$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08927149-83a7-3384-b768-2536f37539a9.roa File: 08927149-83a7-3384-b768-2536f37539a9.roa (raw, json) Hash identifier: Qfe3wC9MgeXwGl+Q1jNlmbk5top2Pqj9SCXOlpsmHVA= Subject key identifier: B4:37:C8:5C:25:65:5C:B0:01:C0:69:F2:BD:37:75:D1:17:9D:2D:C8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F303F0ABD3100A95103A900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08927149-83a7-3384-b768-2536f37539a9.roa Signing time: Tue 21 Jan 2025 20:37:37 +0000 ROA not before: Tue 21 Jan 2025 20:37:37 +0000 ROA not after: Mon 21 Apr 2025 19:37:37 +0000 asID: 7029 IP address blocks: 75.90.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:3f:0a:bd:31:00:a9:51:03:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:37:37 2025 GMT Not After : Apr 21 19:37:37 2025 GMT Subject: CN=aa3b2afd-d67d-4332-9663-06bc0410c3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:11:96:7a:a4:51:43:c1:3d:ff:77:08:d9:bd: e4:d2:4b:6d:3f:be:42:6f:d5:d2:b2:f6:3f:4e:f2: c4:a8:06:94:47:40:62:96:62:40:83:9b:5c:6b:98: 75:eb:bb:1b:ee:0d:72:d2:92:8b:89:64:93:2b:92: 14:23:1e:31:b6:00:d8:7e:48:37:53:36:66:aa:c5: 3a:3b:00:d1:66:95:a9:0b:f4:5f:91:f4:66:f2:64: 4e:70:88:61:71:3c:5d:b7:02:8f:cb:16:31:ca:f4: ba:82:c9:10:4a:b9:af:95:79:46:c4:b8:79:02:28: 1d:c9:8e:f9:4d:f2:63:57:18:11:9f:10:6e:f2:11: 93:8e:39:e0:1f:ea:ec:a4:0f:f7:1c:7d:d4:58:54: 68:62:8d:9f:29:2f:b9:13:07:74:eb:17:b7:46:91: e6:18:0f:61:58:d1:fe:11:89:bc:2d:26:52:b4:47: 30:9e:bb:aa:7d:3d:eb:95:06:0c:e1:3f:b2:53:c4: 2a:c3:f8:e7:15:32:07:30:05:00:f9:1f:b2:f1:8b: 52:c3:97:63:22:10:b0:51:5c:a8:c7:34:1a:8b:29: 8f:c8:08:ea:c6:63:5b:67:31:f7:13:18:af:d7:1c: e8:8d:6a:6a:c8:18:ec:ac:59:0c:f3:49:0f:79:ac: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:37:C8:5C:25:65:5C:B0:01:C0:69:F2:BD:37:75:D1:17:9D:2D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08927149-83a7-3384-b768-2536f37539a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:93:93:7e:b4:f2:1c:67:4b:a0:49:d9:57:e0:f8:7c:61:f5: 1f:89:87:bf:6e:dd:73:29:fd:c8:e5:42:cd:cb:87:63:cd:4f: 9c:b4:e9:84:1a:7c:f6:6f:5a:15:23:36:8c:85:43:cb:cc:2c: 5b:ae:9e:2f:2c:9c:01:10:ab:fa:f4:7e:da:b9:e1:dd:38:5a: 25:7d:d6:f1:8b:fe:29:40:10:a0:ba:dd:08:48:49:fe:06:3d: ee:9e:dc:41:c7:af:c6:85:05:42:3a:36:da:20:be:dc:26:0f: 5f:2d:bd:27:0b:ce:dc:83:bb:c6:26:20:82:51:2d:71:a9:48: dc:5f:aa:22:f4:ca:f7:10:0a:2e:a0:d6:54:30:2a:5a:71:be: b2:05:0b:3e:fd:0c:c5:73:12:dc:13:54:4d:0c:c7:e0:be:95: 01:fe:86:5a:32:b3:5c:a2:3b:2d:2e:76:b7:0b:c0:39:be:f0: cc:18:05:4b:53:1b:4f:c8:b9:7f:a3:3b:13:b8:14:e2:9a:b9: db:88:aa:ba:a8:54:48:05:1e:23:38:7b:49:a9:a6:22:ca:78: 97:9e:95:cf:bc:a1:c9:bb:17:d1:03:d3:70:64:66:3e:7e:89: b9:71:b8:b0:33:6a:a0:5a:f1:a3:50:6a:52:c4:2e:0f:e2:4b: 2c:45:bb:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMD8KvTEAqVEDqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzczN1oXDTI1MDQyMTE5MzczN1owLzEtMCsGA1UEAxMk YWEzYjJhZmQtZDY3ZC00MzMyLTk2NjMtMDZiYzA0MTBjM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBGWeqRRQ8E9/3cI2b3k0kttP75Cb9XSsvY/ TvLEqAaUR0BilmJAg5tca5h167sb7g1y0pKLiWSTK5IUIx4xtgDYfkg3UzZmqsU6 OwDRZpWpC/RfkfRm8mROcIhhcTxdtwKPyxYxyvS6gskQSrmvlXlGxLh5AigdyY75 TfJjVxgRnxBu8hGTjjngH+rspA/3HH3UWFRoYo2fKS+5Ewd06xe3RpHmGA9hWNH+ EYm8LSZStEcwnruqfT3rlQYM4T+yU8Qqw/jnFTIHMAUA+R+y8YtSw5djIhCwUVyo xzQaiymPyAjqxmNbZzH3Exiv1xzojWpqyBjsrFkM80kPeaxFqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ3yFwlZVywAcBp8r03ddEXnS3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDg5MjcxNDktODNhNy0z Mzg0LWI3NjgtMjUzNmYzNzUzOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGTk3608hxnS6BJ2Vfg+Hxh9R+Jh79u3XMp/cjlQs3Lh2PNT5y06YQa fPZvWhUjNoyFQ8vMLFuuni8snAEQq/r0ftq54d04WiV91vGL/ilAEKC63QhISf4G Pe6e3EHHr8aFBUI6NtogvtwmD18tvScLztyDu8YmIIJRLXGpSNxfqiL0yvcQCi6g 1lQwKlpxvrIFCz79DMVzEtwTVE0Mx+C+lQH+hloys1yiOy0udrcLwDm+8MwYBUtT G0/IuX+jOxO4FOKauduIqrqoVEgFHiM4e0mppiLKeJeelc+8ocm7F9ED03BkZj5+ iblxuLAzaqBa8aNQalLELg/iSyxFu+U= -----END CERTIFICATE-----Generated at Thu Apr 10 23:54:18 2025 by rpki-client