$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66a3b706-eb8a-3b61-a47b-e699f19ff60a.roa File: 66a3b706-eb8a-3b61-a47b-e699f19ff60a.roa (raw, json) Hash identifier: ve2WhUulsJ8L48v1F9lKCFDiKO6O7JuZvU15E8IsAOM= Subject key identifier: 88:5E:A3:1D:0B:C6:F2:DC:CF:13:96:5F:EF:DA:83:22:7C:1B:D2:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11A7C53AC8194FDCF1EE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66a3b706-eb8a-3b61-a47b-e699f19ff60a.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 75.91.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1a:7c:53:ac:81:94:fd:cf:1e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=42d42571-2af5-4900-b220-b23adc600aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:62:51:30:a0:5e:6f:64:e3:44:90:94:cf: 86:7b:8f:a6:f4:62:49:67:f6:2c:ad:e6:b1:71:6e: fa:10:ff:b3:e3:4b:94:1e:0a:ff:8f:34:fb:57:76: c1:1f:a0:71:57:ff:33:b2:9a:ac:b1:11:e1:20:2c: 84:1d:16:d4:d4:98:ba:25:72:29:75:a3:de:af:93: 50:e7:d6:30:b0:c6:db:78:54:a8:64:21:f8:5d:fc: 6c:60:fb:6a:c4:9c:9e:71:e9:ab:1e:22:65:d5:aa: 72:08:9a:c8:25:1c:e2:63:f0:8d:02:24:01:b0:22: 34:e2:75:e2:00:2c:02:ce:25:96:ac:3d:8e:d1:64: 6d:d8:a4:e6:38:fd:52:a0:70:98:fb:11:6b:bf:09: 4e:f7:92:58:fe:d4:5f:4b:02:91:c1:d9:da:e1:db: 88:51:c3:c2:b5:de:17:30:2a:bb:a7:7d:d4:7c:16: 58:a1:34:b9:4c:e6:73:61:cb:ad:5b:28:10:e9:f8: de:2e:ca:99:8c:27:a4:09:90:5f:e4:77:bd:be:6b: 22:b8:87:ef:13:d1:62:81:9c:20:cf:1a:4b:67:c6: 10:75:08:d5:8c:69:03:ea:e0:7c:b5:cf:8a:2c:91: 29:54:e7:b5:4c:44:21:59:b3:17:73:45:99:63:60: f2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5E:A3:1D:0B:C6:F2:DC:CF:13:96:5F:EF:DA:83:22:7C:1B:D2:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66a3b706-eb8a-3b61-a47b-e699f19ff60a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d1:dd:8b:8e:33:ca:1c:72:0f:e7:53:d2:57:a3:a5:13:06: 87:14:4d:1e:74:da:ed:43:cf:fc:dd:b9:1b:8b:de:6b:17:90: ce:e5:9c:6b:f5:46:4c:57:5e:97:db:00:8c:cf:32:5f:44:ed: 5b:e4:a0:8a:93:a6:df:22:7d:c1:30:0b:b1:2e:84:cd:fb:92: 08:b0:50:02:b0:19:6b:44:30:c9:44:91:c7:3c:6a:34:38:0b: 4c:76:ad:b6:7e:6e:5b:89:dc:90:2e:b3:fe:a6:6b:c1:cd:04: 35:a5:f4:4c:64:12:3a:fd:d0:3d:81:67:cc:ed:c6:68:3f:66: 51:fa:44:6d:76:2f:f9:a0:7e:f7:a0:49:54:68:c6:4a:e7:07: 74:9c:5a:45:60:73:37:b3:82:69:e7:a9:6c:a3:11:de:00:82: 62:22:3c:19:10:2d:eb:c3:3d:17:28:56:ab:77:e8:86:06:08: 4d:c7:53:0e:8e:69:0d:28:bd:c7:dc:30:99:78:da:d8:03:8b: 64:2c:c6:ec:15:31:e4:37:b9:90:d1:a8:9d:57:82:d0:bf:43: 74:2d:01:38:fd:78:56:9e:c5:bf:28:cb:f4:7a:73:08:d7:5b: 6b:f5:4d:61:c9:86:38:b7:d7:1a:26:12:68:40:91:3f:c7:ce: 6b:81:09:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Rp8U6yBlP3PHuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NDJkNDI1NzEtMmFmNS00OTAwLWIyMjAtYjIzYWRjNjAwYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDliUTCgXm9k40SQlM+Ge4+m9GJJZ/Ysreax cW76EP+z40uUHgr/jzT7V3bBH6BxV/8zspqssRHhICyEHRbU1Ji6JXIpdaPer5NQ 59YwsMbbeFSoZCH4XfxsYPtqxJyecemrHiJl1apyCJrIJRziY/CNAiQBsCI04nXi ACwCziWWrD2O0WRt2KTmOP1SoHCY+xFrvwlO95JY/tRfSwKRwdna4duIUcPCtd4X MCq7p33UfBZYoTS5TOZzYcutWygQ6fjeLsqZjCekCZBf5He9vmsiuIfvE9FigZwg zxpLZ8YQdQjVjGkD6uB8tc+KLJEpVOe1TEQhWbMXc0WZY2DyQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIheox0LxvLczxOWX+/agyJ8G9JEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjZhM2I3MDYtZWI4YS0z YjYxLWE0N2ItZTY5OWYxOWZmNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1vAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3R3YuOM8occg/nU9JXo6UTBocUTR502u1Dz/zduRuL3msXkM7lnGv1 RkxXXpfbAIzPMl9E7VvkoIqTpt8ifcEwC7EuhM37kgiwUAKwGWtEMMlEkcc8ajQ4 C0x2rbZ+bluJ3JAus/6ma8HNBDWl9ExkEjr90D2BZ8ztxmg/ZlH6RG12L/mgfveg SVRoxkrnB3ScWkVgczezgmnnqWyjEd4AgmIiPBkQLevDPRcoVqt36IYGCE3HUw6O aQ0ovcfcMJl42tgDi2QsxuwVMeQ3uZDRqJ1XgtC/Q3QtATj9eFaexb8oy/R6cwjX W2v1TWHJhji31xomEmhAkT/HzmuBCbE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:03 2025 by rpki-client