$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa File: aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa (raw, json) Hash identifier: ZNo16JDiWPtw51gMVQZzgCFMqDm0/qRAh9AxYEgDOH4= Subject key identifier: 40:76:8B:F1:B5:B3:F6:18:B5:ED:D0:4B:75:1B:1B:89:18:25:41:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C5DF180138EC2645B0100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 75.91.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:5d:f1:80:13:8e:c2:64:5b:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=46b40f1c-ac31-461e-9963-aa7c13d1a649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:b4:f4:fb:11:9a:06:84:1d:2f:0a:f4:59: 26:b6:43:a1:ed:91:16:c9:04:82:40:2b:9a:5c:17: 64:b6:79:1f:1e:a0:c6:16:32:e3:dc:05:05:3c:16: 5c:a8:08:7b:f2:cc:81:a7:51:34:78:47:d9:21:32: d9:6b:69:76:98:16:7c:da:ea:1c:21:0c:95:88:b0: e2:c1:ae:61:97:c3:e7:7e:8c:da:1b:cf:ce:df:ff: d1:a7:45:39:ac:87:39:b8:de:73:1d:27:71:b7:39: 72:a2:6e:3e:6d:a1:7a:5f:8f:77:93:2e:ab:bb:15: f0:47:19:d8:ab:85:87:c4:e0:f1:84:79:3e:58:92: bd:1d:f4:8f:11:85:84:39:b7:4a:49:68:aa:ff:3d: 3d:73:00:8c:84:29:58:7a:29:37:f9:63:e8:1e:bf: 74:e0:e4:6d:f3:06:bd:28:be:ba:e4:07:57:b2:38: f8:e2:71:0e:b3:59:f9:09:7b:c1:49:ec:68:28:cc: 2f:f1:03:a2:b2:71:c6:d8:ff:3d:97:be:df:81:72: 7e:70:59:44:d2:d5:78:cd:c3:3a:9c:7c:e4:65:2f: 34:b8:de:c0:d5:f6:98:87:fe:84:a1:98:76:e9:7c: c3:44:a3:11:4e:ac:b7:2c:d4:da:94:b6:ae:66:c8: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:76:8B:F1:B5:B3:F6:18:B5:ED:D0:4B:75:1B:1B:89:18:25:41:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c4:a0:73:56:8b:24:c6:cf:0a:49:26:24:1a:c5:43:dc:67: 19:bf:74:48:f1:57:ee:35:58:5f:04:6d:1c:c4:49:69:21:5b: aa:1f:db:a6:9f:e6:00:56:29:87:d4:17:cc:a4:db:31:af:4d: 9b:4b:18:5d:74:5e:9e:f8:2a:73:d8:22:47:40:44:db:a7:9c: 01:64:a8:29:4e:9d:8f:e3:9a:38:55:ed:8b:47:67:a8:25:64: 22:65:7f:81:5b:57:aa:d0:bc:ce:39:74:a2:2c:4c:ee:0e:ff: bc:d8:d4:c2:0f:bb:ab:be:e7:a4:b8:b8:b8:df:3f:fd:29:50: db:b3:ad:ad:d3:62:1d:40:8d:81:fa:10:18:8a:ac:d0:d8:ef: 1a:39:dd:66:7a:1a:26:19:1a:26:7d:18:ec:1c:93:14:eb:11: 8c:0b:62:21:27:7f:10:71:17:4d:19:2a:28:93:f7:d5:4d:bf: 1f:86:22:b5:4b:75:33:f8:57:75:4a:c4:24:6d:e1:0c:e2:85: 75:9b:2d:cf:7e:d3:5b:6a:90:2d:3b:38:6e:6e:41:7a:85:42: 28:30:a4:21:73:7c:be:34:53:80:c0:05:7b:a8:6d:fc:4b:2a: 8f:83:b8:fe:dd:1b:10:7c:2e:fd:5e:c8:87:cc:b6:79:a4:ac: 63:76:f1:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLF3xgBOOwmRbAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NDZiNDBmMWMtYWMzMS00NjFlLTk5NjMtYWE3YzEzZDFhNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8a09PsRmgaEHS8K9FkmtkOh7ZEWyQSCQCua XBdktnkfHqDGFjLj3AUFPBZcqAh78syBp1E0eEfZITLZa2l2mBZ82uocIQyViLDi wa5hl8PnfozaG8/O3//Rp0U5rIc5uN5zHSdxtzlyom4+baF6X493ky6ruxXwRxnY q4WHxODxhHk+WJK9HfSPEYWEObdKSWiq/z09cwCMhClYeik3+WPoHr904ORt8wa9 KL665AdXsjj44nEOs1n5CXvBSexoKMwv8QOisnHG2P89l77fgXJ+cFlE0tV4zcM6 nHzkZS80uN7A1faYh/6EoZh26XzDRKMRTqy3LNTalLauZsiO7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB2i/G1s/YYte3QS3UbG4kYJUFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWVjN2M4NzgtZmNmNi0z ZjRiLTlhNDAtNmQyMDU4NWQ1NWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1swMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfEoHNWiyTGzwpJJiQaxUPcZxm/dEjxV+41WF8EbRzESWkhW6of26af 5gBWKYfUF8yk2zGvTZtLGF10Xp74KnPYIkdARNunnAFkqClOnY/jmjhV7YtHZ6gl ZCJlf4FbV6rQvM45dKIsTO4O/7zY1MIPu6u+56S4uLjfP/0pUNuzra3TYh1AjYH6 EBiKrNDY7xo53WZ6GiYZGiZ9GOwckxTrEYwLYiEnfxBxF00ZKiiT99VNvx+GIrVL dTP4V3VKxCRt4QzihXWbLc9+01tqkC07OG5uQXqFQigwpCFzfL40U4DABXuobfxL Ko+DuP7dGxB8Lv1eyIfMtnmkrGN28W8= -----END CERTIFICATE-----Generated at Fri Mar 14 08:35:45 2025 by rpki-client