$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12745f0e-e662-342d-905f-96f848e71092.roa File: 12745f0e-e662-342d-905f-96f848e71092.roa (raw, json) Hash identifier: 5vig+zxX9mHNh2DSkd1d12lXMMiM/WlRZumsLF7AyJM= Subject key identifier: 74:57:89:0A:14:1F:2B:7A:1E:81:65:7F:1B:C4:A8:2D:F8:D2:E2:E4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DA71016A11F2FA36A6986910 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12745f0e-e662-342d-905f-96f848e71092.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.88.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:01:6a:11:f2:fa:36:a6:98:69:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=25533cba-dfd1-4df1-97da-1026b51f61b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0d:f8:2f:02:a7:aa:91:49:54:11:ea:be:fd: 11:dc:0f:50:d3:f5:89:91:50:81:3f:d8:1a:1e:80: 2d:18:02:02:54:8c:73:04:62:a2:eb:8e:78:b5:00: 22:63:66:b8:3e:c0:d3:ca:e1:b0:17:32:0e:56:3c: 63:5e:ba:6a:99:dc:01:8b:0b:86:38:f0:a7:9c:94: e8:9c:f1:e2:2e:2c:cb:7f:68:2d:dd:f5:72:dd:1d: 1f:fe:4d:d5:3b:19:5a:04:08:b5:19:4d:96:36:41: ae:43:01:45:be:9f:0a:c4:fb:7a:a9:5c:e2:b3:d9: 87:66:af:83:e5:75:45:b9:9f:b7:20:0d:56:94:a9: db:63:0e:bb:53:db:75:46:82:d8:a6:98:fe:37:b0: 4e:8d:26:8a:0c:4d:39:ad:09:81:19:19:64:aa:5e: 34:c9:5a:63:03:47:c4:25:5e:9b:22:8e:a1:a7:e7: 38:d8:ea:d9:82:62:64:16:aa:6b:18:90:04:0a:ec: d5:bc:47:a3:05:42:2f:ea:7c:de:e9:67:50:f3:ed: 9c:11:4e:a2:86:45:7c:72:e3:cc:a5:88:f7:6b:07: 21:65:55:8e:f7:81:3f:e4:61:f8:5b:3f:08:df:29: 8b:39:18:67:f9:aa:b5:b8:71:9d:aa:5a:6a:75:83: cc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:57:89:0A:14:1F:2B:7A:1E:81:65:7F:1B:C4:A8:2D:F8:D2:E2:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12745f0e-e662-342d-905f-96f848e71092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:dd:92:d4:64:66:82:14:37:a0:f9:b9:f5:f7:8a:ee:8f:08: 3b:08:ea:23:6f:56:60:bb:39:a2:4f:a9:ab:24:36:fd:11:f0: 33:23:66:49:85:f0:24:a1:17:a1:ea:e5:96:d4:51:e6:bb:35: 5d:4f:b5:c5:c2:79:9e:7a:2a:04:b4:00:9a:40:28:08:0a:b1: 5f:7c:fb:ae:ce:2f:d7:34:54:d8:cc:20:65:9d:99:59:c2:04: e2:0c:fd:16:1e:94:f1:14:55:97:ff:48:71:43:26:5b:bc:ec: 24:57:44:8e:e2:6e:d4:cf:f4:15:f5:35:bc:0d:c6:6d:4f:8a: eb:a7:9b:ad:fd:b3:23:c3:8a:7d:8b:7e:21:07:a2:b3:98:31: d2:b4:e7:27:60:a8:d3:39:e5:a9:4e:74:28:34:aa:8d:40:c6: c9:dc:e7:2b:32:8c:b0:74:bb:f6:12:b7:79:df:55:93:37:5f: 61:16:0d:1e:ac:48:67:aa:a6:28:6e:b6:92:30:2d:34:55:95: 38:3c:10:62:fe:48:e4:55:e5:34:87:f8:a5:d2:90:e0:4b:c6: eb:18:d8:7e:14:9d:86:a0:f8:64:e2:62:0e:85:0b:79:8f:ff: bc:e3:28:56:ec:b4:57:a5:b1:8b:d0:63:ce:46:ed:1d:6c:5d: c7:86:87:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQFqEfL6NqaYaRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk MjU1MzNjYmEtZGZkMS00ZGYxLTk3ZGEtMTAyNmI1MWY2MWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA34LwKnqpFJVBHqvv0R3A9Q0/WJkVCBP9ga HoAtGAICVIxzBGKi6454tQAiY2a4PsDTyuGwFzIOVjxjXrpqmdwBiwuGOPCnnJTo nPHiLizLf2gt3fVy3R0f/k3VOxlaBAi1GU2WNkGuQwFFvp8KxPt6qVzis9mHZq+D 5XVFuZ+3IA1WlKnbYw67U9t1RoLYppj+N7BOjSaKDE05rQmBGRlkql40yVpjA0fE JV6bIo6hp+c42OrZgmJkFqprGJAECuzVvEejBUIv6nze6WdQ8+2cEU6ihkV8cuPM pYj3awchZVWO94E/5GH4Wz8I3ymLORhn+aq1uHGdqlpqdYPMnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRXiQoUHyt6HoFlfxvEqC340uLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTI3NDVmMGUtZTY2Mi0z NDJkLTkwNWYtOTZmODQ4ZTcxMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1jgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHdktRkZoIUN6D5ufX3iu6PCDsI6iNvVmC7OaJPqaskNv0R8DMjZkmF 8CShF6Hq5ZbUUea7NV1PtcXCeZ56KgS0AJpAKAgKsV98+67OL9c0VNjMIGWdmVnC BOIM/RYelPEUVZf/SHFDJlu87CRXRI7ibtTP9BX1NbwNxm1Piuunm639syPDin2L fiEHorOYMdK05ydgqNM55alOdCg0qo1Axsnc5ysyjLB0u/YSt3nfVZM3X2EWDR6s SGeqpihutpIwLTRVlTg8EGL+SORV5TSH+KXSkOBLxusY2H4UnYag+GTiYg6FC3mP /7zjKFbstFelsYvQY85G7R1sXceGh9c= -----END CERTIFICATE-----Generated at Sun Apr 6 03:28:36 2025 by rpki-client