$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2740e1e0-7980-3707-b098-f21fdbd6be0f.roa File: 2740e1e0-7980-3707-b098-f21fdbd6be0f.roa (raw, json) Hash identifier: kvXNQZh8KtOGlV8RpLMburZwOjtKNsGleRoaajdGcns= Subject key identifier: 98:DE:30:29:21:A0:6C:54:EC:90:EA:A4:42:40:F0:C5:B1:7B:99:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C5DCAFFC8CEF336268358 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2740e1e0-7980-3707-b098-f21fdbd6be0f.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 75.88.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:5d:ca:ff:c8:ce:f3:36:26:83:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=9c0d4225-5a31-4bed-a2a3-e1bf6161553b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b5:d3:7d:70:81:f9:ca:10:0b:78:75:e8:a9: 23:a7:75:0a:7a:84:a8:73:18:6f:74:58:73:24:6f: a6:4d:53:fc:86:af:f1:0a:60:df:a9:67:21:7b:a1: 36:5e:0d:b0:07:68:ab:63:65:e5:3f:44:a5:82:a2: 93:b8:25:03:f5:76:57:c3:0c:6d:2b:93:84:c7:08: fd:de:e3:07:46:9b:e8:1d:d1:fb:8d:de:a8:28:3f: 98:b2:5a:e1:58:58:b1:fa:8d:46:4c:7a:b4:89:54: 09:f6:83:a8:3e:5a:e1:7d:3d:3d:06:58:bc:cb:b8: 7e:c4:d6:33:f6:a9:7d:49:72:3a:b4:19:a0:0c:a2: 7b:a9:6c:cc:a9:d5:bf:82:e4:06:c5:c9:48:20:b4: 6a:f1:ab:26:b6:be:7b:57:44:fe:a7:07:9b:cc:46: c0:1d:0f:10:38:c5:40:d9:99:1d:a9:c7:b8:be:ed: 9a:7c:78:0c:69:de:fb:bb:2a:4d:b8:0c:64:8f:45: 8d:b1:aa:a7:e3:63:b5:c3:af:90:f8:eb:7a:0f:89: ec:0f:b1:1b:f9:31:3f:9e:6a:81:02:43:56:4b:63: 60:ea:0f:32:92:71:a3:21:13:03:52:84:eb:15:62: 4f:84:a2:d3:4e:8b:84:0b:67:88:2f:c1:b2:76:fe: 3a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DE:30:29:21:A0:6C:54:EC:90:EA:A4:42:40:F0:C5:B1:7B:99:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2740e1e0-7980-3707-b098-f21fdbd6be0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9c:a3:f9:10:5c:06:19:bb:bb:69:3c:fb:63:75:eb:81:be: f5:ca:ab:81:a8:a3:98:cb:13:78:e8:c7:3f:71:88:f4:a6:95: c6:1f:7c:c0:ff:55:fc:37:bf:d3:6a:c0:71:6e:a9:37:14:82: a5:c9:b5:8b:cb:0d:ab:9e:eb:b4:c2:5c:de:19:eb:6f:cc:e0: 86:e4:c3:25:18:bc:a7:de:86:b9:4a:06:aa:38:13:92:8a:83: 17:af:99:2f:c8:e1:97:ca:9f:f4:83:6f:6f:3f:a9:69:5b:10: 61:d6:c5:d0:06:db:d4:79:dd:52:ab:52:f0:02:38:3d:36:a0: 0d:46:1e:0e:d1:c3:b7:56:17:67:c2:5e:bb:e1:38:60:c0:a1: 81:cf:b3:33:de:0a:77:db:f0:ee:8b:50:15:66:75:1c:00:3a: 5d:6d:bb:5c:f9:4d:62:50:54:85:3d:67:f4:9d:7b:c3:6a:0c: 80:0c:7f:ee:57:83:74:30:c1:dd:12:50:9e:b8:47:ea:23:40: 40:b9:39:6b:88:03:f1:44:e9:37:9c:5e:f6:38:13:32:c3:1f: 7c:83:41:45:1c:05:67:29:95:bb:78:63:2c:22:2e:b2:3a:3d: d5:3b:91:60:40:97:29:5b:58:38:1b:02:1c:66:98:6e:cf:f7: 28:c5:e5:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLF3K/8jO8zYmg1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk OWMwZDQyMjUtNWEzMS00YmVkLWEyYTMtZTFiZjYxNjE1NTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbXTfXCB+coQC3h16Kkjp3UKeoSocxhvdFhz JG+mTVP8hq/xCmDfqWche6E2Xg2wB2irY2XlP0SlgqKTuCUD9XZXwwxtK5OExwj9 3uMHRpvoHdH7jd6oKD+YslrhWFix+o1GTHq0iVQJ9oOoPlrhfT09Bli8y7h+xNYz 9ql9SXI6tBmgDKJ7qWzMqdW/guQGxclIILRq8asmtr57V0T+pwebzEbAHQ8QOMVA 2Zkdqce4vu2afHgMad77uypNuAxkj0WNsaqn42O1w6+Q+Ot6D4nsD7Eb+TE/nmqB AkNWS2Ng6g8yknGjIRMDUoTrFWJPhKLTTouEC2eIL8Gydv46oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjeMCkhoGxU7JDqpEJA8MWxe5nbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjc0MGUxZTAtNzk4MC0z NzA3LWIwOTgtZjIxZmRiZDZiZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1ioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaco/kQXAYZu7tpPPtjdeuBvvXKq4Goo5jLE3joxz9xiPSmlcYffMD/ Vfw3v9NqwHFuqTcUgqXJtYvLDaue67TCXN4Z62/M4IbkwyUYvKfehrlKBqo4E5KK gxevmS/I4ZfKn/SDb28/qWlbEGHWxdAG29R53VKrUvACOD02oA1GHg7Rw7dWF2fC XrvhOGDAoYHPszPeCnfb8O6LUBVmdRwAOl1tu1z5TWJQVIU9Z/Sde8NqDIAMf+5X g3Qwwd0SUJ64R+ojQEC5OWuIA/FE6TecXvY4EzLDH3yDQUUcBWcplbt4YywiLrI6 PdU7kWBAlylbWDgbAhxmmG7P9yjF5R8= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:17 2025 by rpki-client