$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/139e7e11-d5dc-313a-9364-4ee26d68abcf.roa File: 139e7e11-d5dc-313a-9364-4ee26d68abcf.roa (raw, json) Hash identifier: 1IMJVc1naXP4v24l/nusUGbzQwksqI2Uj2agHxIPQr8= Subject key identifier: 2B:FA:D4:CD:4F:6E:E6:AA:7B:5E:CD:4E:B6:B9:E6:22:99:7B:68:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716B2207777D9BC68816F8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/139e7e11-d5dc-313a-9364-4ee26d68abcf.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.91.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:6b:22:07:77:7d:9b:c6:88:16:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=23a5c837-2a0e-4e13-bb06-d9313b7d2f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:2b:fb:74:46:ca:6d:43:f6:7d:1e:fa:5a: b2:e5:a0:96:7e:53:2e:e2:68:81:8b:da:57:8d:db: 61:e1:05:77:41:0d:7f:8d:0e:24:fb:77:21:c8:80: 0c:a8:a3:c9:f6:0a:97:3b:5c:1c:8c:1b:eb:98:9d: 27:e2:58:f2:08:2c:0f:89:08:84:de:77:0a:da:db: ec:c5:f0:18:e8:29:0b:f4:b2:88:47:9a:ab:36:de: fc:14:62:c5:30:b2:1b:2c:79:47:5a:47:77:64:96: 7f:a3:1f:2c:8e:eb:a3:97:f1:d4:16:db:2e:30:0a: 5e:ac:20:ad:8c:18:7c:ee:80:dc:45:a8:6a:e8:98: b1:76:9d:6d:f9:79:ec:e9:db:65:4d:e6:92:25:2e: 4e:d4:48:c2:91:ef:84:1f:60:d2:13:22:ca:4a:a1: 2f:05:1d:90:39:b1:80:91:5b:e1:98:34:59:91:49: 03:70:57:31:0e:94:d2:ce:02:8f:5f:74:c9:05:aa: 5c:0b:56:10:4b:87:88:c7:ad:3f:d6:44:dc:6a:f2: cd:60:d7:16:e4:e3:76:19:0e:31:e9:67:7a:51:8e: 28:41:aa:e2:56:a5:34:f4:e8:54:c2:36:c8:38:ff: 6f:5c:ff:0a:dd:2c:97:e8:33:e2:98:26:a1:d6:3e: 47:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FA:D4:CD:4F:6E:E6:AA:7B:5E:CD:4E:B6:B9:E6:22:99:7B:68:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/139e7e11-d5dc-313a-9364-4ee26d68abcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:6d:e2:a9:5d:71:e5:38:92:24:22:bf:8e:8b:25:86:e1:a4: 67:ac:2c:36:b7:e4:a3:20:0a:79:30:bd:d7:51:77:35:81:f8: ea:f8:c2:c2:28:20:9f:25:74:3c:87:71:ac:f9:d2:f5:b8:bb: 96:82:10:3e:96:7e:79:83:e3:de:a2:22:05:67:fe:c6:c5:a7: 3c:76:a5:d0:1b:fb:8e:11:76:04:ed:4e:99:98:d1:38:70:3b: 55:02:c8:1a:32:a2:ef:6d:e6:90:71:6b:43:7d:ee:a4:89:b8: 84:da:1c:af:25:42:89:db:b2:da:dc:c1:94:8f:3b:1a:66:a6: b8:af:16:8c:b8:67:4c:67:d2:a3:41:4a:ce:b4:1c:9a:db:13: d9:ec:71:e7:ce:58:de:24:50:5e:91:87:ca:44:f0:37:fd:db: c7:0f:8f:c3:24:66:38:e7:14:27:0b:4a:cd:ce:b9:93:a5:59: e5:1e:f8:c5:94:9a:4e:e1:bb:0d:9f:28:ea:31:63:9f:8c:2b: 6c:92:4d:2a:ac:84:2c:b4:0b:e6:7d:b3:0a:30:14:f4:8a:a9: 4f:cb:1f:fd:45:0c:f0:15:51:eb:ec:53:bf:4b:86:0a:53:c5: 8f:cd:e0:68:5b:fe:dd:dd:11:d1:04:f2:6e:99:43:39:88:d1: 76:52:b8:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWsiB3d9m8aIFvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MjNhNWM4MzctMmEwZS00ZTEzLWJiMDYtZDkzMTNiN2QyZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxewr+3RGym1D9n0e+lqy5aCWflMu4miBi9pX jdth4QV3QQ1/jQ4k+3chyIAMqKPJ9gqXO1wcjBvrmJ0n4ljyCCwPiQiE3ncK2tvs xfAY6CkL9LKIR5qrNt78FGLFMLIbLHlHWkd3ZJZ/ox8sjuujl/HUFtsuMAperCCt jBh87oDcRahq6Jixdp1t+Xns6dtlTeaSJS5O1EjCke+EH2DSEyLKSqEvBR2QObGA kVvhmDRZkUkDcFcxDpTSzgKPX3TJBapcC1YQS4eIx60/1kTcavLNYNcW5ON2GQ4x 6Wd6UY4oQariVqU09OhUwjbIOP9vXP8K3SyX6DPimCah1j5HNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv61M1Pbuaqe17NTra55iKZe2jHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTM5ZTdlMTEtZDVkYy0z MTNhLTkzNjQtNGVlMjZkNjhhYmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBt4qldceU4kiQiv46LJYbhpGesLDa35KMgCnkwvddRdzWB+Or4wsIo IJ8ldDyHcaz50vW4u5aCED6WfnmD496iIgVn/sbFpzx2pdAb+44RdgTtTpmY0Thw O1UCyBoyou9t5pBxa0N97qSJuITaHK8lQonbstrcwZSPOxpmprivFoy4Z0xn0qNB Ss60HJrbE9nscefOWN4kUF6Rh8pE8Df928cPj8MkZjjnFCcLSs3OuZOlWeUe+MWU mk7huw2fKOoxY5+MK2ySTSqshCy0C+Z9swowFPSKqU/LH/1FDPAVUevsU79LhgpT xY/N4Ghb/t3dEdEE8m6ZQzmI0XZSuK4= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:52 2025 by rpki-client