$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2fc4915-2281-3531-beda-da820c21bcd3.roa File: a2fc4915-2281-3531-beda-da820c21bcd3.roa (raw, json) Hash identifier: O0444KH6jZ4b3TeBDpmTPG6eCifvVq8gtPvF3MPXlV8= Subject key identifier: E8:C3:71:13:3D:51:FB:65:EC:64:2F:F3:73:83:02:B7:23:0F:4F:57 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA240AD999608BBA8E0470 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2fc4915-2281-3531-beda-da820c21bcd3.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.89.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:24:0a:d9:99:60:8b:ba:8e:04:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=561aa8fa-9d8e-4e87-a4a7-14aca928c1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:8f:59:78:d2:24:cf:82:b9:26:60:99:d6: 09:39:34:2a:5c:de:07:66:93:b9:ac:9b:37:0c:b1: f2:60:7e:53:59:71:9d:28:b5:9f:d9:8c:bb:7d:be: 8e:6b:72:1c:2b:00:85:d9:2f:91:86:e9:8e:d5:e3: be:d2:21:1d:9a:95:f0:c7:ba:ce:f1:00:de:28:71: 55:e5:2a:f3:54:34:46:c5:2f:81:37:60:12:60:39: a0:83:b2:02:79:5d:38:d4:3a:93:41:40:98:86:53: b8:c7:72:27:6b:4f:29:c8:55:8e:9c:62:a3:10:d5: 51:7d:a6:af:28:ad:da:42:63:92:f5:4a:7f:1e:1c: 74:24:fe:fe:9b:74:1e:4f:f1:33:93:2a:42:e5:76: da:ee:6b:4e:61:1d:76:81:3f:14:a3:8b:92:f3:0b: 15:58:e7:a0:c0:0f:b0:4d:f7:98:6a:e9:a4:07:db: 86:f4:6b:1c:23:4a:ca:79:c2:43:4a:50:fa:56:3b: a8:ab:34:92:32:78:d7:b3:0d:ab:76:e9:1c:fd:54: 53:aa:d7:fd:1b:bc:55:85:84:23:65:bd:7d:d9:16: f9:e4:58:34:cf:fb:a3:86:64:7e:a0:68:59:7e:0e: ea:a0:42:27:07:12:ff:f7:1e:ed:d8:7c:f4:c6:e9: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C3:71:13:3D:51:FB:65:EC:64:2F:F3:73:83:02:B7:23:0F:4F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2fc4915-2281-3531-beda-da820c21bcd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a3:74:63:0b:d8:67:76:5d:2f:4e:c0:75:13:82:34:06:e9: ae:d0:a9:32:9c:a3:0a:67:0c:b3:19:f3:21:2b:06:0a:99:df: 93:c8:94:31:73:3d:d0:d8:27:55:1e:69:17:00:ba:6d:f9:51: d7:cc:72:5d:e1:cb:42:af:7a:2b:bd:f0:45:ed:e1:c9:11:08: 76:09:e0:d0:76:d9:54:d4:18:58:9d:d6:90:3e:89:b6:5f:ed: d0:22:ee:04:66:9c:b4:11:b8:11:8c:96:c0:6e:e2:26:2c:36: 1e:56:6b:f0:ed:5a:24:36:47:f4:b6:e2:05:1d:b8:74:bc:f5: b4:17:64:8a:b1:56:28:ae:ee:c3:5d:ee:09:37:7a:3c:61:6c: c6:6d:8d:61:81:05:65:5b:74:5b:ca:e5:62:37:61:e4:0e:9a: e3:c4:bd:ac:38:27:ef:67:93:04:1c:2e:de:29:f1:4b:5a:a0: c9:5c:6a:8b:0e:98:89:67:9b:4b:cd:02:3e:49:a3:6f:ec:6b: af:7e:80:ec:00:58:64:d2:4c:9b:fd:6f:81:35:c0:2e:ec:e4: 8e:a7:04:37:24:0d:df:90:28:78:9d:07:a7:96:07:c9:b3:82: c7:70:b7:b9:26:ea:4a:0e:c1:82:c4:19:30:bf:ff:06:81:57: 62:b1:ff:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiQK2Zlgi7qOBHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk NTYxYWE4ZmEtOWQ4ZS00ZTg3LWE0YTctMTRhY2E5MjhjMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPmPWXjSJM+CuSZgmdYJOTQqXN4HZpO5rJs3 DLHyYH5TWXGdKLWf2Yy7fb6Oa3IcKwCF2S+RhumO1eO+0iEdmpXwx7rO8QDeKHFV 5SrzVDRGxS+BN2ASYDmgg7ICeV041DqTQUCYhlO4x3Ina08pyFWOnGKjENVRfaav KK3aQmOS9Up/Hhx0JP7+m3QeT/EzkypC5Xba7mtOYR12gT8Uo4uS8wsVWOegwA+w TfeYaumkB9uG9GscI0rKecJDSlD6VjuoqzSSMnjXsw2rdukc/VRTqtf9G7xVhYQj Zb192Rb55Fg0z/ujhmR+oGhZfg7qoEInBxL/9x7t2Hz0xukP3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjDcRM9Uftl7GQv83ODArcjD09XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTJmYzQ5MTUtMjI4MS0z NTMxLWJlZGEtZGE4MjBjMjFiY2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1m4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICjdGML2Gd2XS9OwHUTgjQG6a7QqTKcowpnDLMZ8yErBgqZ35PIlDFz PdDYJ1UeaRcAum35UdfMcl3hy0Kveiu98EXt4ckRCHYJ4NB22VTUGFid1pA+ibZf 7dAi7gRmnLQRuBGMlsBu4iYsNh5Wa/DtWiQ2R/S24gUduHS89bQXZIqxViiu7sNd 7gk3ejxhbMZtjWGBBWVbdFvK5WI3YeQOmuPEvaw4J+9nkwQcLt4p8UtaoMlcaosO mIlnm0vNAj5Jo2/sa69+gOwAWGTSTJv9b4E1wC7s5I6nBDckDd+QKHidB6eWB8mz gsdwt7km6koOwYLEGTC//waBV2Kx/2E= -----END CERTIFICATE-----Generated at Fri Jun 6 17:11:35 2025 by rpki-client