHbXcFm 2syRE/JyAkHOZKdNIfA9kd6zxgUT+UtC6M+xcxoeqYJlpJ0c2L14bSVooxdWqIuK zra4gM4ZVyFcMKJi0b8+VC1zp1sKu3XupCDDNm0PO16VETOHEm0CvWE2R1G6HGnv eh6L5RZC3mEJ7wnIxI2LCrd2M35dpLFdGh2P62s9+WXPD/S1x9Ia/sW7IZj0qZju B9dNfZ6dh5O6/3NdG+tNrjHQLE9szp8VWcxLJdSXkjfLoNkukKOYQ18MzXOSKYlG Y9ma+Np5362qal02f/fjkfFKFWG/0Xk= -----END CERTIFICATE-----Generated at Sun Apr 6 08:27:57 2025 by rpki-client