$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4fc2b7e-acd5-3a2b-9645-8a2fc87093e2.roa File: b4fc2b7e-acd5-3a2b-9645-8a2fc87093e2.roa (raw, json) Hash identifier: Z44Zy3mWy4FtXvEdJmbWgHK6w9ZLtOHh7mmtUosp+ks= Subject key identifier: C2:F8:BE:53:37:18:F1:54:E2:6F:C4:D6:73:1B:41:7B:82:86:6E:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328583D661B822CEDA19BC1F70B0180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4fc2b7e-acd5-3a2b-9645-8a2fc87093e2.roa Signing time: Tue 29 Mar 2022 04:00:00 +0000 ROA not before: Tue 29 Mar 2022 04:00:00 +0000 ROA not after: Tue 21 Mar 2028 04:00:00 +0000 asID: 7029 IP address blocks: 75.91.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:66:1b:82:2c:ed:a1:9b:c1:f7:0b:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 29 04:00:00 2022 GMT Not After : Mar 21 04:00:00 2028 GMT Subject: CN=50cce9f6-8604-4c1f-b48e-5278669f6748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:34:c5:7c:7a:a4:40:ae:4c:90:df:5f:51: fc:bd:07:20:12:0f:96:48:25:66:bd:c7:57:f5:87: ae:1d:a8:5d:cb:e9:ab:2f:04:b4:39:e7:34:4f:ed: ba:85:ba:ca:0d:da:a3:2d:be:65:5c:73:3c:df:9c: 0e:e7:ff:a0:5b:b7:01:b5:e4:a3:bb:3f:e3:6a:b5: 73:32:73:c0:8d:55:63:af:55:bc:1e:51:ed:e2:ca: 9f:8a:55:0c:ec:06:63:9e:3a:8e:3d:dd:6a:2f:b4: b9:0c:e8:0c:64:c7:d5:b2:06:b5:8a:fe:f0:57:ce: e9:02:4a:ce:9e:04:93:be:35:d9:30:65:25:d7:b5: ac:14:b7:30:67:77:9a:d0:31:9a:95:d8:44:b1:ae: 72:30:13:8a:48:f8:66:71:ec:72:7e:49:68:61:a7: bc:35:98:94:29:b2:53:07:b2:23:d3:5f:dd:7e:0f: 9e:c2:1c:d0:20:2b:a1:88:15:89:5a:e3:32:e5:f9: 1e:d4:e9:41:ba:3e:f9:ea:05:75:48:8a:6a:05:d9: 98:24:db:18:e7:a2:78:38:21:3d:b5:f6:04:71:bf: 94:c0:90:ac:59:8a:99:e5:e5:15:a4:9e:74:b5:84: 9a:c2:8b:c9:1e:4c:e5:78:a5:76:1e:2f:24:7e:44: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F8:BE:53:37:18:F1:54:E2:6F:C4:D6:73:1B:41:7B:82:86:6E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4fc2b7e-acd5-3a2b-9645-8a2fc87093e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:03:0d:dc:9f:77:88:82:44:6d:e8:d1:45:70:7c:7f:45:90: b7:a5:33:a6:f8:37:d2:62:26:97:7c:07:4b:9b:e4:50:94:d6: c1:ef:2f:76:98:79:fc:ea:5a:54:7a:93:a3:3c:37:86:39:de: 76:f4:4b:a0:1e:39:8e:e6:8a:7d:d1:6b:d7:f0:bd:f4:02:67: b0:63:bf:f3:b0:90:1d:82:c9:b7:b5:af:90:4c:c4:76:94:69: f4:46:25:aa:5a:9d:3d:fe:9c:b8:38:09:24:63:0c:85:9c:41: 47:4c:16:f2:58:41:38:8e:2f:0f:d0:00:bd:c5:c9:95:72:3a: 91:d3:75:33:9a:d2:be:c4:db:3f:74:71:d1:b8:86:50:73:00: c7:c8:14:73:6b:f4:f8:df:e3:31:b7:35:86:a4:42:a0:ec:54: 38:27:a8:73:e0:d8:05:5f:25:d7:05:cb:20:4c:97:0a:9a:2e: 03:98:0e:8a:d1:67:30:13:3f:95:f2:71:b8:0b:52:97:d4:0c: db:40:de:4b:ba:4a:3a:af:f5:12:88:94:36:0d:ea:a4:ab:0f: 35:2e:ac:fd:1f:38:57:fe:33:16:15:24:cc:41:d6:5c:73:85: 59:bc:15:e0:f4:96:c9:0c:0c:4d:de:64:14:59:b6:06:6f:40: 9e:a5:a2:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mG4Is7aGbwfcLAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk NTBjY2U5ZjYtODYwNC00YzFmLWI0OGUtNTI3ODY2OWY2NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/M0xXx6pECuTJDfX1H8vQcgEg+WSCVmvcdX 9YeuHahdy+mrLwS0Oec0T+26hbrKDdqjLb5lXHM835wO5/+gW7cBteSjuz/jarVz MnPAjVVjr1W8HlHt4sqfilUM7AZjnjqOPd1qL7S5DOgMZMfVsga1iv7wV87pAkrO ngSTvjXZMGUl17WsFLcwZ3ea0DGaldhEsa5yMBOKSPhmcexyfkloYae8NZiUKbJT B7Ij01/dfg+ewhzQICuhiBWJWuMy5fke1OlBuj756gV1SIpqBdmYJNsY56J4OCE9 tfYEcb+UwJCsWYqZ5eUVpJ50tYSawovJHkzleKV2Hi8kfkTA/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFML4vlM3GPFU4m/E1nMbQXuChm4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjRmYzJiN2UtYWNkNS0z YTJiLTk2NDUtOGEyZmM4NzA5M2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQDDdyfd4iCRG3o0UVwfH9FkLelM6b4N9JiJpd8B0ub5FCU1sHvL3aY efzqWlR6k6M8N4Y53nb0S6AeOY7min3Ra9fwvfQCZ7Bjv/OwkB2Cybe1r5BMxHaU afRGJapanT3+nLg4CSRjDIWcQUdMFvJYQTiOLw/QAL3FyZVyOpHTdTOa0r7E2z90 cdG4hlBzAMfIFHNr9Pjf4zG3NYakQqDsVDgnqHPg2AVfJdcFyyBMlwqaLgOYDorR ZzATP5XycbgLUpfUDNtA3ku6Sjqv9RKIlDYN6qSrDzUurP0fOFf+MxYVJMxB1lxz hVm8FeD0lskMDE3eZBRZtgZvQJ6loos= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:56 2025 by rpki-client