$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/547f8acc-0204-3056-b036-120e600acbd9.roa File: 547f8acc-0204-3056-b036-120e600acbd9.roa (raw, json) Hash identifier: 1H2nwOioZsdPzVweFSbUq1i1ZxciO76SYcBF/lj/PhI= Subject key identifier: 3C:7E:A5:59:87:75:D0:27:84:7A:62:FC:32:E1:34:F5:E3:99:31:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11DD9302C8D57C63AF280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/547f8acc-0204-3056-b036-120e600acbd9.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 75.89.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1d:d9:30:2c:8d:57:c6:3a:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=3d834a87-55e5-4a4d-b52c-173dadefaf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c8:a4:98:1d:78:5f:12:22:e7:d0:c0:ab:09: 48:5d:35:e3:10:1a:0f:e9:39:2e:c8:bf:cc:c3:ac: 73:c1:ad:d3:c0:1c:cd:ef:c4:1a:93:23:28:46:f7: db:21:a7:b1:9c:fd:e0:07:6c:f5:5c:4f:bd:c9:67: 2e:31:a1:3f:f2:7a:f6:f1:e6:a5:6c:4b:7d:79:af: 91:05:e7:b6:de:28:49:59:d3:c2:a9:98:61:8c:bf: ac:a4:0c:8a:68:48:ce:ef:58:19:a4:2c:30:e0:5e: 76:73:a6:6c:58:e8:e8:44:cf:7d:c7:bb:e0:12:fa: ff:91:8e:6e:56:00:e5:61:8d:19:be:14:e0:1e:3a: 94:2f:36:bf:2c:a9:e0:e8:9d:70:3e:02:b2:d9:e6: b4:4e:51:bb:47:33:ef:81:19:39:b4:89:a7:8a:b5: c4:c2:70:1b:da:f7:ed:24:c0:ca:1d:f1:8f:7e:ae: de:7e:d7:4e:c2:ac:31:bc:12:6e:92:35:da:92:93: 28:94:ec:f7:2b:1f:d5:fb:e9:57:4a:4e:7c:18:74: d5:9e:92:ef:3b:bc:ea:78:40:db:2c:a5:51:a6:db: b9:fa:13:b5:df:55:ca:e7:eb:b4:a7:0d:ac:ea:bb: 03:35:d5:34:9a:39:b3:4a:3e:ea:4a:7c:21:e6:7d: 57:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7E:A5:59:87:75:D0:27:84:7A:62:FC:32:E1:34:F5:E3:99:31:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/547f8acc-0204-3056-b036-120e600acbd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6c:85:42:04:03:3c:9d:fc:86:dc:81:64:08:5d:ff:f4:64: b6:e1:ba:8d:85:e6:d6:cc:5a:7a:eb:0e:db:80:39:cc:bc:ae: c6:0d:db:0b:2d:39:90:ff:ad:da:59:95:12:4d:60:fb:63:d5: 57:86:fb:c4:c0:fd:9b:1c:8c:de:9c:9f:dc:40:b9:b9:13:9b: e0:b9:fd:ec:d8:dd:ce:cc:7d:13:fa:3d:d8:3a:82:e1:b9:15: cc:9a:7a:67:e3:d8:e4:59:bb:a6:a2:4d:80:00:65:0a:3b:01: b0:94:b9:a1:3f:81:47:9d:43:c9:57:4d:45:d2:eb:b5:2e:94: c3:a5:10:31:f3:cd:56:42:e3:a1:75:16:a6:a6:dd:94:e1:11: cf:e6:a4:a7:3c:3f:3d:1c:58:d1:6a:0c:32:9c:06:5f:95:c3: b0:d8:1a:0a:aa:6f:79:ab:5a:59:35:7d:19:b9:97:b3:cc:ee: 0f:02:4a:c7:91:c3:e4:00:b4:cc:10:d1:83:46:7d:dd:d6:64: d5:5c:ed:0e:db:d3:84:97:fd:3f:81:f9:e0:e4:d5:a6:bd:7f: 2b:38:d3:42:2d:45:6d:12:2e:a0:7b:e3:fd:76:38:ce:cd:65: 76:6d:56:0c:73:bc:da:48:e5:13:f3:d7:39:da:17:eb:bc:f6: 00:cf:d6:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R3ZMCyNV8Y68oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk M2Q4MzRhODctNTVlNS00YTRkLWI1MmMtMTczZGFkZWZhZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMikmB14XxIi59DAqwlIXTXjEBoP6TkuyL/M w6xzwa3TwBzN78QakyMoRvfbIaexnP3gB2z1XE+9yWcuMaE/8nr28ealbEt9ea+R Bee23ihJWdPCqZhhjL+spAyKaEjO71gZpCww4F52c6ZsWOjoRM99x7vgEvr/kY5u VgDlYY0ZvhTgHjqULza/LKng6J1wPgKy2ea0TlG7RzPvgRk5tImnirXEwnAb2vft JMDKHfGPfq7eftdOwqwxvBJukjXakpMolOz3Kx/V++lXSk58GHTVnpLvO7zqeEDb LKVRptu5+hO131XK5+u0pw2s6rsDNdU0mjmzSj7qSnwh5n1X0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx+pVmHddAnhHpi/DLhNPXjmTFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQ3ZjhhY2MtMDIwNC0z MDU2LWIwMzYtMTIwZTYwMGFjYmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1meMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBshUIEAzyd/IbcgWQIXf/0ZLbhuo2F5tbMWnrrDtuAOcy8rsYN2wst OZD/rdpZlRJNYPtj1VeG+8TA/ZscjN6cn9xAubkTm+C5/ezY3c7MfRP6Pdg6guG5 Fcyaemfj2ORZu6aiTYAAZQo7AbCUuaE/gUedQ8lXTUXS67UulMOlEDHzzVZC46F1 Fqam3ZThEc/mpKc8Pz0cWNFqDDKcBl+Vw7DYGgqqb3mrWlk1fRm5l7PM7g8CSseR w+QAtMwQ0YNGfd3WZNVc7Q7b04SX/T+B+eDk1aa9fys400ItRW0SLqB74/12OM7N ZXZtVgxzvNpI5RPz1znaF+u89gDP1pE= -----END CERTIFICATE-----Generated at Fri Mar 14 08:35:54 2025 by rpki-client