$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5958b06f-882f-37fc-a60c-23836249aceb.roa File: 5958b06f-882f-37fc-a60c-23836249aceb.roa (raw, json) Hash identifier: SaZALvef4ySBaoz9Lb2QPDtqH0GBvJOI/AQ/ZZ2yqGw= Subject key identifier: DF:9D:2A:4C:9E:73:5D:CD:C2:B0:1E:75:AA:CD:FB:A1:13:0A:9E:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C227F1A64B17E75149900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5958b06f-882f-37fc-a60c-23836249aceb.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 75.88.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:22:7f:1a:64:b1:7e:75:14:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=33aeb3a3-a024-4154-975c-5a207f1cd4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:e4:99:8a:9b:5a:2a:e0:8d:0e:8e:9d:c3: d2:ba:19:e9:50:17:37:f8:4b:75:a0:2e:70:19:a7: 44:04:2b:e1:cd:0b:a6:f0:f1:10:52:0f:05:2e:45: dc:09:aa:bf:87:a0:4c:66:65:f2:8c:3f:2e:4c:df: a4:cf:0c:03:ae:54:f6:34:79:e0:70:1b:d9:28:9c: cd:30:74:bb:11:64:f1:85:93:79:f4:8b:a8:28:49: a7:20:bf:8c:fe:06:de:4e:45:da:e2:a0:66:a6:8e: 0e:d7:d2:96:1b:2f:cd:23:bf:3c:8d:8c:a4:fd:fe: 62:be:6d:ae:b9:01:8d:4f:be:80:fe:2f:15:a5:5e: 65:5e:ea:b3:20:aa:24:78:f0:1b:ca:96:ff:bf:77: 40:43:b2:f4:1d:c6:26:c6:cc:46:26:38:14:12:a9: 91:66:85:13:9a:48:53:85:f8:fd:bc:e7:45:f0:0e: 60:d7:d9:44:12:66:e6:8f:93:b3:4d:aa:70:fd:39: 69:47:bb:30:45:80:96:70:e9:c4:bd:b7:2e:45:aa: eb:b2:2a:1e:15:90:03:28:f2:54:25:24:94:ac:c4: 83:5b:a9:88:2f:65:71:01:cb:19:e9:d5:09:17:34: 68:83:c7:54:ca:ea:2a:58:6a:3f:d4:6b:f1:4c:71: 63:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9D:2A:4C:9E:73:5D:CD:C2:B0:1E:75:AA:CD:FB:A1:13:0A:9E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5958b06f-882f-37fc-a60c-23836249aceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b0:9e:be:26:39:59:ae:29:d4:f9:cc:0e:ee:65:70:c0:ad: 96:8f:af:2b:7c:bb:f8:c3:88:c3:4f:35:53:79:37:6c:29:e9: 82:80:0a:49:b7:74:00:99:36:80:12:9c:f4:61:51:6e:81:63: 36:6c:9e:76:2e:f7:cb:54:30:72:1a:e4:bc:0d:7f:db:92:9c: 55:fb:f2:cb:97:48:45:f3:cf:67:c3:34:04:98:1d:92:fe:8e: 26:88:7f:12:d6:e5:7f:0d:1b:e3:87:a5:bd:66:2b:29:b7:ea: dc:74:ce:f7:4f:e5:97:30:d7:f4:d3:4c:d2:12:72:30:cd:9a: b5:64:2a:b8:57:9b:7a:20:dc:5d:20:36:75:29:92:c7:60:89: 23:51:c5:7d:69:38:62:11:b8:70:a3:28:ea:c0:6e:6b:81:da: 75:42:6f:13:80:0c:d7:e9:b7:e8:11:fd:99:e5:72:ca:9e:22: e0:fa:32:64:c0:59:c0:ac:36:76:a5:61:f7:8f:d0:0a:dd:6f: 12:d3:df:82:eb:a3:3b:59:e0:86:c3:12:33:8c:f6:90:ba:c7: 61:40:e4:f0:32:ce:c6:47:4c:49:1d:a5:17:d7:18:31:34:d7: d4:f1:48:0e:38:d9:c4:a7:aa:f5:35:6a:77:d3:fa:ef:ad:5e: 69:ff:87:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCJ/GmSxfnUUmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MzNhZWIzYTMtYTAyNC00MTU0LTk3NWMtNWEyMDdmMWNkNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOnkmYqbWirgjQ6OncPSuhnpUBc3+Et1oC5w GadEBCvhzQum8PEQUg8FLkXcCaq/h6BMZmXyjD8uTN+kzwwDrlT2NHngcBvZKJzN MHS7EWTxhZN59IuoKEmnIL+M/gbeTkXa4qBmpo4O19KWGy/NI788jYyk/f5ivm2u uQGNT76A/i8VpV5lXuqzIKokePAbypb/v3dAQ7L0HcYmxsxGJjgUEqmRZoUTmkhT hfj9vOdF8A5g19lEEmbmj5OzTapw/TlpR7swRYCWcOnEvbcuRarrsioeFZADKPJU JSSUrMSDW6mIL2VxAcsZ6dUJFzRog8dUyuoqWGo/1GvxTHFjVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+dKkyec13NwrAedarN+6ETCp5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTk1OGIwNmYtODgyZi0z N2ZjLWE2MGMtMjM4MzYyNDlhY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1j4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISwnr4mOVmuKdT5zA7uZXDArZaPryt8u/jDiMNPNVN5N2wp6YKACkm3 dACZNoASnPRhUW6BYzZsnnYu98tUMHIa5LwNf9uSnFX78suXSEXzz2fDNASYHZL+ jiaIfxLW5X8NG+OHpb1mKym36tx0zvdP5Zcw1/TTTNIScjDNmrVkKrhXm3og3F0g NnUpksdgiSNRxX1pOGIRuHCjKOrAbmuB2nVCbxOADNfpt+gR/ZnlcsqeIuD6MmTA WcCsNnalYfeP0ArdbxLT34LroztZ4IbDEjOM9pC6x2FA5PAyzsZHTEkdpRfXGDE0 19TxSA442cSnqvU1anfT+u+tXmn/hxo= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:18 2025 by rpki-client