$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2490c62a-f6a3-3ed1-b25a-20b98b133edc.roa File: 2490c62a-f6a3-3ed1-b25a-20b98b133edc.roa (raw, json) Hash identifier: bXFfHE9ogDwbuk4Rj+c15RUJi5tnw9JuYGWzHCABbzs= Subject key identifier: 37:93:06:7C:2E:AE:12:30:CA:4A:65:53:F4:39:1E:53:24:17:00:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB577835F9825FC9C117D30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2490c62a-f6a3-3ed1-b25a-20b98b133edc.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 75.89.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:77:83:5f:98:25:fc:9c:11:7d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=927a8f08-6eba-43f2-9eeb-6109d1736ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6e:da:6f:04:11:4a:f9:68:66:df:08:0f:66: 7e:fa:95:ac:6a:fd:fa:c3:f5:6a:84:b8:7b:67:fc: a4:f6:f7:b0:09:6a:76:f0:01:19:20:f5:15:e4:63: b4:59:9d:47:ab:11:0b:1b:b0:0c:80:bf:48:db:4a: 38:ec:41:44:bf:fb:99:f7:91:02:10:2e:75:18:08: 09:45:f3:77:fd:fb:f1:45:05:c9:26:c8:10:d7:bc: 6a:af:1d:67:dd:01:8c:29:2f:af:16:70:a8:fd:99: 08:93:bf:ab:0c:32:b9:1d:bf:67:bb:e5:a7:4a:1b: a8:95:be:98:ba:e2:70:de:88:9a:6a:4a:8e:88:9f: 60:27:d4:2c:66:c3:d9:1b:b2:c9:72:8e:5f:d5:88: 8c:c6:83:e1:ce:86:52:30:2b:a5:d4:ec:c7:b2:41: ae:ff:2f:b6:9d:d7:39:a1:80:2c:26:04:bb:a5:e0: f3:5c:31:14:03:90:a8:05:b7:4d:b1:29:33:b3:31: fe:45:1d:fa:a0:e6:fb:16:a0:09:1e:fc:37:f2:2e: 5c:17:26:61:b4:48:6e:5a:51:bf:ba:66:2d:82:9f: 0e:e2:34:b7:fa:9a:6d:1c:f8:4b:96:f7:e0:94:2a: 0c:e7:a8:82:dc:f4:63:b8:d8:5b:5e:01:68:1b:85: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:93:06:7C:2E:AE:12:30:CA:4A:65:53:F4:39:1E:53:24:17:00:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2490c62a-f6a3-3ed1-b25a-20b98b133edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:2b:f4:e4:28:40:01:1d:47:ac:f4:88:a7:6e:e3:5c:d8:d7: 74:d5:ab:da:f2:e2:d0:cf:fd:38:5d:27:d5:94:2c:4a:b5:df: cf:65:6f:1b:91:19:27:fe:e3:a6:59:53:f3:0c:05:f3:20:48: 83:69:81:99:96:55:c7:2a:45:f7:4e:bd:e0:bc:9c:4c:c4:e7: 33:35:52:fc:92:77:e1:77:e4:df:51:70:1e:19:13:06:af:bd: bb:11:0b:82:bc:cb:f1:f0:c4:85:53:a6:9e:86:23:93:e0:43: 18:22:93:77:84:19:1b:44:ab:38:98:d4:9a:92:e8:fe:7d:63: 48:b2:9d:17:cc:8e:7f:11:74:b6:a1:04:3c:94:47:5d:6d:38: 58:02:4d:e0:d1:f3:8b:8a:2c:0b:ef:06:19:81:75:78:f5:06: e3:9a:2e:42:6f:5c:93:3f:d6:e0:1f:70:0e:aa:bf:16:e7:0e: 91:e8:28:d6:48:dc:73:0f:56:42:80:e6:17:0e:62:89:33:15: 41:c6:32:e7:47:0b:8d:b9:70:3f:ec:f0:6c:f0:6d:79:25:c5: a2:24:94:89:54:fa:4e:3c:da:bc:3c:54:d3:07:0f:43:07:7a: 46:30:46:1a:cb:d5:c4:e0:b0:69:a4:30:a6:fa:2d:fd:c2:21: ed:67:dd:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXeDX5gl/JwRfTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk OTI3YThmMDgtNmViYS00M2YyLTllZWItNjEwOWQxNzM2ZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW7abwQRSvloZt8ID2Z++pWsav36w/VqhLh7 Z/yk9vewCWp28AEZIPUV5GO0WZ1HqxELG7AMgL9I20o47EFEv/uZ95ECEC51GAgJ RfN3/fvxRQXJJsgQ17xqrx1n3QGMKS+vFnCo/ZkIk7+rDDK5Hb9nu+WnShuolb6Y uuJw3oiaakqOiJ9gJ9QsZsPZG7LJco5f1YiMxoPhzoZSMCul1OzHskGu/y+2ndc5 oYAsJgS7peDzXDEUA5CoBbdNsSkzszH+RR36oOb7FqAJHvw38i5cFyZhtEhuWlG/ umYtgp8O4jS3+pptHPhLlvfglCoM56iC3PRjuNhbXgFoG4XErwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeTBnwurhIwykplU/Q5HlMkFwA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjQ5MGM2MmEtZjZhMy0z ZWQxLWIyNWEtMjBiOThiMTMzZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1moMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMr9OQoQAEdR6z0iKdu41zY13TVq9ry4tDP/ThdJ9WULEq1389lbxuR GSf+46ZZU/MMBfMgSINpgZmWVccqRfdOveC8nEzE5zM1UvySd+F35N9RcB4ZEwav vbsRC4K8y/HwxIVTpp6GI5PgQxgik3eEGRtEqziY1JqS6P59Y0iynRfMjn8RdLah BDyUR11tOFgCTeDR84uKLAvvBhmBdXj1BuOaLkJvXJM/1uAfcA6qvxbnDpHoKNZI 3HMPVkKA5hcOYokzFUHGMudHC425cD/s8GzwbXklxaIklIlU+k482rw8VNMHD0MH ekYwRhrL1cTgsGmkMKb6Lf3CIe1n3b4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:30 2025 by rpki-client