$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d5239f0-54e0-3aba-9274-5937c077877c.roa File: 8d5239f0-54e0-3aba-9274-5937c077877c.roa (raw, json) Hash identifier: icAjXlPRxSQgB1pvJ6xG9aAB+Q4VigX0LLcaggA0LdM= Subject key identifier: 83:F8:12:DB:DB:39:B6:D3:FA:AF:49:AB:EA:2A:38:EA:13:CA:5A:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DA71018B26F7DB71EE027500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d5239f0-54e0-3aba-9274-5937c077877c.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.90.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:01:8b:26:f7:db:71:ee:02:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=8117eaca-bede-4072-ac58-8b8ae15e3400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:29:4d:e5:5d:f2:e6:ec:31:f0:be:88:86:4c: 6a:e7:a6:30:2f:dc:ad:4f:1a:88:23:0b:85:b2:bf: 26:f7:13:b5:8e:89:ae:f7:32:32:ca:bf:60:72:2a: 2d:84:9d:06:23:54:c6:74:0f:d7:a4:0f:b7:f9:08: d8:a9:92:64:38:60:df:24:64:27:4a:47:ca:e1:0f: 4b:c3:23:bd:57:20:03:da:00:67:ee:fc:b2:e7:74: 45:ff:64:86:17:40:7a:3c:ae:59:fb:23:f5:b5:21: 62:29:29:d1:c2:3b:35:a8:f1:2b:59:5e:8b:d4:2f: cc:8b:38:ec:bb:cf:d0:a7:4b:61:3e:68:a2:4d:69: 43:64:3a:70:7e:5a:05:22:9f:b8:f3:8f:b6:a3:dd: de:7c:ed:b1:7a:94:9c:ea:5e:4b:f1:ae:27:9d:57: ab:c6:a6:20:94:0e:24:74:13:00:04:6b:03:c5:89: 63:cd:27:be:a4:53:9f:1c:b1:a3:f5:a6:cd:aa:37: ef:67:08:68:64:e6:e1:a3:b9:99:4d:f3:6d:06:47: ee:67:c6:10:a7:10:28:a9:cf:ef:10:6d:c5:e7:e2: 86:cb:55:a5:a2:fb:4e:4d:7d:00:27:f5:36:ec:1e: cf:1b:32:63:50:38:93:93:1c:4b:bc:f3:ca:d7:cc: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F8:12:DB:DB:39:B6:D3:FA:AF:49:AB:EA:2A:38:EA:13:CA:5A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d5239f0-54e0-3aba-9274-5937c077877c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:16:d1:0e:fd:0a:c1:27:84:d7:a9:be:54:79:52:e1:0c:d4: 8c:62:1e:93:2d:99:d7:ff:0d:fb:30:ed:04:b4:21:fe:85:cc: af:b3:a4:8a:f6:29:21:47:4c:1a:aa:9f:b3:97:6d:00:65:29: 9e:85:23:39:09:a7:1e:80:c1:ee:a6:99:41:96:9a:21:42:e2: 6b:03:03:ff:9f:67:02:ab:35:32:6f:c8:a2:70:0e:ef:d4:c5: 59:07:a9:69:07:7b:0a:42:4e:b6:d3:5a:51:8b:03:70:4f:cf: 6b:e4:ff:af:82:90:f3:2e:70:d3:44:96:cc:e5:3f:31:ba:db: 18:78:de:01:1c:9a:50:8e:06:3c:47:db:fa:4a:4a:35:d7:c2: 22:36:45:54:03:5e:9c:87:0a:cc:35:32:57:c6:52:41:62:ed: 84:f2:58:6f:a2:fb:be:5b:c4:84:1c:50:26:bb:4d:6e:3a:40: 45:43:cc:6f:d2:cb:e5:8e:27:36:91:70:96:00:50:b4:82:2a: 04:f7:3b:7f:ca:76:7f:58:81:56:8d:25:b3:5b:76:30:17:d9: ef:6b:f1:85:c2:ad:37:f7:f3:ea:67:54:57:bd:f3:06:24:df: bb:59:43:6e:66:e5:52:5a:a0:14:3a:2e:ef:3e:9d:bd:4f:51: a4:2f:07:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQGLJvfbce4CdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ODExN2VhY2EtYmVkZS00MDcyLWFjNTgtOGI4YWUxNWUzNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSlN5V3y5uwx8L6Ihkxq56YwL9ytTxqIIwuF sr8m9xO1jomu9zIyyr9gciothJ0GI1TGdA/XpA+3+QjYqZJkOGDfJGQnSkfK4Q9L wyO9VyAD2gBn7vyy53RF/2SGF0B6PK5Z+yP1tSFiKSnRwjs1qPErWV6L1C/Mizjs u8/Qp0thPmiiTWlDZDpwfloFIp+484+2o93efO2xepSc6l5L8a4nnVerxqYglA4k dBMABGsDxYljzSe+pFOfHLGj9abNqjfvZwhoZObho7mZTfNtBkfuZ8YQpxAoqc/v EG3F5+KGy1WlovtOTX0AJ/U27B7PGzJjUDiTkxxLvPPK18xacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP4EtvbObbT+q9Jq+oqOOoTyloEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGQ1MjM5ZjAtNTRlMC0z YWJhLTkyNzQtNTkzN2MwNzc4NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1oAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIW0Q79CsEnhNepvlR5UuEM1IxiHpMtmdf/Dfsw7QS0If6FzK+zpIr2 KSFHTBqqn7OXbQBlKZ6FIzkJpx6Awe6mmUGWmiFC4msDA/+fZwKrNTJvyKJwDu/U xVkHqWkHewpCTrbTWlGLA3BPz2vk/6+CkPMucNNElszlPzG62xh43gEcmlCOBjxH 2/pKSjXXwiI2RVQDXpyHCsw1MlfGUkFi7YTyWG+i+75bxIQcUCa7TW46QEVDzG/S y+WOJzaRcJYAULSCKgT3O3/Kdn9YgVaNJbNbdjAX2e9r8YXCrTf38+pnVFe98wYk 37tZQ25m5VJaoBQ6Lu8+nb1PUaQvBwc= -----END CERTIFICATE-----Generated at Sun Apr 6 11:10:46 2025 by rpki-client