$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2fc4915-2281-3531-beda-da820c21bcd3.roa File: a2fc4915-2281-3531-beda-da820c21bcd3.roa (raw, json) Hash identifier: iP0SajKJ7pwJTffr0cZIMjq6gZM0atHBUB8c82xkwzs= Subject key identifier: 08:EB:71:A9:FD:EC:8F:29:F8:16:B9:AD:26:5E:37:1C:2B:A1:91:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA7AE4F5442BC06C775700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2fc4915-2281-3531-beda-da820c21bcd3.roa Signing time: Thu 20 Feb 2025 18:16:00 +0000 ROA not before: Thu 20 Feb 2025 18:16:00 +0000 ROA not after: Wed 21 May 2025 17:16:00 +0000 asID: 7029 IP address blocks: 75.89.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:7a:e4:f5:44:2b:c0:6c:77:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:16:00 2025 GMT Not After : May 21 17:16:00 2025 GMT Subject: CN=b89b6819-d233-4c0b-beaa-ab513147672d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:7d:fd:3e:2a:c2:fa:df:1f:11:36:86:b8: 40:50:b9:e0:9b:c2:83:c2:b1:91:58:ac:db:9a:1a: c5:2a:f5:2f:20:20:67:b0:ad:9d:f9:b2:93:c8:a7: c7:72:c9:88:d2:b4:89:3d:7d:2b:63:cb:a9:d8:6b: ad:7c:61:12:bf:26:2e:21:c1:7d:f4:97:0a:fa:d1: 73:7e:f7:a1:47:05:81:e0:45:19:13:03:8a:46:f3: be:a1:62:96:51:c9:45:94:b1:d9:77:58:77:33:b5: fd:86:7c:7d:12:eb:36:34:af:5d:79:54:fd:78:f4: 33:7d:04:ae:97:96:2b:28:bf:47:a3:5f:5a:3d:c8: d8:92:22:30:0f:5c:1d:ae:36:bc:e9:cf:00:88:af: 2a:37:02:76:fe:b8:06:36:83:f6:75:60:db:3f:ea: a1:89:d5:9d:40:5e:8f:4e:f1:3d:b4:f2:c2:cf:a8: e1:db:66:18:2b:a0:58:12:61:15:58:44:9b:17:4c: f3:cf:74:bb:61:e8:ae:3a:ef:15:cb:a5:18:36:9c: bc:2a:66:8d:46:3a:d7:e2:43:3b:ba:65:91:fa:e5: ff:ab:03:68:07:a7:8a:56:dd:64:58:62:24:48:5f: 27:b8:b5:ff:c1:8e:ef:54:04:96:d9:e8:7d:4f:ac: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EB:71:A9:FD:EC:8F:29:F8:16:B9:AD:26:5E:37:1C:2B:A1:91:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2fc4915-2281-3531-beda-da820c21bcd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:53:bf:76:67:c9:bf:63:3f:86:f6:77:92:64:c9:65:cf:1d: d5:bf:f7:e0:5f:42:20:ea:25:ce:73:61:30:12:b6:f5:a1:05: 1a:6a:28:d8:7e:bc:59:0d:17:42:23:70:20:ed:88:62:6f:fc: 62:6d:43:9c:a3:44:41:63:3c:fa:c2:da:35:62:4c:74:ce:24: 11:33:e4:fa:7c:0d:78:6e:1f:37:ec:bd:37:a1:e9:1a:a6:c8: 34:28:9e:27:da:41:3b:65:07:68:43:0c:bd:80:15:14:88:03: 3a:06:d2:2d:07:bf:b9:e0:03:90:e7:32:4d:d0:54:ad:ac:73: 00:ba:d8:74:cd:97:1b:f4:87:c8:ad:3d:45:37:d5:cf:8c:d6: c0:32:f7:94:c0:31:91:d6:5f:68:42:26:72:d3:04:6e:41:91: 1b:68:e6:cd:60:24:79:ec:1a:ac:8c:7c:a2:83:5a:78:6c:16: 92:c5:8b:90:cd:f5:49:38:09:29:db:ea:85:56:4e:0e:23:8c: 0d:3f:b0:b7:49:65:4c:93:d6:fd:95:22:00:52:be:95:d8:a6: a7:76:62:9a:75:d9:0b:73:5a:e2:a6:b0:0f:64:29:63:99:01: bf:e8:37:30:64:93:c6:ec:9f:1d:37:e3:f2:b5:23:75:bf:2c: e9:b4:57:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqnrk9UQrwGx3VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTYwMFoXDTI1MDUyMTE3MTYwMFowLzEtMCsGA1UEAxMk Yjg5YjY4MTktZDIzMy00YzBiLWJlYWEtYWI1MTMxNDc2NzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDB9/T4qwvrfHxE2hrhAULngm8KDwrGRWKzb mhrFKvUvICBnsK2d+bKTyKfHcsmI0rSJPX0rY8up2GutfGESvyYuIcF99JcK+tFz fvehRwWB4EUZEwOKRvO+oWKWUclFlLHZd1h3M7X9hnx9Eus2NK9deVT9ePQzfQSu l5YrKL9Ho19aPcjYkiIwD1wdrja86c8AiK8qNwJ2/rgGNoP2dWDbP+qhidWdQF6P TvE9tPLCz6jh22YYK6BYEmEVWESbF0zzz3S7YeiuOu8Vy6UYNpy8KmaNRjrX4kM7 umWR+uX/qwNoB6eKVt1kWGIkSF8nuLX/wY7vVASW2eh9T6yyJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjrcan97I8p+Ba5rSZeNxwroZEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTJmYzQ5MTUtMjI4MS0z NTMxLWJlZGEtZGE4MjBjMjFiY2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1m4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFTv3Znyb9jP4b2d5JkyWXPHdW/9+BfQiDqJc5zYTAStvWhBRpqKNh+ vFkNF0IjcCDtiGJv/GJtQ5yjREFjPPrC2jViTHTOJBEz5Pp8DXhuHzfsvTeh6Rqm yDQonifaQTtlB2hDDL2AFRSIAzoG0i0Hv7ngA5DnMk3QVK2scwC62HTNlxv0h8it PUU31c+M1sAy95TAMZHWX2hCJnLTBG5BkRto5s1gJHnsGqyMfKKDWnhsFpLFi5DN 9Uk4CSnb6oVWTg4jjA0/sLdJZUyT1v2VIgBSvpXYpqd2Ypp12QtzWuKmsA9kKWOZ Ab/oNzBkk8bsnx034/K1I3W/LOm0V5Y= -----END CERTIFICATE-----Generated at Thu Apr 10 16:54:30 2025 by rpki-client