$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9418f23a-a001-320a-ac19-10f1ccbd219f.roa File: 9418f23a-a001-320a-ac19-10f1ccbd219f.roa (raw, json) Hash identifier: LilKaPWuvCE/GYn5XFERhBh7LAgyDdcZVJDL6/PjWXI= Subject key identifier: E0:E3:18:25:AD:2C:09:65:1F:CE:63:E2:97:C4:70:9D:0D:2A:8F:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111F83E8353C2E9B3A4D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9418f23a-a001-320a-ac19-10f1ccbd219f.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.90.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1f:83:e8:35:3c:2e:9b:3a:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=31d9eb82-db58-4dca-a376-b6d8e1f4b17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:2d:0d:3b:85:99:f2:60:7b:ac:d0:8a:00: 36:4d:11:ed:4e:12:23:1d:76:71:fb:fa:8c:a4:ce: 32:12:a4:ba:0e:00:e7:ce:33:c3:0a:8a:05:6d:01: 91:f7:d1:25:17:e0:d8:4c:94:51:e7:b9:65:29:94: ca:bd:78:75:ab:dd:93:e3:d7:29:f4:bb:54:fb:ef: ee:e5:55:83:32:99:46:9f:9a:ce:de:57:e1:51:34: ef:0b:f7:ba:2f:8e:b6:ca:17:73:c9:9e:cc:ea:24: a6:0c:b9:26:22:fb:7c:74:f7:1f:3f:92:9b:db:67: aa:8b:b9:20:22:ea:c2:f1:15:c8:40:fe:64:c0:37: 3a:a6:1b:a3:cf:f3:bb:12:77:a7:8a:5e:f7:d1:ae: b0:17:c5:4c:97:f1:90:79:02:b8:68:78:e0:c4:5a: 91:76:6b:74:67:5b:ef:af:27:2c:13:83:f2:55:18: 65:a2:eb:9f:48:f1:6f:ef:3f:d8:bb:5c:41:f6:d0: 32:f6:55:8a:05:46:05:9f:0c:fa:37:47:ea:c5:8f: 4f:65:61:f7:df:27:c7:d3:20:1a:88:5e:23:2d:52: 39:98:59:5f:d8:f1:16:e3:2a:df:0f:de:84:d5:e7: 1e:f7:29:a0:8e:7d:66:4b:5b:a5:c8:80:65:b2:b9: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E3:18:25:AD:2C:09:65:1F:CE:63:E2:97:C4:70:9D:0D:2A:8F:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9418f23a-a001-320a-ac19-10f1ccbd219f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:cf:7c:77:d6:ee:08:22:cf:c2:3e:51:8d:ae:00:84:0d:fc: 65:73:29:4c:c6:54:94:ac:2a:e3:6e:d8:9c:4e:7c:e9:b4:ae: d1:30:d3:fc:5e:74:2b:b5:a2:56:32:18:86:b9:3f:5f:7c:73: cf:b9:64:b4:a3:1c:9a:e3:8b:20:70:b9:ee:3d:1f:42:9c:c7: 0e:da:e1:3e:64:de:38:92:2d:e4:0b:9d:75:82:3d:60:58:d4: 2d:7e:21:12:7d:1d:66:0c:47:44:89:71:c0:20:43:99:dd:3b: a6:86:bc:13:1d:7b:00:49:c4:72:38:e9:52:52:8f:3b:fe:f2: ff:86:5c:cd:5f:3e:30:9f:b7:d3:ba:50:f9:b1:3e:21:d0:67: 60:47:fe:74:40:67:ff:1e:13:5c:bb:0b:1b:73:89:e5:39:ea: 6c:e5:96:45:5f:0f:6d:ac:a7:42:cb:70:6e:5e:28:56:ea:05: c3:73:56:fe:2f:b8:12:2b:3c:61:b8:c1:ca:fd:92:0d:38:c6: d7:87:7a:a5:f4:a7:0a:52:6c:6a:f1:74:cd:92:0f:21:44:e4: 58:9e:2e:2a:04:ab:f2:69:f6:10:44:37:54:92:01:2b:5d:a3: 6a:4d:e0:d5:22:58:b0:69:51:6d:5e:f3:9c:7b:c6:e7:73:b0: 54:90:25:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSER+D6DU8Lps6TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MzFkOWViODItZGI1OC00ZGNhLWEzNzYtYjZkOGUxZjRiMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9ctDTuFmfJge6zQigA2TRHtThIjHXZx+/qM pM4yEqS6DgDnzjPDCooFbQGR99ElF+DYTJRR57llKZTKvXh1q92T49cp9LtU++/u 5VWDMplGn5rO3lfhUTTvC/e6L462yhdzyZ7M6iSmDLkmIvt8dPcfP5Kb22eqi7kg IurC8RXIQP5kwDc6phujz/O7Enenil730a6wF8VMl/GQeQK4aHjgxFqRdmt0Z1vv rycsE4PyVRhlouufSPFv7z/Yu1xB9tAy9lWKBUYFnwz6N0fqxY9PZWH33yfH0yAa iF4jLVI5mFlf2PEW4yrfD96E1ece9ymgjn1mS1ulyIBlsrm1wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODjGCWtLAllH85j4pfEcJ0NKo8EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQxOGYyM2EtYTAwMS0z MjBhLWFjMTktMTBmMWNjYmQyMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1pgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvPfHfW7ggiz8I+UY2uAIQN/GVzKUzGVJSsKuNu2JxOfOm0rtEw0/xe dCu1olYyGIa5P198c8+5ZLSjHJrjiyBwue49H0Kcxw7a4T5k3jiSLeQLnXWCPWBY 1C1+IRJ9HWYMR0SJccAgQ5ndO6aGvBMdewBJxHI46VJSjzv+8v+GXM1fPjCft9O6 UPmxPiHQZ2BH/nRAZ/8eE1y7CxtzieU56mzllkVfD22sp0LLcG5eKFbqBcNzVv4v uBIrPGG4wcr9kg04xteHeqX0pwpSbGrxdM2SDyFE5FieLioEq/Jp9hBEN1SSAStd o2pN4NUiWLBpUW1e85x7xudzsFSQJRI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:03 2025 by rpki-client