$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/294bbdf6-b817-38c0-9699-af92d6af616c.roa File: 294bbdf6-b817-38c0-9699-af92d6af616c.roa (raw, json) Hash identifier: iMhbTbv7S1BdU23OLgo8c7tXYV4xwIMj2w1qGW8VHlY= Subject key identifier: AB:11:41:48:41:96:DD:04:04:80:53:F4:F8:27:61:34:95:A6:CB:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111EF80A115E481E31CAC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/294bbdf6-b817-38c0-9699-af92d6af616c.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.88.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1e:f8:0a:11:5e:48:1e:31:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=af9fd8c8-e8e5-42f4-b201-ace0b589caaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cb:93:ec:b4:f0:f6:1d:cf:6d:d0:76:a2:fd: 81:41:1c:89:b3:1b:3c:ff:97:57:c2:e2:a2:34:fe: 57:d3:a1:65:c8:26:3c:db:01:56:c7:04:d1:08:12: 4b:58:b7:46:55:34:c5:52:e6:48:df:22:2e:37:f8: 86:4a:42:f8:0f:18:32:c8:44:89:bd:79:d1:76:7a: 48:cf:1a:16:04:2e:fa:9c:c7:1d:fe:b1:35:b9:d2: 69:46:96:e9:6b:4c:69:c2:8b:08:ce:b0:6e:21:a8: 5c:67:d2:0b:3b:b7:dd:ff:e4:52:d9:9b:56:1f:02: 92:4b:7c:63:d8:04:35:99:52:fb:d9:4c:58:24:54: 7a:34:39:0b:ae:b1:58:e3:01:cd:f7:81:76:a1:3e: c3:92:aa:c2:44:1b:4f:7e:b9:ca:0e:67:97:cf:1c: 6d:07:25:6b:77:86:b4:bd:9e:84:9e:f0:04:3e:43: 90:bd:dd:40:26:1c:e3:a4:88:0c:5f:3d:e7:fe:d4: 0b:c2:76:a4:66:ef:96:d7:4e:6f:81:9a:70:d1:60: 8a:2d:27:0b:ca:07:d5:b7:c5:38:c6:14:80:cc:27: 67:8b:af:c8:81:76:91:45:31:33:0e:e3:60:a7:d2: 79:c9:35:95:da:ce:40:1f:7c:3d:e7:5a:72:ee:33: e1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:11:41:48:41:96:DD:04:04:80:53:F4:F8:27:61:34:95:A6:CB:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/294bbdf6-b817-38c0-9699-af92d6af616c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:bb:84:c7:76:6a:ac:44:3f:74:08:b4:c0:27:74:5d:1d:04: 79:37:fb:02:f6:d3:ad:57:b9:45:11:b1:c2:aa:b0:37:f6:e2: b8:93:70:e4:f7:ec:0d:2c:b9:2c:df:86:6f:ae:16:f0:d4:7e: 85:9c:98:21:53:7e:bb:9a:19:1f:c9:00:1c:a2:7e:8d:ba:46: 30:da:f8:b2:f8:cc:97:85:43:02:46:a9:84:9d:d2:79:62:17: 9b:d9:85:ec:97:33:d1:5d:29:fb:89:73:29:36:d7:a6:f4:9e: ac:34:bb:82:1f:7b:42:95:cb:90:c2:6e:b3:14:ae:31:8f:6a: 35:0c:e9:3e:8a:12:2e:65:d7:3b:9a:ca:d8:19:f4:b9:11:1e: 0f:5a:44:dd:0d:a4:74:89:56:f5:6e:88:f6:63:a6:32:ee:df: 6e:1f:9d:ca:84:af:f2:e7:88:fe:f4:74:0c:81:62:95:72:b7: 65:08:bf:8d:5b:f9:35:92:ef:30:23:d5:29:e3:1a:8b:06:43: e3:0e:ce:7a:c3:a0:46:ce:d8:0d:6f:f4:be:96:0f:c3:da:92: 86:88:b4:dc:53:31:1b:43:36:fe:17:ac:70:00:6b:c4:78:85: a1:b1:d9:32:6f:b6:fd:f3:98:25:68:c3:59:b6:41:e9:da:6c: 3d:ca:c3:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSER74ChFeSB4xysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YWY5ZmQ4YzgtZThlNS00MmY0LWIyMDEtYWNlMGI1ODljYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsuT7LTw9h3PbdB2ov2BQRyJsxs8/5dXwuKi NP5X06FlyCY82wFWxwTRCBJLWLdGVTTFUuZI3yIuN/iGSkL4DxgyyESJvXnRdnpI zxoWBC76nMcd/rE1udJpRpbpa0xpwosIzrBuIahcZ9ILO7fd/+RS2ZtWHwKSS3xj 2AQ1mVL72UxYJFR6NDkLrrFY4wHN94F2oT7DkqrCRBtPfrnKDmeXzxxtByVrd4a0 vZ6EnvAEPkOQvd1AJhzjpIgMXz3n/tQLwnakZu+W105vgZpw0WCKLScLygfVt8U4 xhSAzCdni6/IgXaRRTEzDuNgp9J5yTWV2s5AH3w951py7jPh3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsRQUhBlt0EBIBT9PgnYTSVpsvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjk0YmJkZjYtYjgxNy0z OGMwLTk2OTktYWY5MmQ2YWY2MTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1jEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD67hMd2aqxEP3QItMAndF0dBHk3+wL2061XuUURscKqsDf24riTcOT3 7A0suSzfhm+uFvDUfoWcmCFTfruaGR/JAByifo26RjDa+LL4zJeFQwJGqYSd0nli F5vZheyXM9FdKfuJcyk216b0nqw0u4Ife0KVy5DCbrMUrjGPajUM6T6KEi5l1zua ytgZ9LkRHg9aRN0NpHSJVvVuiPZjpjLu324fncqEr/LniP70dAyBYpVyt2UIv41b +TWS7zAj1SnjGosGQ+MOznrDoEbO2A1v9L6WD8PakoaItNxTMRtDNv4XrHAAa8R4 haGx2TJvtv3zmCVow1m2QenabD3Kwy0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:06 2025 by rpki-client