$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db864009-5792-3ef2-ae28-c97e5430da9a.roa File: db864009-5792-3ef2-ae28-c97e5430da9a.roa (raw, json) Hash identifier: xT6hlNDb49Xsp6m6riSy30ttYuXhcSLnA5ssBYcYrUk= Subject key identifier: 14:1B:C0:E6:4F:6F:EA:B7:F1:77:E6:BC:58:76:5D:92:4C:8C:15:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C5DFCE05EEE2360CEBA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db864009-5792-3ef2-ae28-c97e5430da9a.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 75.91.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:5d:fc:e0:5e:ee:23:60:ce:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=7b76cb23-5145-4f3a-a956-09392092945f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e6:76:98:62:0e:d2:85:4c:2b:71:80:20:bb: 10:cb:fc:ba:2d:dd:1c:2f:f8:0b:f5:de:14:ac:10: 34:50:bb:8d:70:7e:b3:f0:e7:a0:9f:e9:11:03:b8: 42:89:02:11:3f:f8:9e:67:1b:8a:e4:11:28:f1:5f: 0c:96:c5:84:27:2d:8c:61:bc:58:fd:6b:44:69:b9: f8:c5:3c:6e:17:0b:6a:68:cb:7e:90:11:c1:65:17: e2:f2:0c:86:3f:ab:b0:42:2c:6c:0f:72:16:d0:ea: 26:58:7e:41:4f:0d:22:98:64:9a:b7:ab:cb:43:0d: be:a9:6c:4f:43:6f:9a:55:10:6b:7a:a6:07:2f:99: b2:ad:30:31:d1:72:42:b3:13:b8:6b:3f:88:3a:92: 3d:1b:89:8c:50:87:c4:45:36:db:04:28:3e:9a:e4: 1e:7b:ea:b2:10:bc:15:36:85:b3:0f:15:45:1b:a0: 05:c0:ce:a5:36:e0:f1:c2:07:36:06:da:0d:4b:f4: 30:58:37:fe:0a:ab:d6:2c:0f:57:e5:9c:ee:93:cd: f6:e1:c4:45:65:31:6b:c9:1a:e6:77:fd:58:10:98: cc:00:03:0e:0b:82:8b:88:6f:b3:f9:3f:3f:26:b1: 36:8c:01:8e:3c:71:ca:28:77:75:91:ff:64:2c:b8: ed:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1B:C0:E6:4F:6F:EA:B7:F1:77:E6:BC:58:76:5D:92:4C:8C:15:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db864009-5792-3ef2-ae28-c97e5430da9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:95:7a:16:c1:8d:62:ad:af:af:7e:49:e7:89:bd:e1:79:15: 1d:4c:0a:33:94:43:67:ea:f1:f4:51:33:b1:ed:e8:9c:08:99: 98:8d:7f:3a:b4:9e:32:1f:a6:ac:de:5a:b4:47:6f:b1:95:1b: 35:3b:ff:44:f2:d4:95:f4:ba:2f:d1:8b:4c:3a:76:11:18:c7: 1a:96:81:e8:56:32:d8:dc:5e:8f:56:90:88:9b:76:8a:0b:82: f5:5b:95:97:23:2d:43:56:a0:80:ad:4a:01:cc:39:ca:03:50: b7:d9:33:20:df:b5:08:ac:84:c6:ee:ca:14:b6:12:17:14:42: 40:33:bd:23:0a:7c:e1:1a:19:a2:fa:f5:33:36:a7:07:00:5b: 87:64:05:2c:92:87:99:36:c4:57:a2:75:06:9d:39:db:7b:67: 38:84:ed:73:d2:b6:69:5c:5d:4b:d1:25:e7:10:45:46:9c:32: 5b:67:6b:3c:ea:8f:1c:e7:da:a7:41:bb:a0:98:d2:33:ce:b1: 77:d9:8e:e0:40:d8:39:dc:7c:0b:25:a6:fc:24:e5:8e:52:9e: 8e:37:f9:14:d2:58:ab:1b:d7:e5:87:96:85:1d:91:6e:45:2a: 6b:bf:5b:45:3f:c4:bb:62:88:5e:8c:3e:b2:4a:cf:c5:df:16: e6:09:d5:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLF384F7uI2DOugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk N2I3NmNiMjMtNTE0NS00ZjNhLWE5NTYtMDkzOTIwOTI5NDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+Z2mGIO0oVMK3GAILsQy/y6Ld0cL/gL9d4U rBA0ULuNcH6z8Oegn+kRA7hCiQIRP/ieZxuK5BEo8V8MlsWEJy2MYbxY/WtEabn4 xTxuFwtqaMt+kBHBZRfi8gyGP6uwQixsD3IW0OomWH5BTw0imGSat6vLQw2+qWxP Q2+aVRBreqYHL5myrTAx0XJCsxO4az+IOpI9G4mMUIfERTbbBCg+muQee+qyELwV NoWzDxVFG6AFwM6lNuDxwgc2BtoNS/QwWDf+CqvWLA9X5Zzuk8324cRFZTFryRrm d/1YEJjMAAMOC4KLiG+z+T8/JrE2jAGOPHHKKHd1kf9kLLjt1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQbwOZPb+q38XfmvFh2XZJMjBXZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGI4NjQwMDktNTc5Mi0z ZWYyLWFlMjgtYzk3ZTU0MzBkYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1uwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKVehbBjWKtr69+SeeJveF5FR1MCjOUQ2fq8fRRM7Ht6JwImZiNfzq0 njIfpqzeWrRHb7GVGzU7/0Ty1JX0ui/Ri0w6dhEYxxqWgehWMtjcXo9WkIibdooL gvVblZcjLUNWoICtSgHMOcoDULfZMyDftQishMbuyhS2EhcUQkAzvSMKfOEaGaL6 9TM2pwcAW4dkBSySh5k2xFeidQadOdt7ZziE7XPStmlcXUvRJecQRUacMltnazzq jxzn2qdBu6CY0jPOsXfZjuBA2DncfAslpvwk5Y5Sno43+RTSWKsb1+WHloUdkW5F Kmu/W0U/xLtiiF6MPrJKz8XfFuYJ1Z0= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:23 2025 by rpki-client