$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5206a7d8-9dde-3613-bfee-14c20338d4d3.roa File: 5206a7d8-9dde-3613-bfee-14c20338d4d3.roa (raw, json) Hash identifier: GEm4WuSmWgrpvm/4DRHPJ2KgIygbR9IDszfG4S01r1o= Subject key identifier: AB:EB:F8:06:5D:F8:FC:22:44:A9:55:13:63:37:FB:19:A7:89:5D:B7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA74ECC6950D71D3E0A980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5206a7d8-9dde-3613-bfee-14c20338d4d3.roa Signing time: Thu 20 Feb 2025 18:15:57 +0000 ROA not before: Thu 20 Feb 2025 18:15:57 +0000 ROA not after: Wed 21 May 2025 17:15:57 +0000 asID: 7029 IP address blocks: 75.89.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:74:ec:c6:95:0d:71:d3:e0:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:57 2025 GMT Not After : May 21 17:15:57 2025 GMT Subject: CN=dc935e8c-9dba-44f9-ab87-c8cfb59e7ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2e:0d:43:68:84:70:f7:11:e4:7b:fe:2c:8c: 66:4e:48:ca:e3:dd:9a:76:2f:49:24:4f:cb:e4:ae: 87:ff:0d:58:20:32:a3:3d:c0:2a:18:02:4b:f5:a8: 26:0f:35:88:0e:09:6d:83:50:02:0a:72:dc:b2:a3: 1e:4f:23:df:3f:c2:6c:c8:8c:f8:df:3e:f3:b0:74: 90:b2:3d:d8:ef:3f:50:3c:dd:f7:aa:53:b3:c0:a0: d1:e8:52:fa:83:40:bc:77:1b:59:f5:de:61:db:c1: fc:fb:7b:61:39:1e:e2:7a:c4:cd:07:59:19:9f:1c: 56:c2:0c:95:92:43:da:1f:15:e1:82:ff:6d:91:5e: 12:b8:92:de:af:1c:2c:a1:1b:76:3d:ce:12:6a:73: 1b:03:d7:49:2e:0e:a6:4e:7d:ca:a2:77:09:86:b0: 32:f3:38:d5:49:87:d9:8f:92:2c:63:ae:f1:b1:1a: 66:cd:c6:2b:53:90:04:14:c3:59:63:6a:cd:3a:db: dd:f7:f7:a8:f8:6f:d8:b9:be:a3:71:11:13:39:25: 4c:ae:f9:5b:b2:f7:fe:43:11:88:6d:80:0f:f4:5a: 90:24:a6:26:da:e0:93:1c:5e:3d:c5:c7:18:e2:71: 86:0c:4e:44:f8:96:56:48:26:96:90:e2:fe:54:de: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EB:F8:06:5D:F8:FC:22:44:A9:55:13:63:37:FB:19:A7:89:5D:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5206a7d8-9dde-3613-bfee-14c20338d4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1f:86:f9:c1:c3:0e:e2:a4:a8:bb:fc:f2:9d:b9:f9:c2:98: f4:5b:ea:36:66:cc:49:2b:4c:ed:10:74:15:7f:13:7b:30:99: 77:f4:72:43:8c:ae:4c:8d:ee:37:5e:bf:92:c6:c5:7a:8a:e1: 25:9b:c8:10:a4:76:59:17:68:e5:70:74:43:6c:8d:eb:93:5a: 90:75:d6:78:a5:26:dd:11:a5:e6:2c:ec:15:a4:75:00:e0:c2: ad:55:04:3b:7f:1e:16:f1:bb:f2:da:20:4f:24:81:14:37:99: 07:69:e6:eb:9f:87:73:0e:57:88:dd:05:eb:f5:ba:d6:97:2f: 1b:cd:0d:b0:c0:88:c9:01:57:15:f5:74:64:1f:bd:24:02:2c: af:db:7d:39:05:08:c6:5c:2e:cc:d7:6a:a2:c2:1d:98:33:66: 5b:17:7a:83:5d:15:2c:af:53:f1:79:bf:12:66:7f:af:96:11: 48:15:09:97:d3:9c:99:e1:ba:1a:ac:d9:31:2f:2d:9f:b7:9d: 1d:65:4f:ea:a2:43:ef:7b:c5:0d:0d:4f:72:73:cd:03:67:c2: f1:85:b4:46:26:ec:33:4c:6e:3d:05:60:54:5b:b2:e5:50:74: 0f:6c:e2:3f:28:d6:d1:9c:16:9b:06:67:dc:ef:1d:2d:e8:5f: 98:be:97:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqnTsxpUNcdPgqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTU1N1oXDTI1MDUyMTE3MTU1N1owLzEtMCsGA1UEAxMk ZGM5MzVlOGMtOWRiYS00NGY5LWFiODctYzhjZmI1OWU3ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7S4NQ2iEcPcR5Hv+LIxmTkjK492adi9JJE/L 5K6H/w1YIDKjPcAqGAJL9agmDzWIDgltg1ACCnLcsqMeTyPfP8JsyIz43z7zsHSQ sj3Y7z9QPN33qlOzwKDR6FL6g0C8dxtZ9d5h28H8+3thOR7iesTNB1kZnxxWwgyV kkPaHxXhgv9tkV4SuJLerxwsoRt2Pc4SanMbA9dJLg6mTn3KoncJhrAy8zjVSYfZ j5IsY67xsRpmzcYrU5AEFMNZY2rNOtvd9/eo+G/Yub6jcRETOSVMrvlbsvf+QxGI bYAP9FqQJKYm2uCTHF49xccY4nGGDE5E+JZWSCaWkOL+VN40hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvr+AZd+PwiRKlVE2M3+xmniV23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIwNmE3ZDgtOWRkZS0z NjEzLWJmZWUtMTRjMjAzMzhkNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1kwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYfhvnBww7ipKi7/PKdufnCmPRb6jZmzEkrTO0QdBV/E3swmXf0ckOM rkyN7jdev5LGxXqK4SWbyBCkdlkXaOVwdENsjeuTWpB11nilJt0RpeYs7BWkdQDg wq1VBDt/Hhbxu/LaIE8kgRQ3mQdp5uufh3MOV4jdBev1utaXLxvNDbDAiMkBVxX1 dGQfvSQCLK/bfTkFCMZcLszXaqLCHZgzZlsXeoNdFSyvU/F5vxJmf6+WEUgVCZfT nJnhuhqs2TEvLZ+3nR1lT+qiQ+97xQ0NT3JzzQNnwvGFtEYm7DNMbj0FYFRbsuVQ dA9s4j8o1tGcFpsGZ9zvHS3oX5i+l0U= -----END CERTIFICATE-----Generated at Sun Apr 6 07:29:27 2025 by rpki-client