$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c10cf884-7d91-3305-9511-fd4cd799a2da.roa File: c10cf884-7d91-3305-9511-fd4cd799a2da.roa (raw, json) Hash identifier: aNyrY43YDGpW9hH3c9YZuvWluZLA4bz+fegrG2gAa9A= Subject key identifier: 66:2B:41:D4:C2:A0:34:4E:0E:05:67:A4:81:42:44:AF:81:5A:66:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F0A3FB8ADF82DA2A7900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c10cf884-7d91-3305-9511-fd4cd799a2da.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.90.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f0:a3:fb:8a:df:82:da:2a:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=eb0859f6-25e1-49d9-8b58-af9d0347cee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:6d:98:24:84:1a:4f:01:a4:06:0e:46:bd: 66:4a:30:87:fd:23:5c:95:4e:fe:37:7a:45:ee:ce: a6:a0:31:da:cd:88:96:5b:40:55:a6:ef:00:eb:da: f2:4a:6d:0b:29:bd:49:73:f6:e8:60:dd:0b:ef:95: 76:8b:f1:b2:6b:a2:8d:4e:4c:27:ad:1e:4e:5e:86: 89:02:5a:13:4f:b9:67:cd:8a:db:8b:87:35:9d:52: 29:b5:8c:f7:f7:ba:20:c7:06:4d:43:4a:dc:51:30: 99:37:c3:f6:99:13:b9:29:54:de:35:9b:15:87:26: 95:68:b7:b4:c4:80:40:ae:23:85:19:b2:77:66:46: 10:ad:16:6c:4e:a4:ae:94:ed:44:da:e1:f5:6f:01: e0:31:d1:a2:79:63:a8:f4:df:5a:5d:dc:a6:1f:b4: ce:b2:8e:91:5f:c3:9c:aa:ee:3d:20:16:fe:4a:ff: 8a:3d:a6:80:9c:d0:81:bc:f1:be:41:58:cc:5b:b6: 2f:47:3f:9f:80:03:24:f5:cb:7d:08:a3:d0:48:bc: c8:24:d4:21:02:31:44:90:21:32:c2:11:de:58:13: fc:5a:61:6a:db:90:4a:12:bb:6c:12:1c:11:7e:bd: 09:35:12:29:55:98:64:e8:59:06:63:3d:61:94:f1: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2B:41:D4:C2:A0:34:4E:0E:05:67:A4:81:42:44:AF:81:5A:66:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c10cf884-7d91-3305-9511-fd4cd799a2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ff:d0:9c:ae:26:b7:ac:b5:f3:3e:d8:f0:5d:72:92:d6:02: 65:d9:c0:6a:45:8d:8e:3c:8f:11:9e:ce:68:e0:74:69:86:2a: d8:4d:77:e7:70:c2:9b:a1:70:3e:30:ae:b3:42:34:35:42:c7: 61:c0:e0:de:f6:da:2f:ed:41:c5:e8:ac:f6:83:77:96:d4:49: 05:86:45:a1:cb:88:36:6f:e3:a0:03:bf:74:80:78:fd:62:22: 30:3b:1e:b7:ce:aa:b7:11:16:c8:ef:d2:48:e4:85:9c:26:41: 30:d6:44:12:d5:77:45:6f:b8:20:12:66:38:4e:a9:cc:54:e6: e6:c5:62:fd:89:93:93:94:84:fa:d5:09:28:75:f3:76:93:06: 9c:a2:3f:ad:ef:55:49:4d:4a:41:84:00:01:4e:66:b5:cc:ea: 37:07:74:4c:9c:bd:41:26:a6:42:c0:b4:8a:2c:6e:58:9b:e1: 29:b8:33:2e:9d:2c:a1:77:74:f0:0f:6b:2a:76:c6:4d:ed:0a: 02:cb:ed:b0:f2:c1:d3:21:66:ce:5a:db:8e:26:f3:dd:7c:d5: 7a:00:47:ec:af:69:88:88:05:83:4e:8a:12:c6:57:bb:33:e1: 76:5d:ec:d7:41:99:3c:a4:ce:d5:fe:a8:7e:99:c2:12:11:88: 2e:0e:ff:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPCj+4rfgtoqeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWIwODU5ZjYtMjVlMS00OWQ5LThiNTgtYWY5ZDAzNDdjZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOZtmCSEGk8BpAYORr1mSjCH/SNclU7+N3pF 7s6moDHazYiWW0BVpu8A69rySm0LKb1Jc/boYN0L75V2i/Gya6KNTkwnrR5OXoaJ AloTT7lnzYrbi4c1nVIptYz397ogxwZNQ0rcUTCZN8P2mRO5KVTeNZsVhyaVaLe0 xIBAriOFGbJ3ZkYQrRZsTqSulO1E2uH1bwHgMdGieWOo9N9aXdymH7TOso6RX8Oc qu49IBb+Sv+KPaaAnNCBvPG+QVjMW7YvRz+fgAMk9ct9CKPQSLzIJNQhAjFEkCEy whHeWBP8WmFq25BKErtsEhwRfr0JNRIpVZhk6FkGYz1hlPHCGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYrQdTCoDRODgVnpIFCRK+BWmZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzEwY2Y4ODQtN2Q5MS0z MzA1LTk1MTEtZmQ0Y2Q3OTlhMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJP/0JyuJrestfM+2PBdcpLWAmXZwGpFjY48jxGezmjgdGmGKthNd+dw wpuhcD4wrrNCNDVCx2HA4N722i/tQcXorPaDd5bUSQWGRaHLiDZv46ADv3SAeP1i IjA7HrfOqrcRFsjv0kjkhZwmQTDWRBLVd0VvuCASZjhOqcxU5ubFYv2Jk5OUhPrV CSh183aTBpyiP63vVUlNSkGEAAFOZrXM6jcHdEycvUEmpkLAtIosblib4Sm4My6d LKF3dPAPayp2xk3tCgLL7bDywdMhZs5a244m89181XoAR+yvaYiIBYNOihLGV7sz 4XZd7NdBmTykztX+qH6ZwhIRiC4O/1c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:18 2025 by rpki-client