$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5ed174a-4acb-3bb4-8bdc-2491e89775a1.roa File: d5ed174a-4acb-3bb4-8bdc-2491e89775a1.roa (raw, json) Hash identifier: O2AhCCLeO1JWQ8E7NxgqL9zuBgbZ6LsBMjY2iWyHczU= Subject key identifier: EE:BC:66:B1:D7:FD:6B:3B:7C:8B:42:A5:95:0A:D0:BA:4C:AD:CC:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB943083B42B56888A3BA400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5ed174a-4acb-3bb4-8bdc-2491e89775a1.roa Signing time: Thu 06 Feb 2025 18:14:34 +0000 ROA not before: Thu 06 Feb 2025 18:14:34 +0000 ROA not after: Wed 07 May 2025 17:14:34 +0000 asID: 7029 IP address blocks: 75.90.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:94:30:83:b4:2b:56:88:8a:3b:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:14:34 2025 GMT Not After : May 7 17:14:34 2025 GMT Subject: CN=fc2aa32b-e356-44e4-a59a-f55781363472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fc:6f:03:83:2d:64:1f:f4:dc:ca:68:f0:26: a5:6d:71:f4:e7:7f:4f:f2:a1:2f:7b:2a:3a:4f:9c: 8e:15:09:9f:53:4f:7f:0a:d4:27:8d:d7:75:e7:0e: 0a:aa:7c:fc:a9:5a:f9:31:41:fc:42:a3:95:ff:00: df:6d:89:ce:b4:9b:01:a7:96:f9:58:31:da:4b:57: 5b:e2:8d:78:55:76:8e:fe:b2:bf:ff:4e:81:9d:44: a9:ec:c8:56:25:76:3c:4e:2f:a4:68:b1:8c:05:aa: 16:01:3e:46:ee:23:50:16:ad:fa:e7:b1:e7:80:25: d8:0d:dd:44:41:20:0b:0a:04:6f:4f:61:58:26:47: e7:57:18:b8:6a:aa:ab:ed:4c:c0:0a:46:94:f6:23: 20:f0:42:9f:31:12:af:2f:aa:da:ff:61:a6:e8:3d: 33:1b:cf:d7:a7:f8:3b:dd:0c:5d:5d:76:ca:eb:ad: 0e:af:39:39:6a:a4:1d:5b:5c:b3:f3:0f:8a:89:ff: 6f:2a:e0:6c:3b:05:15:78:cf:85:fd:3f:6e:9f:e8: 7f:46:a3:9b:b1:38:42:48:57:6a:81:8e:3e:b9:4a: ed:3a:86:ee:c1:1c:47:b6:88:6c:fb:1e:d7:0f:c2: 8d:e9:9d:91:54:c2:02:07:52:89:10:70:a6:3e:33: 87:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BC:66:B1:D7:FD:6B:3B:7C:8B:42:A5:95:0A:D0:BA:4C:AD:CC:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5ed174a-4acb-3bb4-8bdc-2491e89775a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3f:d8:12:eb:b0:ca:44:fb:a7:42:d2:95:18:c2:5b:67:e8: 8b:61:ff:ae:0e:14:ea:19:c6:8a:cd:32:54:6d:d8:f1:5b:88: 95:9b:4d:01:c3:7f:a1:bb:bd:9c:9e:05:76:c7:bc:1e:22:90: a6:78:0a:04:da:c3:f8:da:d0:07:28:96:7b:61:4c:8c:13:7a: ec:a9:7a:db:e7:09:06:6c:ae:c6:51:72:66:70:cd:51:95:b5: cb:01:34:05:a7:92:3c:2a:ed:a0:35:c8:86:62:5f:71:c8:f1: 6e:66:75:4c:4e:77:b5:64:ae:ab:21:72:ea:ec:b0:65:6b:e2: 72:b3:4f:9e:4e:4c:db:e6:5a:0e:cf:fb:3e:5b:7c:4e:ee:2a: 42:c3:74:02:0b:cc:dd:e6:6c:cb:d5:05:86:5c:24:65:08:0c: e6:b0:fa:32:9e:24:a9:43:44:4b:7f:aa:ff:4a:b0:4d:d9:9d: 2d:78:22:4d:65:15:89:28:c8:fd:a1:0e:dc:64:6e:8e:d4:ea: c9:eb:50:5f:fc:b3:eb:fb:4a:5e:8d:82:3f:3d:0e:c6:d4:df: d6:99:61:7c:df:22:b0:9b:ab:14:0a:98:5f:bf:18:64:15:0e: 52:9f:7b:91:49:c0:00:90:d3:30:62:fd:35:5b:43:76:d7:d0: e6:d3:30:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLlDCDtCtWiIo7pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTQzNFoXDTI1MDUwNzE3MTQzNFowLzEtMCsGA1UEAxMk ZmMyYWEzMmItZTM1Ni00NGU0LWE1OWEtZjU1NzgxMzYzNDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvxvA4MtZB/03Mpo8CalbXH0539P8qEveyo6 T5yOFQmfU09/CtQnjdd15w4Kqnz8qVr5MUH8QqOV/wDfbYnOtJsBp5b5WDHaS1db 4o14VXaO/rK//06BnUSp7MhWJXY8Ti+kaLGMBaoWAT5G7iNQFq3657HngCXYDd1E QSALCgRvT2FYJkfnVxi4aqqr7UzACkaU9iMg8EKfMRKvL6ra/2Gm6D0zG8/Xp/g7 3QxdXXbK660Orzk5aqQdW1yz8w+Kif9vKuBsOwUVeM+F/T9un+h/RqObsThCSFdq gY4+uUrtOobuwRxHtohs+x7XD8KN6Z2RVMICB1KJEHCmPjOH2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO68ZrHX/Ws7fItCpZUK0LpMrczZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDVlZDE3NGEtNGFjYi0z YmI0LThiZGMtMjQ5MWU4OTc3NWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1qeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM/2BLrsMpE+6dC0pUYwltn6Ith/64OFOoZxorNMlRt2PFbiJWbTQHD f6G7vZyeBXbHvB4ikKZ4CgTaw/ja0AcolnthTIwTeuypetvnCQZsrsZRcmZwzVGV tcsBNAWnkjwq7aA1yIZiX3HI8W5mdUxOd7VkrqshcurssGVr4nKzT55OTNvmWg7P +z5bfE7uKkLDdAILzN3mbMvVBYZcJGUIDOaw+jKeJKlDREt/qv9KsE3ZnS14Ik1l FYkoyP2hDtxkbo7U6snrUF/8s+v7Sl6Ngj89DsbU39aZYXzfIrCbqxQKmF+/GGQV DlKfe5FJwACQ0zBi/TVbQ3bX0ObTMCM= -----END CERTIFICATE-----Generated at Wed Apr 9 12:51:10 2025 by rpki-client