$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8b91f5d-d63f-3fe1-b5d0-a6b25d37f29c.roa File: e8b91f5d-d63f-3fe1-b5d0-a6b25d37f29c.roa (raw, json) Hash identifier: I9wshqs8FEbdXKWnQ+eEHmcm8fpT8DMNgHPtJAc/RYQ= Subject key identifier: 15:A0:8C:3E:DB:C1:A5:31:2E:F1:5E:D7:7F:EE:F6:0D:72:DB:8B:E4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D71623F63B3AE5F6C966E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8b91f5d-d63f-3fe1-b5d0-a6b25d37f29c.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.91.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:62:3f:63:b3:ae:5f:6c:96:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=bbbb0012-4090-439a-94aa-b4aa886ed420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bb:f8:22:b8:13:9c:17:72:bb:73:7c:be:fa: be:5b:0a:de:aa:b6:0d:7a:30:3b:fb:5f:59:2b:4c: 3d:63:8f:1d:64:04:33:48:be:18:e4:2f:86:ca:09: 53:ed:01:8e:2c:9f:37:e3:c1:3e:79:48:c2:83:08: 96:df:7b:eb:a4:3d:29:98:23:41:99:bb:d1:00:62: 16:6f:fd:74:eb:d0:d7:16:1d:fa:fd:e6:c0:39:d6: 17:12:d7:fc:2b:e9:27:c1:77:d6:6e:1e:ad:91:3b: c8:15:fe:75:42:49:31:56:eb:c5:aa:c7:00:f1:8f: 5b:88:67:2f:9f:70:62:55:e9:7e:34:1b:45:b7:98: 42:a7:a9:2e:00:6b:26:da:c6:4b:44:c4:fa:f5:94: bc:78:65:14:45:66:37:3c:4b:2d:16:ee:3c:a3:fc: 49:10:8c:25:18:7d:54:ed:ce:d1:e6:d5:a6:bd:49: bb:54:da:7e:b3:7b:07:8f:02:c4:ad:87:0f:4d:9b: b8:ea:46:e6:d4:b2:06:39:60:80:83:79:99:f0:72: 3a:a3:b4:3a:cd:2c:fa:25:ed:ad:ea:17:10:b0:41: 86:30:47:32:10:2d:63:fa:86:c9:cf:85:bc:85:50: 2f:dd:40:99:3c:bf:65:a8:32:88:79:d0:67:c5:8a: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A0:8C:3E:DB:C1:A5:31:2E:F1:5E:D7:7F:EE:F6:0D:72:DB:8B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8b91f5d-d63f-3fe1-b5d0-a6b25d37f29c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:18:e3:69:7d:2a:0c:f5:3e:43:46:38:d5:0f:c2:ba:11:8c: 2c:a8:ab:c5:ba:36:29:5a:43:5a:b2:34:05:9f:35:04:19:3d: 53:f6:4d:45:37:7b:c6:b8:f5:0b:bc:64:19:37:f8:04:5c:56: cf:4c:e6:4e:17:a7:cc:fe:e2:cc:3f:5e:69:50:e6:7d:9b:0c: 43:c1:8c:75:db:a8:b1:75:cb:37:b7:26:4e:f2:36:5b:d7:c9: f3:46:d6:dd:6c:a9:eb:2f:7f:25:69:2a:07:4b:f8:af:bd:90: 2a:18:c7:89:2e:58:9c:d1:89:29:28:b6:01:24:fe:01:fb:f3: d1:05:11:cc:8c:3c:e4:8c:ca:4e:27:ae:ed:c2:88:e4:f1:97: 3e:5c:ac:e1:08:5e:b2:ea:81:7a:92:b5:78:58:0f:1b:58:d4: 34:f0:d5:39:d0:b7:7a:4a:3a:83:61:7e:e9:95:3c:1f:de:b7: 94:dd:04:63:d4:e7:4d:6a:ed:68:41:08:1e:0e:73:b8:5e:b9: 2a:72:52:8c:b5:67:7a:35:fc:2f:04:ab:2f:dc:e5:db:07:89: ae:2f:bd:ea:96:05:1a:c7:72:c3:0d:68:29:67:ee:5b:cf:20: 94:e6:9f:15:f4:2b:a8:c0:b1:2a:6a:f4:95:85:18:b3:8a:e5: 00:87:a3:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWI/Y7OuX2yWboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YmJiYjAwMTItNDA5MC00MzlhLTk0YWEtYjRhYTg4NmVkNDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbv4IrgTnBdyu3N8vvq+WwreqrYNejA7+19Z K0w9Y48dZAQzSL4Y5C+GyglT7QGOLJ8348E+eUjCgwiW33vrpD0pmCNBmbvRAGIW b/1069DXFh36/ebAOdYXEtf8K+knwXfWbh6tkTvIFf51QkkxVuvFqscA8Y9biGcv n3BiVel+NBtFt5hCp6kuAGsm2sZLRMT69ZS8eGUURWY3PEstFu48o/xJEIwlGH1U 7c7R5tWmvUm7VNp+s3sHjwLErYcPTZu46kbm1LIGOWCAg3mZ8HI6o7Q6zSz6Je2t 6hcQsEGGMEcyEC1j+obJz4W8hVAv3UCZPL9lqDKIedBnxYqfmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWgjD7bwaUxLvFe13/u9g1y24vkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZThiOTFmNWQtZDYzZi0z ZmUxLWI1ZDAtYTZiMjVkMzdmMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1v4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwY42l9Kgz1PkNGONUPwroRjCyoq8W6NilaQ1qyNAWfNQQZPVP2TUU3 e8a49Qu8ZBk3+ARcVs9M5k4Xp8z+4sw/XmlQ5n2bDEPBjHXbqLF1yze3Jk7yNlvX yfNG1t1sqesvfyVpKgdL+K+9kCoYx4kuWJzRiSkotgEk/gH789EFEcyMPOSMyk4n ru3CiOTxlz5crOEIXrLqgXqStXhYDxtY1DTw1TnQt3pKOoNhfumVPB/et5TdBGPU 501q7WhBCB4Oc7heuSpyUoy1Z3o1/C8Eqy/c5dsHia4vveqWBRrHcsMNaCln7lvP IJTmnxX0K6jAsSpq9JWFGLOK5QCHox0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:25:04 2025 by rpki-client