$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/346b09d1-64b5-3be2-a94a-1eb6327d8015.roa File: 346b09d1-64b5-3be2-a94a-1eb6327d8015.roa (raw, json) Hash identifier: ascaYpJPahFb5sU6Ug/DhfkrFUtXRRGFfZOaRXwPv74= Subject key identifier: E3:5E:28:5A:E8:89:78:75:18:C3:CB:27:5B:3F:B2:D9:F4:DF:70:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11DBD8993CB3AA27765E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/346b09d1-64b5-3be2-a94a-1eb6327d8015.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 75.88.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1d:bd:89:93:cb:3a:a2:77:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=3abcdb94-8646-4932-8fa4-b05a55c23efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:4a:b0:6e:ed:23:ab:8e:50:65:96:bc:7f: 71:b3:b8:c3:58:03:5f:ed:55:9c:24:0a:65:7b:70: df:bc:27:21:46:14:b7:70:d0:fb:5e:36:6f:7e:e6: 96:2c:5c:33:64:41:29:ee:39:85:54:ed:5b:32:52: fb:d2:c3:b3:b7:85:6e:71:55:12:c6:0f:2a:41:25: a6:a0:27:4d:64:e8:c5:16:b2:13:5b:54:82:81:b9: af:a2:23:a8:da:54:1a:29:9b:35:b1:1c:ac:c1:28: 5f:24:dc:f8:37:89:7b:3b:12:89:83:8c:19:fa:dc: 51:e2:40:cc:4e:79:21:3d:2e:63:1d:4e:05:f6:63: 61:90:8f:39:b2:08:bd:6b:c7:2d:e3:4c:61:79:fc: 53:57:af:e6:52:8b:56:b1:47:e5:8c:80:44:84:42: 64:23:b8:49:6a:14:9e:ca:f0:cd:e4:a4:aa:04:fe: c8:fd:53:e2:9d:12:13:c2:83:97:a3:56:ce:7d:85: 79:1e:10:ea:e0:0a:f7:73:77:53:65:0f:a1:bc:49: 7b:b4:23:5d:10:e9:d1:a9:b6:9f:28:b8:53:d7:04: 1d:0b:b9:d6:84:6c:5c:fa:39:5e:6f:7e:cd:9c:04: 50:ec:de:0d:6a:30:e7:79:2a:3c:b3:e5:3d:c5:b3: 3b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5E:28:5A:E8:89:78:75:18:C3:CB:27:5B:3F:B2:D9:F4:DF:70:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/346b09d1-64b5-3be2-a94a-1eb6327d8015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9c:ec:af:aa:03:d0:4e:86:8a:10:88:2c:fa:1a:f9:90:c8: 3b:36:df:08:69:a6:db:cf:83:c2:0c:b6:0d:46:53:e3:fb:e9: 04:1c:db:55:2d:41:fa:72:c2:38:7d:22:fc:18:96:68:c2:a1: 70:a3:a2:1c:5e:eb:31:23:4b:db:e5:84:ef:e4:af:c8:99:c5: f2:a8:10:3a:46:fa:79:46:24:b1:de:73:31:a8:92:93:e7:49: bc:fe:d2:ab:9f:59:f7:ff:d3:e6:47:22:54:d5:18:78:35:1b: 89:08:96:54:37:25:c3:de:13:eb:a9:11:66:a3:f1:c8:63:ff: c4:c7:8f:db:39:32:14:b7:0f:ac:00:78:d8:78:9b:8f:fa:92: a3:c2:d1:04:ae:44:90:0e:51:de:e9:24:6a:e2:a5:98:29:cb: 17:4a:01:33:ec:0a:c9:5c:0c:45:d6:d4:6d:05:4d:14:2f:13: d1:32:28:55:21:13:c1:40:e0:92:4b:1c:e0:22:d3:b0:0d:94: 0a:7c:69:8f:fc:b3:1e:ce:5a:15:05:15:58:b2:cf:ee:4d:34: e2:0c:0f:1b:3a:2c:87:fb:03:bb:c0:e4:93:02:c3:6b:24:fb: 81:62:f5:49:25:be:9d:ae:0b:5a:ed:02:35:0a:76:f0:98:89: 75:5c:f4:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R29iZPLOqJ3ZeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk M2FiY2RiOTQtODY0Ni00OTMyLThmYTQtYjA1YTU1YzIzZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtttKsG7tI6uOUGWWvH9xs7jDWANf7VWcJApl e3DfvCchRhS3cND7XjZvfuaWLFwzZEEp7jmFVO1bMlL70sOzt4VucVUSxg8qQSWm oCdNZOjFFrITW1SCgbmvoiOo2lQaKZs1sRyswShfJNz4N4l7OxKJg4wZ+txR4kDM TnkhPS5jHU4F9mNhkI85sgi9a8ct40xhefxTV6/mUotWsUfljIBEhEJkI7hJahSe yvDN5KSqBP7I/VPinRITwoOXo1bOfYV5HhDq4Ar3c3dTZQ+hvEl7tCNdEOnRqbaf KLhT1wQdC7nWhGxc+jleb37NnARQ7N4NajDneSo8s+U9xbM7TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONeKFroiXh1GMPLJ1s/stn033BAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzQ2YjA5ZDEtNjRiNS0z YmUyLWE5NGEtMWViNjMyN2Q4MDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1jQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImc7K+qA9BOhooQiCz6GvmQyDs23whpptvPg8IMtg1GU+P76QQc21Ut Qfpywjh9IvwYlmjCoXCjohxe6zEjS9vlhO/kr8iZxfKoEDpG+nlGJLHeczGokpPn Sbz+0qufWff/0+ZHIlTVGHg1G4kIllQ3JcPeE+upEWaj8chj/8THj9s5MhS3D6wA eNh4m4/6kqPC0QSuRJAOUd7pJGripZgpyxdKATPsCslcDEXW1G0FTRQvE9EyKFUh E8FA4JJLHOAi07ANlAp8aY/8sx7OWhUFFViyz+5NNOIMDxs6LIf7A7vA5JMCw2sk +4Fi9Uklvp2uC1rtAjUKdvCYiXVc9BY= -----END CERTIFICATE-----Generated at Wed Apr 9 16:11:35 2025 by rpki-client