$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ac1987c-f88d-3172-a637-1190e9dafcde.roa File: 8ac1987c-f88d-3172-a637-1190e9dafcde.roa (raw, json) Hash identifier: 9kkLA/nCfrCRVOfx1qKBdTtw9je2vSf78YrsnnsK05g= Subject key identifier: A1:AC:E3:DF:33:F8:07:BE:76:79:33:AD:7C:56:1A:E8:72:50:3E:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA5B3B75A34F95C2453B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ac1987c-f88d-3172-a637-1190e9dafcde.roa Signing time: Thu 20 Feb 2025 18:15:45 +0000 ROA not before: Thu 20 Feb 2025 18:15:45 +0000 ROA not after: Wed 21 May 2025 17:15:45 +0000 asID: 7029 IP address blocks: 75.91.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:5b:3b:75:a3:4f:95:c2:45:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:45 2025 GMT Not After : May 21 17:15:45 2025 GMT Subject: CN=e8fab178-77b9-4225-98d5-caccf18002bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8b:3b:28:ae:7e:30:5b:32:f9:74:b4:e8:1f: d5:80:0a:dc:48:44:62:77:b3:f8:fd:7d:59:73:bb: 90:b8:06:6c:7a:0a:1b:c8:39:63:7c:b7:63:3e:50: 18:6f:e1:d7:86:c3:34:ad:2d:d8:3d:5c:5e:47:77: bc:e6:af:ad:2a:01:40:ae:40:5b:22:c9:02:21:0e: ae:cc:89:54:a8:d1:5d:85:0d:52:53:ee:16:e7:bb: 7b:36:a9:81:2a:5b:03:1b:5f:f7:e0:be:27:aa:b9: b4:62:32:59:70:89:a1:16:cf:00:13:1f:83:1d:af: 6b:52:ac:40:78:46:32:5d:51:25:6e:d7:a7:d0:bb: 9f:18:51:cc:3d:fb:4c:6d:16:51:a7:c6:17:c8:91: a4:05:ba:70:d9:bb:67:ad:62:f5:e7:17:a5:53:4f: 04:a6:a0:58:cd:85:ff:12:ac:75:29:02:c4:5c:e8: 54:cd:d8:ff:eb:45:0d:99:0e:94:ba:15:ba:aa:89: 05:b7:d5:6e:d1:71:71:0c:99:46:fb:f8:13:5f:e5: dc:5c:71:5c:5a:ca:db:0e:76:0f:46:43:a4:91:74: 7e:54:58:00:bb:12:55:4c:22:61:ae:60:7f:89:a5: c0:39:6c:b1:65:4d:4d:89:58:bb:41:65:65:eb:59: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AC:E3:DF:33:F8:07:BE:76:79:33:AD:7C:56:1A:E8:72:50:3E:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ac1987c-f88d-3172-a637-1190e9dafcde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:18:7d:88:6a:09:af:48:7d:82:f0:f6:82:13:5e:f9:c8:7f: 69:57:b5:f2:29:36:39:8e:77:d3:0b:be:d5:96:02:98:24:86: 88:e6:72:ce:7f:53:50:2f:eb:9b:de:f6:a5:88:de:c5:f1:d9: f2:86:10:1b:88:42:9d:7d:aa:61:24:33:91:6d:80:71:36:94: 0c:c0:4d:e1:f1:81:88:2f:22:5e:c9:52:0f:6a:a6:42:79:a0: c5:ad:7c:a9:28:ad:4a:26:f1:3f:42:26:69:a3:39:ec:10:c1: a5:79:5f:97:27:27:a3:e7:ca:69:cf:94:65:46:c2:53:7c:d8: 1e:01:61:06:c3:08:c1:ca:5e:ec:8a:8d:3f:b8:cd:66:f6:d2: 8e:46:04:c5:9b:4a:32:d9:63:4e:10:7b:22:6f:8d:de:78:f8: b1:0c:b0:f0:1d:94:9f:29:47:a0:2a:d3:72:66:48:d4:d1:8c: ed:aa:03:0b:31:13:ad:73:72:79:1e:6d:51:81:6b:04:5e:59: e3:e9:b2:d6:db:00:18:89:db:9f:6c:84:1e:15:d1:b2:64:67: bc:57:61:a5:13:3c:54:80:5e:82:7a:c8:b9:53:9d:63:47:c7: 4d:4e:84:82:a4:b1:3c:1e:dc:0b:ad:08:9d:32:fa:c3:52:aa: 77:b9:2b:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqls7daNPlcJFO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTU0NVoXDTI1MDUyMTE3MTU0NVowLzEtMCsGA1UEAxMk ZThmYWIxNzgtNzdiOS00MjI1LTk4ZDUtY2FjY2YxODAwMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYs7KK5+MFsy+XS06B/VgArcSERid7P4/X1Z c7uQuAZsegobyDljfLdjPlAYb+HXhsM0rS3YPVxeR3e85q+tKgFArkBbIskCIQ6u zIlUqNFdhQ1SU+4W57t7NqmBKlsDG1/34L4nqrm0YjJZcImhFs8AEx+DHa9rUqxA eEYyXVElbten0LufGFHMPftMbRZRp8YXyJGkBbpw2btnrWL15xelU08EpqBYzYX/ Eqx1KQLEXOhUzdj/60UNmQ6UuhW6qokFt9Vu0XFxDJlG+/gTX+XcXHFcWsrbDnYP RkOkkXR+VFgAuxJVTCJhrmB/iaXAOWyxZU1NiVi7QWVl61melQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGs498z+Ae+dnkzrXxWGuhyUD7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGFjMTk4N2MtZjg4ZC0z MTcyLWE2MzctMTE5MGU5ZGFmY2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1suMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsYfYhqCa9IfYLw9oITXvnIf2lXtfIpNjmOd9MLvtWWApgkhojmcs5/ U1Av65ve9qWI3sXx2fKGEBuIQp19qmEkM5FtgHE2lAzATeHxgYgvIl7JUg9qpkJ5 oMWtfKkorUom8T9CJmmjOewQwaV5X5cnJ6PnymnPlGVGwlN82B4BYQbDCMHKXuyK jT+4zWb20o5GBMWbSjLZY04QeyJvjd54+LEMsPAdlJ8pR6Aq03JmSNTRjO2qAwsx E61zcnkebVGBawReWePpstbbABiJ259shB4V0bJkZ7xXYaUTPFSAXoJ6yLlTnWNH x01OhIKksTwe3AutCJ0y+sNSqne5K3Y= -----END CERTIFICATE-----Generated at Sat Apr 5 23:24:14 2025 by rpki-client