$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa File: 549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa (raw, json) Hash identifier: 0Vc0XUJqtrU2uw8/h9dD7QZP3qxS0x6P/4DKOWSWdg0= Subject key identifier: 42:5C:AC:34:49:C4:E3:E7:D0:E3:28:51:85:0C:74:76:78:2C:89:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11E048E1BBA2CB4106580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 75.91.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1e:04:8e:1b:ba:2c:b4:10:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=2fc918a8-6242-421a-a446-0548e00ceea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:96:98:65:e3:00:76:54:1f:bd:86:fc:fa:f1: 4b:8d:9f:03:db:6c:c1:d0:31:c3:da:14:c7:55:bd: 1d:e9:e1:17:b8:73:fc:fb:d6:5e:af:dd:d5:16:b7: a7:97:d9:e4:3d:24:1b:e1:4c:68:a9:dd:3d:b9:0c: 44:35:69:cd:9c:3e:ab:3d:03:7e:4c:79:01:cf:d9: 23:5f:a4:2a:d3:0f:2d:87:bb:8f:88:dc:4c:24:3e: f5:80:32:e6:2f:be:3d:69:5f:ec:48:e3:39:fe:38: 96:94:62:9b:48:b0:d8:8a:99:17:a7:46:6c:11:3d: d2:29:fe:8a:41:37:3b:26:92:cd:f1:e7:11:81:67: ff:d9:54:84:55:96:9a:55:ee:30:2a:b2:75:f8:b1: 21:92:5d:8f:1f:f0:f6:5c:a6:de:7b:9f:c9:b1:6b: 51:e9:e4:3f:3e:c6:49:dc:d4:c6:03:05:d8:31:fc: fd:1b:40:9a:cf:75:24:45:d6:a1:79:19:10:fd:8c: c5:53:a1:66:9b:ad:64:5e:68:11:c0:38:9c:f0:3a: 41:a8:95:47:99:db:11:6a:ad:04:fb:fa:8b:ed:5f: ae:52:54:e9:4f:03:ef:1c:a4:84:b1:ac:08:59:2e: 44:89:c8:bf:41:e2:99:1a:58:b6:53:f2:1b:f7:ec: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5C:AC:34:49:C4:E3:E7:D0:E3:28:51:85:0C:74:76:78:2C:89:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:88:52:16:21:00:44:65:16:c7:75:e3:f6:5b:8a:41:a2:52: 75:b9:e8:29:0a:eb:4b:46:bd:5d:0c:60:69:2f:04:28:f3:16: 32:9a:84:4a:83:78:bf:a8:ce:ec:c4:c3:50:21:87:28:1a:e2: 84:4d:7d:0f:6b:27:ef:54:0f:90:aa:fc:49:da:24:98:94:32: fc:6f:f1:92:e4:c6:cd:16:25:37:aa:0a:a6:17:f8:34:eb:89: 9d:ac:b2:80:1a:8f:45:9a:e4:14:93:43:fc:18:d0:69:b1:7a: 16:81:8d:e6:8f:04:bf:6c:e4:93:72:d0:12:9b:d9:20:01:0d: be:0b:58:00:24:2a:73:f5:0d:65:e4:b6:4d:3d:5a:86:ff:42: b8:cf:23:31:e1:3b:35:eb:46:8c:48:61:7e:ba:95:14:db:b1: e7:1a:2c:42:58:42:04:b0:7f:27:ca:57:c8:b0:0b:8d:c3:93: c1:76:f8:21:7f:cf:c8:ff:71:f1:0a:00:e1:c7:83:0c:16:f6: 87:67:ef:c1:ac:9c:2e:f2:da:13:3b:23:57:94:ce:6c:32:4a: 55:98:88:2b:aa:8f:79:78:37:18:8c:50:4a:8a:d7:05:8a:6a: 55:8d:2c:c9:99:8a:68:ce:0f:3f:f2:7f:54:1a:bf:19:6e:04: 2d:f9:03:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R4Ejhu6LLQQZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MmZjOTE4YTgtNjI0Mi00MjFhLWE0NDYtMDU0OGUwMGNlZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpaYZeMAdlQfvYb8+vFLjZ8D22zB0DHD2hTH Vb0d6eEXuHP8+9Zer93VFrenl9nkPSQb4Uxoqd09uQxENWnNnD6rPQN+THkBz9kj X6Qq0w8th7uPiNxMJD71gDLmL749aV/sSOM5/jiWlGKbSLDYipkXp0ZsET3SKf6K QTc7JpLN8ecRgWf/2VSEVZaaVe4wKrJ1+LEhkl2PH/D2XKbee5/JsWtR6eQ/PsZJ 3NTGAwXYMfz9G0Caz3UkRdaheRkQ/YzFU6Fmm61kXmgRwDic8DpBqJVHmdsRaq0E +/qL7V+uUlTpTwPvHKSEsawIWS5Eici/QeKZGli2U/Ib9+yYjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJcrDRJxOPn0OMoUYUMdHZ4LIm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQ5ZDc0ZTMtZjYyNS0z ZWYzLTk2YmUtNWE2YmZmN2JiMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1uUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuIUhYhAERlFsd14/ZbikGiUnW56CkK60tGvV0MYGkvBCjzFjKahEqD eL+ozuzEw1Ahhyga4oRNfQ9rJ+9UD5Cq/EnaJJiUMvxv8ZLkxs0WJTeqCqYX+DTr iZ2ssoAaj0Wa5BSTQ/wY0GmxehaBjeaPBL9s5JNy0BKb2SABDb4LWAAkKnP1DWXk tk09Wob/QrjPIzHhOzXrRoxIYX66lRTbsecaLEJYQgSwfyfKV8iwC43Dk8F2+CF/ z8j/cfEKAOHHgwwW9odn78GsnC7y2hM7I1eUzmwySlWYiCuqj3l4NxiMUEqK1wWK alWNLMmZimjODz/yf1QavxluBC35AyM= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:34 2025 by rpki-client