$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cf7381a-48ad-3f60-a366-594284f07d04.roa File: 2cf7381a-48ad-3f60-a366-594284f07d04.roa (raw, json) Hash identifier: SW6tpS+zWwna67W1Tv2XyXkCBI0OC00cO5eVbiz/4a4= Subject key identifier: AF:CD:CD:FA:9F:1D:82:CC:CB:60:E0:70:22:6F:18:2E:85:C3:DE:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716A9633F9D61B1A44CE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cf7381a-48ad-3f60-a366-594284f07d04.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.89.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:6a:96:33:f9:d6:1b:1a:44:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=0e4200b4-5742-470c-b5ab-494dd04b2eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f7:e9:f9:cf:81:4f:e0:0d:d2:10:dc:4d:26: 70:b9:21:f7:80:fa:2d:4e:71:57:d1:3a:02:ea:2d: cf:e9:5b:02:8a:cf:93:0b:42:72:84:2a:c4:27:cd: 6c:e6:04:98:1c:60:ec:77:97:3e:1f:3f:52:61:cf: e0:a2:3f:7e:d2:cf:07:38:d7:1e:95:8f:be:90:45: de:0e:c9:7a:f9:c5:be:b6:af:a1:af:df:aa:b4:f3: db:b5:44:92:1a:b3:2b:87:47:a2:30:bf:5e:06:07: b9:70:6a:e0:82:85:c8:e6:6b:f7:94:e2:9c:a7:a3: 39:44:65:4a:47:81:10:4c:b8:c2:85:a4:58:66:c1: 3d:d7:0e:fc:af:f0:f8:b4:bd:3b:8b:5e:84:01:7a: 57:61:68:03:34:95:f1:ed:8b:32:8b:12:57:63:97: 1b:45:98:93:44:25:37:15:60:4b:9d:93:68:d4:10: d6:4d:de:e4:0b:a8:5a:38:52:8f:e6:0e:0c:54:d8: 43:99:51:fe:22:41:8f:c4:e5:02:4c:d4:12:10:d3: c1:9a:0a:43:f3:3e:3c:43:0f:f8:10:3c:71:92:de: 24:08:3c:d1:17:a2:f9:c4:59:e1:93:ba:c5:be:e6: e9:1b:5f:1a:1b:5b:ce:37:a1:8a:3b:ab:85:5a:5e: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CD:CD:FA:9F:1D:82:CC:CB:60:E0:70:22:6F:18:2E:85:C3:DE:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cf7381a-48ad-3f60-a366-594284f07d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:34:be:9e:ec:40:0c:66:5b:79:33:87:55:d8:58:33:c3:b2: 1d:4e:47:0b:ae:a8:48:c8:78:7c:f5:f7:c2:74:ad:87:5b:f1: 32:ea:8f:0d:44:8d:07:3f:3a:88:a5:78:c0:e1:de:f4:f9:5a: 13:2d:f1:91:ae:f5:43:08:df:fd:df:1f:57:df:08:d2:f8:dc: c7:55:e3:c9:1c:07:4b:ab:d1:e5:c6:dd:79:2c:db:e5:f4:92: 18:d4:21:4f:1c:d5:30:45:6f:ef:cb:05:e6:1d:29:ad:a4:98: 53:32:be:b4:15:19:75:3b:0d:4a:0a:b4:ef:bd:f2:c7:6d:72: ed:10:83:5d:41:f3:9a:5c:3f:22:60:f3:f0:c8:4c:ca:22:dc: d2:b0:11:3f:3c:72:2e:7d:63:d5:00:cc:06:fa:63:09:7d:16: 62:8e:5f:0b:0e:5a:90:3e:a5:50:25:10:10:9b:c3:6d:37:44: a0:b5:67:95:c4:c8:07:3e:29:7b:fc:12:60:f4:64:23:61:14: 48:05:7d:d9:98:d4:2d:3c:53:ca:27:8c:f0:1f:84:2b:57:4b: 14:e0:d7:d6:fa:ae:6d:0d:39:29:1f:25:5f:16:f1:fa:22:4f: dc:54:5f:ae:32:20:e4:00:b1:3d:b6:5d:31:5d:56:01:8d:4f: 71:0f:84:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWqWM/nWGxpEzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MGU0MjAwYjQtNTc0Mi00NzBjLWI1YWItNDk0ZGQwNGIyZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vfp+c+BT+AN0hDcTSZwuSH3gPotTnFX0ToC 6i3P6VsCis+TC0JyhCrEJ81s5gSYHGDsd5c+Hz9SYc/goj9+0s8HONcelY++kEXe Dsl6+cW+tq+hr9+qtPPbtUSSGrMrh0eiML9eBge5cGrggoXI5mv3lOKcp6M5RGVK R4EQTLjChaRYZsE91w78r/D4tL07i16EAXpXYWgDNJXx7YsyixJXY5cbRZiTRCU3 FWBLnZNo1BDWTd7kC6haOFKP5g4MVNhDmVH+IkGPxOUCTNQSENPBmgpD8z48Qw/4 EDxxkt4kCDzRF6L5xFnhk7rFvubpG18aG1vON6GKO6uFWl42xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/NzfqfHYLMy2DgcCJvGC6Fw94lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmNmNzM4MWEtNDhhZC0z ZjYwLWEzNjYtNTk0Mjg0ZjA3ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1mwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM0vp7sQAxmW3kzh1XYWDPDsh1ORwuuqEjIeHz198J0rYdb8TLqjw1E jQc/OoileMDh3vT5WhMt8ZGu9UMI3/3fH1ffCNL43MdV48kcB0ur0eXG3Xks2+X0 khjUIU8c1TBFb+/LBeYdKa2kmFMyvrQVGXU7DUoKtO+98sdtcu0Qg11B85pcPyJg 8/DITMoi3NKwET88ci59Y9UAzAb6Ywl9FmKOXwsOWpA+pVAlEBCbw203RKC1Z5XE yAc+KXv8EmD0ZCNhFEgFfdmY1C08U8onjPAfhCtXSxTg19b6rm0NOSkfJV8W8foi T9xUX64yIOQAsT22XTFdVgGNT3EPhLc= -----END CERTIFICATE-----Generated at Sat Apr 5 23:24:34 2025 by rpki-client