$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa File: f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa (raw, json) Hash identifier: HTCe9UnDHi4YtbDuFZgfM2WKtmZn0nKXOqfu5pNu9j8= Subject key identifier: 6A:20:90:45:C7:61:05:0F:81:E8:1B:2A:86:FF:39:45:2D:A2:91:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB5708CF7CC4A218C161EC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 75.91.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:70:8c:f7:cc:4a:21:8c:16:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=547d7810-cde6-4e18-aeea-248674a8bd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:a5:9e:eb:ea:b8:02:2b:b3:91:ba:12:94: 49:22:23:21:37:e0:f9:d7:67:63:2d:3f:c9:1c:f2: 8d:94:91:d1:8b:d1:e7:2e:47:15:0c:6b:49:d2:17: 82:47:dd:a0:7c:4e:16:08:e7:c2:60:32:a0:1d:06: 13:9d:bc:ca:84:31:7e:fe:92:57:49:b7:28:29:f7: 65:78:ae:91:a2:b1:ea:f4:b2:54:e4:10:03:33:10: a5:19:d2:d2:be:cc:20:41:ec:4f:61:87:39:83:df: bc:d7:1b:ed:ff:76:07:90:0a:c0:3e:68:21:6f:0b: f6:c1:a9:91:89:e6:04:9d:4d:e8:1d:cd:8c:9b:60: 16:c2:33:77:15:80:5f:eb:0e:8e:98:aa:18:90:60: f4:e6:8f:27:e7:79:64:70:10:b7:f4:c7:55:94:49: eb:80:1c:3a:79:2f:04:1a:68:be:35:1d:25:94:10: d7:8c:4e:ee:1a:16:2a:3b:a4:b8:48:13:90:b2:36: e0:9b:e7:64:40:be:d2:20:1c:2a:a9:0b:0e:c8:e9: 16:4a:5a:59:bb:ff:f1:03:1a:44:1c:ad:72:9b:44: 8d:31:f6:d5:1c:b6:ad:d4:95:dd:9e:77:22:5f:68: 7b:11:62:94:53:4e:79:67:e9:ee:a5:fd:a6:6b:60: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:20:90:45:C7:61:05:0F:81:E8:1B:2A:86:FF:39:45:2D:A2:91:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:64:20:aa:34:97:24:90:ca:8f:7f:91:85:16:91:6f:f3:71: f3:2e:36:95:5d:d3:87:2b:ad:48:7c:6c:dc:b2:9b:a0:4c:61: 64:5e:1e:f2:22:55:7d:15:72:11:81:66:c7:d7:db:98:7f:44: a3:c3:5d:85:cc:f3:a1:6c:98:2c:80:d4:3a:be:95:9e:3b:3d: 4d:bf:b8:02:5e:16:09:01:0c:b7:d5:80:c4:0a:ea:07:0e:4b: 0d:dd:21:5f:ce:93:96:59:12:19:3e:1e:f9:16:d4:86:8e:ed: b9:be:c1:2c:b6:ee:b5:1d:a2:94:55:b6:66:82:65:83:e8:20: 6d:b5:02:72:9e:b0:43:10:af:96:52:d3:a9:59:f0:5c:c8:c6: 80:83:63:4c:32:7c:c8:cb:61:45:b2:70:23:87:ec:94:3a:1d: 71:2b:bb:5a:af:1f:d7:62:21:d6:7a:20:7c:16:d3:e6:81:d0: 18:ff:18:de:3f:33:69:52:a2:02:c2:82:a5:86:a8:dd:42:18: be:5b:a6:98:d5:ee:5b:57:86:99:37:5a:81:6c:fd:2e:29:75: 0b:d6:55:bf:a2:a1:63:32:6a:60:6e:7d:bc:7e:09:cf:f8:4c: 7a:d7:3f:76:85:cf:e3:ba:7c:3d:85:a9:29:26:d6:87:23:84: b0:50:3b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXCM98xKIYwWHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk NTQ3ZDc4MTAtY2RlNi00ZTE4LWFlZWEtMjQ4Njc0YThiZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrWlnuvquAIrs5G6EpRJIiMhN+D512djLT/J HPKNlJHRi9HnLkcVDGtJ0heCR92gfE4WCOfCYDKgHQYTnbzKhDF+/pJXSbcoKfdl eK6RorHq9LJU5BADMxClGdLSvswgQexPYYc5g9+81xvt/3YHkArAPmghbwv2wamR ieYEnU3oHc2Mm2AWwjN3FYBf6w6OmKoYkGD05o8n53lkcBC39MdVlEnrgBw6eS8E Gmi+NR0llBDXjE7uGhYqO6S4SBOQsjbgm+dkQL7SIBwqqQsOyOkWSlpZu//xAxpE HK1ym0SNMfbVHLat1JXdnnciX2h7EWKUU055Z+nupf2ma2BRDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGogkEXHYQUPgegbKob/OUUtopEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjVmOTMwMWItZGE4ZC0z OTg1LThkYWQtNmEyZDdjMWViNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1v6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNkIKo0lySQyo9/kYUWkW/zcfMuNpVd04crrUh8bNyym6BMYWReHvIi VX0VchGBZsfX25h/RKPDXYXM86FsmCyA1Dq+lZ47PU2/uAJeFgkBDLfVgMQK6gcO Sw3dIV/Ok5ZZEhk+HvkW1IaO7bm+wSy27rUdopRVtmaCZYPoIG21AnKesEMQr5ZS 06lZ8FzIxoCDY0wyfMjLYUWycCOH7JQ6HXEru1qvH9diIdZ6IHwW0+aB0Bj/GN4/ M2lSogLCgqWGqN1CGL5bppjV7ltXhpk3WoFs/S4pdQvWVb+ioWMyamBufbx+Cc/4 THrXP3aFz+O6fD2FqSkm1ocjhLBQO6g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:29 2025 by rpki-client