$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4643845d-c1ad-3292-80a2-421c397e3629.roa File: 4643845d-c1ad-3292-80a2-421c397e3629.roa (raw, json) Hash identifier: ZsICZK+OuAPhB4A7/cscWQoGk4UfnCmNmbDSSor4Im4= Subject key identifier: 49:7A:40:09:7D:9B:27:B9:BC:4C:48:84:DB:FC:0F:99:4C:F2:77:9A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B349634EEE3D41D16600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4643845d-c1ad-3292-80a2-421c397e3629.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 75.91.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b3:49:63:4e:ee:3d:41:d1:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=d1cf4696-7803-4428-8666-82247a9c0b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c2:ac:d1:33:c1:48:30:ea:d2:7c:65:7c:f6: 05:a2:d3:0d:f5:f0:3f:33:25:e8:53:2a:ca:74:49: ae:0b:79:fd:cd:d3:e1:3a:c0:07:ea:24:ed:e6:95: 11:6d:8e:33:7f:ed:03:0f:4e:8b:7d:14:e1:1b:93: fa:06:c5:06:c9:84:c2:34:75:5d:66:0d:a3:06:62: 8d:60:40:74:fe:68:33:eb:01:63:78:11:46:90:e8: b3:c8:ac:86:3c:f7:43:c1:50:b7:da:04:3b:f1:43: 01:71:00:2a:d0:35:3e:e9:1b:07:7a:23:f0:97:0e: d0:e5:81:a1:4a:2e:34:5d:90:b7:4a:d9:7d:ef:d4: 93:58:d0:d6:ee:77:92:aa:05:3c:d4:ea:c7:1a:42: 5f:3c:36:30:d4:00:7f:78:e6:27:2d:18:f5:27:0e: 61:61:0f:cb:45:0c:ff:83:b2:6d:ae:ce:6c:d8:20: 93:50:d1:56:fc:cd:2e:ed:35:ab:1d:b5:5d:a7:7f: 94:65:5e:cc:64:5e:58:20:41:b7:a3:bd:1d:89:88: 2e:22:01:a7:01:c7:f0:0b:c5:48:87:70:9b:0c:6d: 49:97:03:8a:bf:58:05:8f:c3:88:d4:22:08:b2:11: d9:ce:29:d5:af:3f:e8:94:cb:c7:94:50:65:be:18: 09:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7A:40:09:7D:9B:27:B9:BC:4C:48:84:DB:FC:0F:99:4C:F2:77:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4643845d-c1ad-3292-80a2-421c397e3629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5a:5f:14:9c:57:b7:d3:af:6e:f8:57:b9:a5:48:76:2e:26: cf:51:5d:7d:cb:86:0e:ac:3b:f6:9f:37:7a:4f:b3:7f:ad:75: 22:9c:76:c6:2a:54:aa:e4:9f:43:5a:cb:82:d4:34:53:ac:af: 87:07:b1:15:68:cd:74:62:3d:05:d5:83:c0:67:7c:18:b0:f3: 05:be:b7:f6:15:60:0d:02:be:ba:6a:a8:74:79:95:de:f0:44: 4d:22:e8:52:8f:76:99:ac:b8:ca:0b:b0:93:bf:9e:3c:80:75: 16:57:09:ca:9e:52:2f:b6:06:02:ae:4f:ed:f1:fe:e7:ef:9e: 9d:bc:ba:82:7d:eb:2a:7e:7c:fb:13:51:6e:57:25:74:03:20: d7:7a:3b:e6:b8:c1:ef:68:7c:4e:9d:35:fd:c6:98:b6:85:2f: c2:d6:36:57:7b:be:0f:80:1b:40:d6:71:e5:cd:ca:bc:76:02: 0b:92:21:f7:23:4a:02:a2:14:1b:b1:a2:86:6d:2c:7b:0b:97: 14:f0:6b:81:e3:77:31:96:45:54:25:43:b7:13:c8:92:95:75: ac:f9:7f:ce:9c:b9:39:97:4d:9c:ce:cf:74:16:67:7a:db:03: 67:a5:08:08:e6:a4:d3:da:ee:8a:3f:39:78:a0:2d:42:19:62: b9:29:39:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbNJY07uPUHRZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZDFjZjQ2OTYtNzgwMy00NDI4LTg2NjYtODIyNDdhOWMwYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38Ks0TPBSDDq0nxlfPYFotMN9fA/MyXoUyrK dEmuC3n9zdPhOsAH6iTt5pURbY4zf+0DD06LfRThG5P6BsUGyYTCNHVdZg2jBmKN YEB0/mgz6wFjeBFGkOizyKyGPPdDwVC32gQ78UMBcQAq0DU+6RsHeiPwlw7Q5YGh Si40XZC3Stl979STWNDW7neSqgU81OrHGkJfPDYw1AB/eOYnLRj1Jw5hYQ/LRQz/ g7Jtrs5s2CCTUNFW/M0u7TWrHbVdp3+UZV7MZF5YIEG3o70diYguIgGnAcfwC8VI h3CbDG1JlwOKv1gFj8OI1CIIshHZzinVrz/olMvHlFBlvhgJ5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl6QAl9mye5vExIhNv8D5lM8neaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDY0Mzg0NWQtYzFhZC0z MjkyLTgwYTItNDIxYzM5N2UzNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1uuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdaXxScV7fTr274V7mlSHYuJs9RXX3Lhg6sO/afN3pPs3+tdSKcdsYq VKrkn0Nay4LUNFOsr4cHsRVozXRiPQXVg8BnfBiw8wW+t/YVYA0CvrpqqHR5ld7w RE0i6FKPdpmsuMoLsJO/njyAdRZXCcqeUi+2BgKuT+3x/ufvnp28uoJ96yp+fPsT UW5XJXQDINd6O+a4we9ofE6dNf3GmLaFL8LWNld7vg+AG0DWceXNyrx2AguSIfcj SgKiFBuxooZtLHsLlxTwa4HjdzGWRVQlQ7cTyJKVdaz5f86cuTmXTZzOz3QWZ3rb A2elCAjmpNPa7oo/OXigLUIZYrkpOcw= -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:34 2025 by rpki-client