$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9214f1d2-8591-37df-8354-cba9056d9c3c.roa File: 9214f1d2-8591-37df-8354-cba9056d9c3c.roa (raw, json) Hash identifier: ULwdTMx5nhFW3ve7XUcesLngodjk3ifCptSt1lfe5jE= Subject key identifier: 72:2A:58:2C:E4:5C:93:9F:76:96:B3:B3:7C:77:98:5D:0B:75:8B:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AAAD90535F2DD5FECDBF40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9214f1d2-8591-37df-8354-cba9056d9c3c.roa Signing time: Thu 20 Feb 2025 18:16:24 +0000 ROA not before: Thu 20 Feb 2025 18:16:24 +0000 ROA not after: Wed 21 May 2025 17:16:24 +0000 asID: 7029 IP address blocks: 75.91.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:ad:90:53:5f:2d:d5:fe:cd:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:16:24 2025 GMT Not After : May 21 17:16:24 2025 GMT Subject: CN=1fcb01ae-f3bd-40c2-85cb-b80724c07bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:b5:fb:23:72:84:fb:14:ea:ae:50:7c:91: 03:08:51:e9:9e:1c:9c:b5:72:92:c8:d7:1e:f0:7e: 91:86:f1:f5:f6:76:ea:c1:70:09:7f:19:9a:8a:fa: ad:8e:25:59:aa:32:a6:08:14:b5:ca:fd:24:42:80: 80:56:a5:64:57:88:de:f5:97:e0:fb:70:a0:16:d3: 86:bf:00:74:25:35:f6:09:2d:ff:8a:5d:15:d8:f5: bf:7c:ca:ee:80:23:ff:30:e1:dd:19:5c:77:31:6a: 8b:f7:01:c5:fd:e7:0e:cb:99:fb:a8:d1:65:3a:1f: 59:c3:88:ad:8a:a1:1e:ee:3a:be:f3:1d:ca:97:39: 2c:da:1c:3d:24:0c:43:02:7d:70:ac:43:25:59:35: 90:ac:d4:ff:07:97:fe:a1:20:99:09:5e:f9:f3:94: c1:52:5e:2f:8e:20:b9:6f:84:36:93:8d:21:ee:ae: 08:e6:62:c0:f4:fd:c6:73:59:c4:7f:2b:92:b7:93: 92:f5:22:ad:0d:a8:d1:d5:0c:df:94:8e:b1:68:ce: c5:33:74:db:f8:f5:bb:32:f6:f2:04:ef:cc:95:3e: be:eb:04:21:2c:59:87:7a:8e:4e:1b:b5:19:07:af: 13:a9:90:bc:24:78:ae:88:3c:61:9a:31:8b:4d:50: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2A:58:2C:E4:5C:93:9F:76:96:B3:B3:7C:77:98:5D:0B:75:8B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9214f1d2-8591-37df-8354-cba9056d9c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:92:eb:40:f0:ba:71:76:f1:5a:78:47:25:1b:6b:44:ae:44: 82:fd:e9:45:3f:1a:b2:3d:34:c1:9c:be:1e:fd:a3:5c:0a:b6: 38:e8:7a:bf:72:ab:76:2d:22:d0:6b:e6:fa:77:6a:ef:c3:ce: a6:cf:c2:ab:89:29:3c:43:2a:8b:be:e8:f2:a1:02:0f:26:79: bb:3b:cf:47:b2:1b:f6:54:c4:7b:1b:9f:13:f0:ae:4b:12:77: 98:6a:28:6d:9c:c6:87:f6:5a:71:99:5d:19:7f:4f:5d:f1:80: 4d:da:94:2c:43:02:79:09:37:05:ed:08:27:f3:f1:14:18:64: 10:1a:42:ea:6a:39:4b:03:7d:f9:8e:cc:1b:a2:d7:4c:c7:ec: 9c:7e:53:be:c1:88:ac:44:6a:13:d8:7f:37:f1:bb:75:1f:92: 8b:56:1a:dc:e0:3b:dc:9a:fb:db:0c:86:ed:4a:96:fc:0c:ec: 5f:9e:ec:b5:3a:58:bb:dc:d5:2a:15:a3:29:fc:cf:d2:51:ff: bd:21:63:16:be:a2:51:e2:08:eb:32:33:9f:8e:a2:11:f3:24: a0:84:61:70:ab:cf:fe:89:f4:ab:fb:73:94:d5:f5:50:5f:df: 0c:f0:1f:04:9d:a6:49:64:8e:02:9f:d4:0c:1d:49:d6:6d:04: 71:5f:be:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqq2QU18t1f7Nv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTYyNFoXDTI1MDUyMTE3MTYyNFowLzEtMCsGA1UEAxMk MWZjYjAxYWUtZjNiZC00MGMyLTg1Y2ItYjgwNzI0YzA3YmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsba1+yNyhPsU6q5QfJEDCFHpnhyctXKSyNce 8H6RhvH19nbqwXAJfxmaivqtjiVZqjKmCBS1yv0kQoCAVqVkV4je9Zfg+3CgFtOG vwB0JTX2CS3/il0V2PW/fMrugCP/MOHdGVx3MWqL9wHF/ecOy5n7qNFlOh9Zw4it iqEe7jq+8x3Klzks2hw9JAxDAn1wrEMlWTWQrNT/B5f+oSCZCV7585TBUl4vjiC5 b4Q2k40h7q4I5mLA9P3Gc1nEfyuSt5OS9SKtDajR1QzflI6xaM7FM3Tb+PW7Mvby BO/MlT6+6wQhLFmHeo5OG7UZB68TqZC8JHiuiDxhmjGLTVBb9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIqWCzkXJOfdpazs3x3mF0LdYvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTIxNGYxZDItODU5MS0z N2RmLTgzNTQtY2JhOTA1NmQ5YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1tMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISS60DwunF28Vp4RyUba0SuRIL96UU/GrI9NMGcvh79o1wKtjjoer9y q3YtItBr5vp3au/DzqbPwquJKTxDKou+6PKhAg8mebs7z0eyG/ZUxHsbnxPwrksS d5hqKG2cxof2WnGZXRl/T13xgE3alCxDAnkJNwXtCCfz8RQYZBAaQupqOUsDffmO zBui10zH7Jx+U77BiKxEahPYfzfxu3UfkotWGtzgO9ya+9sMhu1KlvwM7F+e7LU6 WLvc1SoVoyn8z9JR/70hYxa+olHiCOsyM5+OohHzJKCEYXCrz/6J9Kv7c5TV9VBf 3wzwHwSdpklkjgKf1AwdSdZtBHFfvu4= -----END CERTIFICATE-----Generated at Sun Apr 6 08:45:32 2025 by rpki-client