$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb7f1a3d-65fe-3210-8199-7feeee6a7056.roa File: fb7f1a3d-65fe-3210-8199-7feeee6a7056.roa (raw, json) Hash identifier: 8FOQyXbd9hPUbg0XyReLfzPGPoTKvtU9p7K5r4T2hP8= Subject key identifier: C9:4C:81:96:94:7C:C3:24:1A:0A:4D:82:ED:82:C9:8C:85:7D:05:9B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716A3D48E5AC6DE29E2B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb7f1a3d-65fe-3210-8199-7feeee6a7056.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.89.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:6a:3d:48:e5:ac:6d:e2:9e:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=01f1eac2-497c-44fa-97c5-41dcb46f8e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:eb:25:5f:f1:90:13:e8:c6:6b:c7:37:8e: a2:3b:07:a3:76:ba:bb:ca:1b:0c:eb:65:11:8d:65: a8:98:bd:cd:71:26:2d:a8:87:d2:84:27:df:95:49: 12:75:8f:45:92:23:ec:fb:3f:8f:8c:63:6b:c2:94: 58:40:cd:41:78:93:e5:ce:7e:a7:64:cd:e0:d6:79: 21:b8:05:ba:e9:2f:94:6c:fa:cf:24:21:0a:99:ee: d5:b2:25:b2:f3:fc:77:27:05:a9:05:d1:0a:fd:1f: 1d:f3:94:01:63:62:e4:cd:1c:78:df:ca:85:bf:d0: bb:43:d8:22:10:aa:e7:6a:22:8c:be:1d:b9:04:d1: 42:59:2a:66:52:93:83:85:e6:7d:e1:7e:4f:5b:4d: 58:6b:39:db:1c:7f:cc:df:62:cb:44:d5:69:e2:09: 2e:72:6f:a7:91:14:70:39:14:8c:84:c0:17:b0:fc: 99:91:01:9c:f3:06:c5:64:97:9b:7a:43:c4:4c:10: 06:db:8d:16:1a:07:16:07:16:80:fc:55:34:7b:37: 22:da:a6:db:33:a0:c5:fb:92:20:39:17:5b:54:c4: de:cd:20:6c:da:42:b5:11:a9:f4:00:dd:7d:d0:3c: d3:66:ad:e7:a4:a0:e2:74:d8:f8:03:0f:bf:b5:f3: 9f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4C:81:96:94:7C:C3:24:1A:0A:4D:82:ED:82:C9:8C:85:7D:05:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb7f1a3d-65fe-3210-8199-7feeee6a7056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:3d:29:38:fe:56:e2:1e:a8:b3:19:fa:fb:8b:6d:c7:49:07: 71:b9:b2:f1:c8:e0:77:7f:0b:bc:7d:7d:1b:76:fa:44:a5:ec: e6:6a:c3:44:ba:7b:9e:da:94:a0:d2:6e:8f:b7:6d:33:eb:51: 41:6c:6c:30:c1:2c:8b:79:b0:00:c0:76:df:33:d2:0d:72:94: b8:0a:05:2e:a1:bb:9f:0d:a6:c2:8c:1d:aa:a5:e8:6d:0b:1f: 33:c7:4d:63:60:bd:ab:a5:07:7a:db:63:89:ea:69:c3:d2:a1: f9:fd:1a:cd:bd:e1:bf:0c:68:03:ac:a5:cc:51:b0:a3:88:f6: 9b:22:5c:ec:d4:77:30:cf:f4:72:05:66:4c:b3:21:d2:15:91: 62:2b:2c:09:a4:7f:28:86:e9:bb:3e:f5:62:ec:f8:a1:0d:c7: 4c:ae:e7:80:6d:a7:9e:d2:2f:5a:35:c8:91:58:8b:0b:bf:d5: 48:54:5f:ba:5b:ca:ca:be:53:db:e1:f4:68:9f:1c:6e:49:91: 2f:b9:48:91:7f:87:99:3a:d4:a6:9f:35:07:62:27:a5:8b:72: f3:95:88:6e:b1:9a:91:9e:26:a9:a3:0c:79:85:d4:50:45:81: 85:fb:d2:2a:69:14:f1:95:93:eb:0f:e5:32:ff:f7:08:0c:56: 97:d1:16:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWo9SOWsbeKeKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MDFmMWVhYzItNDk3Yy00NGZhLTk3YzUtNDFkY2I0NmY4ZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeDrJV/xkBPoxmvHN46iOwejdrq7yhsM62UR jWWomL3NcSYtqIfShCfflUkSdY9FkiPs+z+PjGNrwpRYQM1BeJPlzn6nZM3g1nkh uAW66S+UbPrPJCEKme7VsiWy8/x3JwWpBdEK/R8d85QBY2LkzRx438qFv9C7Q9gi EKrnaiKMvh25BNFCWSpmUpODheZ94X5PW01YaznbHH/M32LLRNVp4gkucm+nkRRw ORSMhMAXsPyZkQGc8wbFZJebekPETBAG240WGgcWBxaA/FU0ezci2qbbM6DF+5Ig ORdbVMTezSBs2kK1Ean0AN190DzTZq3npKDidNj4Aw+/tfOfNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlMgZaUfMMkGgpNgu2CyYyFfQWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmI3ZjFhM2QtNjVmZS0z MjEwLTgxOTktN2ZlZWVlNmE3MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1muMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAI9KTj+VuIeqLMZ+vuLbcdJB3G5svHI4Hd/C7x9fRt2+kSl7OZqw0S6 e57alKDSbo+3bTPrUUFsbDDBLIt5sADAdt8z0g1ylLgKBS6hu58NpsKMHaql6G0L HzPHTWNgvaulB3rbY4nqacPSofn9Gs294b8MaAOspcxRsKOI9psiXOzUdzDP9HIF ZkyzIdIVkWIrLAmkfyiG6bs+9WLs+KENx0yu54Btp57SL1o1yJFYiwu/1UhUX7pb ysq+U9vh9GifHG5JkS+5SJF/h5k61KafNQdiJ6WLcvOViG6xmpGeJqmjDHmF1FBF gYX70ippFPGVk+sP5TL/9wgMVpfRFgE= -----END CERTIFICATE-----Generated at Fri Mar 14 08:32:12 2025 by rpki-client