$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7986458b-e84b-3512-9ddf-5e50861d6ade.roa File: 7986458b-e84b-3512-9ddf-5e50861d6ade.roa (raw, json) Hash identifier: JvY1h8KZ2d+PWxlePZD5wjTifAEEJbMxjgnRSYLnou4= Subject key identifier: 87:45:EB:A8:6E:38:16:CD:9B:CB:45:74:C9:AD:BF:B6:10:16:B9:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F0EAFDDA4C4E8ADA8F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7986458b-e84b-3512-9ddf-5e50861d6ade.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.91.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f0:ea:fd:da:4c:4e:8a:da:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=d6df58d0-f3f9-4878-a354-244406b305f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:40:7f:17:09:60:fb:e1:32:1a:b4:1b:c1: 35:a8:af:73:1b:ab:64:19:94:72:80:4a:b0:3b:7d: 8b:c0:7f:0a:9d:72:1b:eb:2a:d7:ec:0c:59:d7:39: e2:87:aa:13:ae:a8:b9:0c:29:03:e3:3d:ed:55:c9: 71:3b:5a:ff:8f:33:d1:e1:32:66:65:c0:f7:48:31: ae:aa:ee:f5:6d:fc:8c:59:a2:be:05:43:65:3a:f1: 1d:ab:b6:4d:91:21:90:99:4c:70:4e:e2:44:62:9b: 70:9f:1d:a7:af:42:a6:ae:9b:44:09:fc:98:61:6d: 73:3b:10:5b:96:05:0c:12:82:95:56:af:73:96:ab: a6:9b:d2:a8:1d:b7:41:42:18:f2:4f:75:27:59:0a: 51:e4:8f:57:d3:37:df:d2:85:23:f5:46:32:1a:b2: af:bb:ff:8d:f2:38:90:51:53:6b:28:68:46:a2:74: 16:e0:b4:88:94:d4:cc:fb:da:d0:0d:24:c1:49:77: 7d:d5:6b:fd:5d:e7:d4:e5:ac:b5:9e:55:18:49:bb: df:b9:db:9a:e1:6b:4c:a2:e4:64:68:5b:61:ae:ae: c9:2c:74:da:47:89:80:b9:3a:d0:4c:68:48:99:e8: e3:00:2e:34:ba:e6:70:a1:fe:60:23:10:ee:cd:21: d1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:45:EB:A8:6E:38:16:CD:9B:CB:45:74:C9:AD:BF:B6:10:16:B9:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7986458b-e84b-3512-9ddf-5e50861d6ade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9e:a8:bb:71:65:8f:9c:9e:63:56:40:45:43:d4:9d:fa:66: 52:45:75:9a:b5:80:36:a1:a3:89:b7:58:ae:d8:87:3a:86:45: 7b:e9:b1:fc:f1:60:58:91:0b:15:0e:30:ee:0f:cf:f6:1b:26: bd:31:b4:73:16:10:d9:4b:ba:e2:99:9e:f1:80:01:87:89:7c: 7f:8f:ec:73:e9:6d:7c:b6:57:d1:05:01:81:65:72:31:cb:9c: e3:82:03:8a:a5:4a:86:aa:63:61:81:81:af:d8:80:fa:bf:73: 10:12:19:30:b0:15:c8:6b:cf:15:67:4b:a0:be:57:9c:db:19: df:92:b6:b5:25:bb:0f:4c:5d:db:ac:71:bd:07:69:ea:aa:c4: e1:a1:0b:77:e9:9f:13:12:c6:0c:26:ca:b4:ed:e8:7f:db:8e: bb:9d:4c:da:e0:db:2b:11:98:fd:d9:6d:13:60:60:df:6e:45: 10:24:a0:2a:8c:f4:68:4b:c0:05:ec:b5:86:b7:f5:58:42:b3: 36:97:b4:2d:ea:c6:e3:94:0b:97:7c:cf:56:d8:e0:d8:c0:b7: e7:94:11:1e:64:06:98:a7:e2:ca:7a:ce:9e:b0:96:96:b4:05: ef:8c:21:8c:28:5d:60:7f:fc:e0:9c:db:89:7f:e2:51:83:17: 82:e8:a1:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPDq/dpMToraj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDZkZjU4ZDAtZjNmOS00ODc4LWEzNTQtMjQ0NDA2YjMwNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGZAfxcJYPvhMhq0G8E1qK9zG6tkGZRygEqw O32LwH8KnXIb6yrX7AxZ1znih6oTrqi5DCkD4z3tVclxO1r/jzPR4TJmZcD3SDGu qu71bfyMWaK+BUNlOvEdq7ZNkSGQmUxwTuJEYptwnx2nr0KmrptECfyYYW1zOxBb lgUMEoKVVq9zlqumm9KoHbdBQhjyT3UnWQpR5I9X0zff0oUj9UYyGrKvu/+N8jiQ UVNrKGhGonQW4LSIlNTM+9rQDSTBSXd91Wv9XefU5ay1nlUYSbvfudua4WtMouRk aFthrq7JLHTaR4mAuTrQTGhImejjAC40uuZwof5gIxDuzSHRwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdF66huOBbNm8tFdMmtv7YQFrnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzk4NjQ1OGItZTg0Yi0z NTEyLTlkZGYtNWU1MDg2MWQ2YWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISeqLtxZY+cnmNWQEVD1J36ZlJFdZq1gDaho4m3WK7YhzqGRXvpsfzx YFiRCxUOMO4Pz/YbJr0xtHMWENlLuuKZnvGAAYeJfH+P7HPpbXy2V9EFAYFlcjHL nOOCA4qlSoaqY2GBga/YgPq/cxASGTCwFchrzxVnS6C+V5zbGd+StrUluw9MXdus cb0HaeqqxOGhC3fpnxMSxgwmyrTt6H/bjrudTNrg2ysRmP3ZbRNgYN9uRRAkoCqM 9GhLwAXstYa39VhCszaXtC3qxuOUC5d8z1bY4NjAt+eUER5kBpin4sp6zp6wlpa0 Be+MIYwoXWB//OCc24l/4lGDF4LoofA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:28 2025 by rpki-client