$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa File: f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa (raw, json) Hash identifier: i5i1/ZeF+o3yRx3h8SUUdews8pnc1z2d4O8F82Ixedo= Subject key identifier: F5:E6:CC:D4:E2:99:E5:52:74:76:32:32:E1:CF:3E:4F:91:D5:4D:B7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7162E7785AF74B2D336500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.91.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:62:e7:78:5a:f7:4b:2d:33:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=61aed2f5-8e55-4540-9403-fb4cd8fdbb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:f5:3e:8d:35:53:5d:00:a8:91:5e:47:9f: b6:ec:5a:d9:82:fa:30:88:bc:76:4e:a5:3d:2e:fb: 1c:bc:3f:7a:67:68:d3:d6:10:ca:c6:74:8c:33:3c: 5e:ea:49:6a:f4:da:c7:32:2d:77:2e:15:42:d7:b9: da:58:f1:b5:30:f9:82:d7:76:e6:2f:31:ee:2c:94: 55:6e:79:f5:23:07:45:07:87:b8:6d:87:06:eb:3a: ee:f8:9d:ab:ac:d5:4e:1b:3b:c6:39:68:03:00:ed: 5c:64:30:36:98:eb:61:a6:7b:e5:a1:f7:3f:33:22: 07:4e:32:35:08:1e:ed:52:8d:77:3a:60:3e:c3:ef: 30:ee:be:1f:b4:61:1e:3f:2f:e2:bd:7d:e4:69:58: bf:cf:92:c1:4f:9e:27:6f:28:ed:3c:f0:a5:55:b9: 23:7b:3b:39:f2:70:d4:18:ef:d1:04:b7:bb:37:b3: c8:96:30:8d:aa:94:2b:e9:b2:dc:61:36:26:c4:9c: e8:3d:e5:f9:97:39:d7:72:0b:af:59:3f:29:d1:99: 15:bf:b3:00:8a:11:08:c5:a3:af:3d:a8:36:f0:2e: cb:30:5c:27:64:6b:50:9f:63:0d:ad:9f:00:e7:77: 2c:c0:6f:28:a1:37:d7:89:f2:fa:ce:99:4d:55:0a: bf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E6:CC:D4:E2:99:E5:52:74:76:32:32:E1:CF:3E:4F:91:D5:4D:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a3:9c:b9:96:8e:ef:10:9c:32:f6:af:2b:44:9a:05:c3:bf: fe:b8:c7:11:5c:3f:98:56:3d:41:f9:ef:8e:01:19:1f:aa:c1: b6:e3:0f:b4:8b:d4:ce:ca:18:66:5e:0a:8c:d8:40:d2:cf:55: 31:2d:50:7d:ca:d0:65:75:7b:e4:45:b9:1e:55:fa:87:c0:66: c4:90:ee:e6:ce:3d:c3:6a:4b:eb:ed:4c:c1:f3:bb:bb:9f:2c: 69:49:29:ce:07:b0:b8:ac:63:46:00:63:5c:30:e6:ad:bc:0c: 7c:68:6a:24:94:f2:7c:bb:80:6d:c4:3f:c9:24:50:38:56:d5: c4:ef:54:29:bc:b0:c1:7e:bc:ea:ea:87:49:d5:d2:6b:53:cd: f2:f6:a6:ea:b2:ff:f6:69:35:48:8f:06:4b:19:34:19:73:a6: 5e:95:5f:15:9f:d7:65:af:3a:b1:7f:a3:fd:65:3c:e5:36:03: 29:bc:4b:98:15:bb:a5:4d:c2:6f:6e:f6:53:0a:cc:33:51:5c: bb:b0:66:d9:fb:70:43:75:3f:bf:62:0d:0c:26:13:2e:47:48: f4:3c:9e:76:e2:75:fb:ec:92:54:b4:c2:e6:3a:78:34:5e:0b: f2:74:b0:bf:d0:66:42:40:25:43:15:cf:1d:67:ef:96:16:47: a6:d2:23:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWLneFr3Sy0zZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NjFhZWQyZjUtOGU1NS00NTQwLTk0MDMtZmI0Y2Q4ZmRiYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCr1Po01U10AqJFeR5+27FrZgvowiLx2TqU9 LvscvD96Z2jT1hDKxnSMMzxe6klq9NrHMi13LhVC17naWPG1MPmC13bmLzHuLJRV bnn1IwdFB4e4bYcG6zru+J2rrNVOGzvGOWgDAO1cZDA2mOthpnvlofc/MyIHTjI1 CB7tUo13OmA+w+8w7r4ftGEePy/ivX3kaVi/z5LBT54nbyjtPPClVbkjezs58nDU GO/RBLe7N7PIljCNqpQr6bLcYTYmxJzoPeX5lznXcguvWT8p0ZkVv7MAihEIxaOv Pag28C7LMFwnZGtQn2MNrZ8A53cswG8ooTfXifL6zplNVQq/PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXmzNTimeVSdHYyMuHPPk+R1U23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjVmOTMwMWItZGE4ZC0z OTg1LThkYWQtNmEyZDdjMWViNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1v6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKjnLmWju8QnDL2rytEmgXDv/64xxFcP5hWPUH5744BGR+qwbbjD7SL 1M7KGGZeCozYQNLPVTEtUH3K0GV1e+RFuR5V+ofAZsSQ7ubOPcNqS+vtTMHzu7uf LGlJKc4HsLisY0YAY1ww5q28DHxoaiSU8ny7gG3EP8kkUDhW1cTvVCm8sMF+vOrq h0nV0mtTzfL2puqy//ZpNUiPBksZNBlzpl6VXxWf12WvOrF/o/1lPOU2Aym8S5gV u6VNwm9u9lMKzDNRXLuwZtn7cEN1P79iDQwmEy5HSPQ8nnbidfvsklS0wuY6eDRe C/J0sL/QZkJAJUMVzx1n75YWR6bSIw8= -----END CERTIFICATE-----Generated at Fri Mar 14 08:27:29 2025 by rpki-client