$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/859301af-5705-36e9-8e7f-47e470dd4c4c.roa File: 859301af-5705-36e9-8e7f-47e470dd4c4c.roa (raw, json) Hash identifier: GEfHXr4sxm5CUSKhYLUM8hDWfq1eUTdUQf+O6fPaQLI= Subject key identifier: E7:F8:EC:5C:43:8B:98:C4:0C:D9:D4:A0:06:88:9A:87:9A:35:12:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716AFC1A14468A261459C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/859301af-5705-36e9-8e7f-47e470dd4c4c.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.90.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:6a:fc:1a:14:46:8a:26:14:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=56235626-5f5b-4201-b822-60bcea02bc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0a:c2:51:9c:50:02:9c:28:72:57:fa:f8:8a: e3:08:c2:5b:c7:1c:b1:41:82:ce:66:73:ad:33:36: aa:79:ea:85:9a:a6:bd:4f:0d:2e:72:17:36:05:c1: 21:d0:54:66:2b:0a:ac:49:6a:3e:19:66:aa:a9:a6: e3:98:31:d3:94:4e:9d:f4:02:b2:4f:3b:94:8b:43: 85:0b:7d:41:6b:6e:2a:94:78:ee:01:ca:e9:ea:d2: e7:4a:41:6a:87:8a:7e:87:31:3a:ed:47:5f:01:10: 52:4f:3b:c3:df:e7:c5:a9:cd:89:d1:4d:d1:cd:21: be:cd:47:81:53:e3:a1:c9:13:8b:35:84:1a:79:91: c3:88:80:0c:27:c7:6d:44:bf:c7:37:84:91:4e:af: 97:ca:ad:e3:66:de:3b:78:79:5e:2e:0b:08:8f:65: 3a:fb:17:33:5b:8e:6a:8c:0d:27:d9:f2:fe:31:eb: c0:39:1c:15:a2:8d:ce:15:3f:b2:a6:a1:94:da:73: 39:51:fc:c5:e1:5f:9d:ee:ae:7c:14:92:a6:b5:20: d0:9b:57:4e:36:91:9f:9a:6d:99:43:18:b2:33:af: 69:99:50:13:3a:31:60:18:d8:b6:2d:ee:43:37:49: cd:12:3b:e3:b4:58:22:48:e9:7a:7c:76:a6:36:fe: bd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F8:EC:5C:43:8B:98:C4:0C:D9:D4:A0:06:88:9A:87:9A:35:12:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/859301af-5705-36e9-8e7f-47e470dd4c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8c:96:2f:bb:26:8b:53:7b:61:47:fa:ed:0f:87:6a:1c:bb: 9a:fa:f4:82:7d:f7:72:5a:7d:6e:8e:42:b1:6c:3b:40:20:2c: ab:9e:8f:a2:b8:05:da:0d:d8:93:5f:fa:98:01:a6:d2:ba:52: 90:85:35:f0:17:0e:67:ba:db:1e:32:14:18:29:5b:db:ab:a9: e7:22:ba:0b:18:38:93:ca:96:05:a9:33:ea:82:f2:65:0f:ae: eb:e5:ac:85:1a:a3:bc:d1:24:83:02:01:43:d0:43:1e:83:55: a0:7a:6b:14:4e:4e:5e:37:04:8a:4a:ac:a0:99:d3:fb:21:3c: 38:0f:29:3f:db:e3:b2:05:da:8c:da:a3:6b:6f:0c:86:55:45: 34:85:a4:46:49:96:2c:14:0e:76:85:28:c4:2f:e5:09:c0:a9: 54:57:65:ac:c2:32:90:d8:bf:07:b6:fa:4a:88:9e:41:45:38: c2:a0:13:d6:06:51:58:19:4a:3b:91:a4:83:7d:86:e0:5a:65: 34:0f:6b:19:41:78:4c:3f:6f:41:90:b1:a6:38:9c:07:d7:dd: 5e:ce:e3:4b:60:3b:b6:f2:ad:7a:29:ae:3b:ce:46:e1:f9:4f: fa:1e:6a:22:ac:19:c7:4e:f1:66:4d:8e:ed:a2:7f:00:0e:35: 96:97:39:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWr8GhRGiiYUWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NTYyMzU2MjYtNWY1Yi00MjAxLWI4MjItNjBiY2VhMDJiYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwrCUZxQApwoclf6+IrjCMJbxxyxQYLOZnOt MzaqeeqFmqa9Tw0uchc2BcEh0FRmKwqsSWo+GWaqqabjmDHTlE6d9AKyTzuUi0OF C31Ba24qlHjuAcrp6tLnSkFqh4p+hzE67UdfARBSTzvD3+fFqc2J0U3RzSG+zUeB U+OhyROLNYQaeZHDiIAMJ8dtRL/HN4SRTq+Xyq3jZt47eHleLgsIj2U6+xczW45q jA0n2fL+MevAORwVoo3OFT+ypqGU2nM5UfzF4V+d7q58FJKmtSDQm1dONpGfmm2Z QxiyM69pmVATOjFgGNi2Le5DN0nNEjvjtFgiSOl6fHamNv69NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOf47FxDi5jEDNnUoAaImoeaNRIfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODU5MzAxYWYtNTcwNS0z NmU5LThlN2YtNDdlNDcwZGQ0YzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCMli+7JotTe2FH+u0Ph2ocu5r69IJ993JafW6OQrFsO0AgLKuej6K4 BdoN2JNf+pgBptK6UpCFNfAXDme62x4yFBgpW9urqeciugsYOJPKlgWpM+qC8mUP ruvlrIUao7zRJIMCAUPQQx6DVaB6axROTl43BIpKrKCZ0/shPDgPKT/b47IF2oza o2tvDIZVRTSFpEZJliwUDnaFKMQv5QnAqVRXZazCMpDYvwe2+kqInkFFOMKgE9YG UVgZSjuRpIN9huBaZTQPaxlBeEw/b0GQsaY4nAfX3V7O40tgO7byrXoprjvORuH5 T/oeaiKsGcdO8WZNju2ifwAONZaXOZ8= -----END CERTIFICATE-----Generated at Sun Apr 13 04:03:48 2025 by rpki-client