$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20370447-4dbe-31bc-8435-e733a838a637.roa File: 20370447-4dbe-31bc-8435-e733a838a637.roa (raw, json) Hash identifier: CJus5roWErMYYHb/i00PMdVKmAMD7nNbFH45CcCPFlI= Subject key identifier: E3:C7:94:2C:4E:49:F6:99:6A:1C:9D:6A:80:CE:4E:EC:33:41:FA:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7168CFEEB0CB2B4BB88E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20370447-4dbe-31bc-8435-e733a838a637.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.89.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:68:cf:ee:b0:cb:2b:4b:b8:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=a44334de-f93d-409a-a4af-a71028cfe6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:3b:43:30:92:78:1c:54:fa:bd:7c:34:09: 10:d0:7a:8d:ab:63:d9:8c:be:14:82:0b:df:32:c2: 75:37:14:45:73:41:69:03:3e:c2:e7:f3:bf:b2:dc: d9:75:43:79:6e:c0:2a:ee:f8:70:20:fd:9e:29:98: 34:bb:82:bd:aa:8c:36:8c:7a:2b:d9:56:b7:02:cf: 70:78:25:a4:2a:4c:db:7f:bd:6a:c9:65:da:44:29: 0a:a3:33:40:38:89:be:04:07:68:7d:b5:2f:47:24: 93:51:c1:8b:2e:e0:dc:3c:fc:25:c5:f9:47:4a:4e: 0c:89:4f:a9:41:52:b3:9a:12:49:eb:a9:a2:43:1f: 1a:5e:06:12:bf:4c:84:c7:5a:0e:f7:9b:2d:78:e3: ca:40:ee:e7:a8:c6:fb:e7:0b:ed:7c:5b:ef:39:01: 08:d2:e3:38:7c:5c:71:fc:1f:28:33:cb:55:f1:5f: b3:ef:72:41:1b:8b:de:40:d8:57:44:5d:5f:25:92: cb:17:ca:74:95:b2:f3:dc:4a:00:2a:f9:f6:aa:8e: 88:59:19:1f:15:4b:18:ad:4d:99:67:cc:1c:05:84: 77:93:a2:e5:46:34:89:75:f2:3f:5e:f9:5a:6a:e6: 8e:da:c4:dd:f7:ff:6a:b1:d9:ff:eb:a8:8f:27:10: 82:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C7:94:2C:4E:49:F6:99:6A:1C:9D:6A:80:CE:4E:EC:33:41:FA:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20370447-4dbe-31bc-8435-e733a838a637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f6:1d:c8:c1:ca:2b:c2:75:f8:4c:5a:38:30:41:77:b3:83: 55:6a:cb:d5:22:f3:d5:8a:94:7e:6a:bd:a6:9e:5f:6d:80:15: dd:ee:fa:63:ee:ff:36:4c:d2:c1:a9:c5:0c:92:0e:43:26:85: 4c:e6:b2:42:f0:00:53:5f:e1:77:0c:54:33:33:14:f2:06:51: 8c:2f:88:9a:01:88:3e:83:d5:d4:c8:0b:67:6a:8d:34:15:0d: 72:94:c0:2f:d6:af:41:bb:45:fe:de:06:89:da:91:9a:fe:06: c9:76:08:fa:44:a0:ec:ab:84:c1:6b:64:2e:90:bb:c0:ff:f2: c3:79:9f:73:76:c4:57:37:9a:5a:89:7d:7b:77:a6:fb:00:e7: 4c:b2:e1:f5:07:7f:1c:af:ef:6a:83:fa:72:49:66:d8:17:89: ec:10:eb:4a:3a:11:fc:88:83:2b:95:c2:6b:4b:94:98:f1:0c: d1:a4:4a:fe:02:8b:b3:60:a2:74:c8:8a:c3:a3:c4:4c:d4:1a: dd:89:9f:ac:99:8a:08:6e:01:b8:78:a8:c0:12:5b:4c:9e:03: 2b:c7:cd:14:93:c3:31:6f:07:85:d2:fa:3e:2c:1b:41:99:90: 0c:55:28:93:4f:6c:fc:7d:e4:d6:25:2b:cd:9f:a6:9b:6e:ba: 5e:b0:42:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWjP7rDLK0u4jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YTQ0MzM0ZGUtZjkzZC00MDlhLWE0YWYtYTcxMDI4Y2ZlNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaM7QzCSeBxU+r18NAkQ0HqNq2PZjL4Uggvf MsJ1NxRFc0FpAz7C5/O/stzZdUN5bsAq7vhwIP2eKZg0u4K9qow2jHor2Va3As9w eCWkKkzbf71qyWXaRCkKozNAOIm+BAdofbUvRySTUcGLLuDcPPwlxflHSk4MiU+p QVKzmhJJ66miQx8aXgYSv0yEx1oO95steOPKQO7nqMb75wvtfFvvOQEI0uM4fFxx /B8oM8tV8V+z73JBG4veQNhXRF1fJZLLF8p0lbLz3EoAKvn2qo6IWRkfFUsYrU2Z Z8wcBYR3k6LlRjSJdfI/XvlaauaO2sTd9/9qsdn/66iPJxCCqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPHlCxOSfaZahydaoDOTuwzQfr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjAzNzA0NDctNGRiZS0z MWJjLTg0MzUtZTczM2E4MzhhNjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/2HcjByivCdfhMWjgwQXezg1Vqy9Ui89WKlH5qvaaeX22AFd3u+mPu /zZM0sGpxQySDkMmhUzmskLwAFNf4XcMVDMzFPIGUYwviJoBiD6D1dTIC2dqjTQV DXKUwC/Wr0G7Rf7eBonakZr+Bsl2CPpEoOyrhMFrZC6Qu8D/8sN5n3N2xFc3mlqJ fXt3pvsA50yy4fUHfxyv72qD+nJJZtgXiewQ60o6EfyIgyuVwmtLlJjxDNGkSv4C i7NgonTIisOjxEzUGt2Jn6yZighuAbh4qMASW0yeAyvHzRSTwzFvB4XS+j4sG0GZ kAxVKJNPbPx95NYlK82fpptuul6wQh8= -----END CERTIFICATE-----Generated at Fri Mar 14 13:50:43 2025 by rpki-client