$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19466a5f-3e95-3475-9ec2-1aad39642a84.roa File: 19466a5f-3e95-3475-9ec2-1aad39642a84.roa (raw, json) Hash identifier: k4seIfZuBiGvoNRPHhVwimAaZ/PlXliFi/WtSmloaIQ= Subject key identifier: 72:4D:02:1B:A7:CF:C3:DB:5F:9C:80:EC:70:23:B3:48:2E:7F:90:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11A4EC9177AE23C44F5F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19466a5f-3e95-3475-9ec2-1aad39642a84.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 75.89.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1a:4e:c9:17:7a:e2:3c:44:f5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=adec3ea6-d985-4280-9b2c-9d8891878009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:48:cb:e4:0f:09:45:84:4b:49:2c:48:77: 1c:9b:0c:c6:58:07:09:9e:1b:19:4f:ab:1d:9e:12: 40:29:0e:79:51:18:db:b5:c0:44:81:d9:52:ea:30: f7:1e:a8:33:8a:cd:e0:7d:77:56:3d:32:fc:c6:19: ed:59:11:f3:f6:bb:39:d5:42:b4:2b:c6:4d:48:aa: 2b:0e:98:24:f4:70:86:3e:e9:47:74:16:5c:c7:fc: cf:5f:6e:7a:b3:9b:a7:11:9c:77:a0:c5:70:95:7a: df:80:88:1d:e3:88:cb:fb:76:0f:e6:93:47:d0:2c: f9:e3:83:38:84:66:80:81:a2:f2:24:4a:6a:e4:eb: aa:f8:58:d7:39:5a:1f:cb:47:aa:64:3d:0a:3f:62: 4e:48:5c:33:31:a7:ec:ae:e9:93:b4:78:12:4e:d6: a5:b6:67:42:4c:8e:e3:36:f7:28:54:7b:4a:c3:f5: 9a:6e:cb:16:9f:37:26:11:19:d6:85:12:49:34:c5: e6:60:85:fe:f0:24:1b:69:d6:38:ef:29:79:94:85: 9a:be:5d:8d:41:38:2d:96:0a:5c:b1:dd:5c:49:e5: 35:1d:35:ef:e0:f1:9a:4e:f9:01:94:4f:4d:d6:4e: 90:f2:da:19:4f:94:c1:d1:e9:d5:31:9e:ab:69:53: 1e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4D:02:1B:A7:CF:C3:DB:5F:9C:80:EC:70:23:B3:48:2E:7F:90:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19466a5f-3e95-3475-9ec2-1aad39642a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:46:39:e5:cb:1a:1e:cc:45:73:49:0a:8a:35:b3:65:27:c0: f4:1a:fe:d0:ce:d8:8a:ba:78:ff:84:18:2c:d7:76:4b:18:ea: 4c:2e:10:a4:47:1a:29:a6:8e:4f:fa:c0:7f:f1:1c:fa:ae:f5: cc:a3:ea:a9:e1:db:f0:a1:07:86:58:ce:9f:f6:d2:c4:db:e6: ce:67:f5:19:6b:9a:cd:99:12:64:bf:b3:fd:b0:96:82:76:fb: e7:de:ad:0b:7c:31:81:b0:46:76:59:09:f9:80:7a:9a:e7:55: 13:2a:25:d4:62:9e:56:6f:bf:2e:45:09:cc:32:4a:7b:23:82: 2c:09:95:91:e3:d3:b8:8d:6f:9e:e2:25:10:8c:08:f2:8b:a7: 40:ea:6c:b7:1f:91:a8:e7:c9:68:6a:a7:0d:f0:6e:43:aa:2b: ce:03:1c:19:95:bf:72:ee:da:af:1c:57:b7:80:fa:4b:4f:a0: dd:4e:c7:76:3b:aa:ba:3a:fa:41:74:d1:19:81:c2:2c:82:e9: f3:46:e0:5f:a1:17:27:73:fd:53:20:6d:2d:a0:55:2d:f1:39: ec:59:42:f2:43:17:73:ad:ac:c1:15:68:b6:c5:b2:35:80:3f: 73:66:3f:75:d3:c3:fe:42:93:d1:8f:49:f9:2a:a1:ff:76:dc: 7e:9b:33:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RpOyRd64jxE9fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YWRlYzNlYTYtZDk4NS00MjgwLTliMmMtOWQ4ODkxODc4MDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU5Iy+QPCUWES0ksSHccmwzGWAcJnhsZT6sd nhJAKQ55URjbtcBEgdlS6jD3Hqgzis3gfXdWPTL8xhntWRHz9rs51UK0K8ZNSKor Dpgk9HCGPulHdBZcx/zPX256s5unEZx3oMVwlXrfgIgd44jL+3YP5pNH0Cz544M4 hGaAgaLyJEpq5Ouq+FjXOVofy0eqZD0KP2JOSFwzMafsrumTtHgSTtaltmdCTI7j NvcoVHtKw/WabssWnzcmERnWhRJJNMXmYIX+8CQbadY47yl5lIWavl2NQTgtlgpc sd1cSeU1HTXv4PGaTvkBlE9N1k6Q8toZT5TB0enVMZ6raVMenQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJNAhunz8PbX5yA7HAjs0guf5CNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTk0NjZhNWYtM2U5NS0z NDc1LTllYzItMWFhZDM5NjQyYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1lUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVGOeXLGh7MRXNJCoo1s2UnwPQa/tDO2Iq6eP+EGCzXdksY6kwuEKRH Gimmjk/6wH/xHPqu9cyj6qnh2/ChB4ZYzp/20sTb5s5n9Rlrms2ZEmS/s/2wloJ2 ++ferQt8MYGwRnZZCfmAeprnVRMqJdRinlZvvy5FCcwySnsjgiwJlZHj07iNb57i JRCMCPKLp0DqbLcfkajnyWhqpw3wbkOqK84DHBmVv3Lu2q8cV7eA+ktPoN1Ox3Y7 qro6+kF00RmBwiyC6fNG4F+hFydz/VMgbS2gVS3xOexZQvJDF3OtrMEVaLbFsjWA P3NmP3XTw/5Ck9GPSfkqof923H6bM00= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:38 2025 by rpki-client