$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff4c6145-8ec0-37a5-9245-623e9f5edfdf.roa File: ff4c6145-8ec0-37a5-9245-623e9f5edfdf.roa (raw, json) Hash identifier: LCOMUZ8ERQLABDUSRHAfOsRJ9fjQc683wLDX3m1OOzs= Subject key identifier: 3F:8E:80:6B:95:2F:56:B6:78:F1:96:AA:E6:10:2A:0E:80:0C:FA:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F30479B0427B1A6C1917180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff4c6145-8ec0-37a5-9245-623e9f5edfdf.roa Signing time: Tue 21 Jan 2025 20:37:42 +0000 ROA not before: Tue 21 Jan 2025 20:37:42 +0000 ROA not after: Mon 21 Apr 2025 19:37:42 +0000 asID: 7029 IP address blocks: 75.91.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:47:9b:04:27:b1:a6:c1:91:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:37:42 2025 GMT Not After : Apr 21 19:37:42 2025 GMT Subject: CN=e38e80e3-eb74-45da-8580-78cacc702a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:12:76:f9:e7:bb:cd:c9:97:af:4b:39:50:95: b4:92:e7:11:e0:f5:0b:7f:71:d9:3b:d3:b4:c1:c6: 0b:d2:63:90:bb:5c:11:52:f0:e9:6e:a9:5c:43:d3: 6f:cc:3e:fc:10:00:78:48:fc:cf:b4:c9:37:ad:e1: 03:ac:e8:64:d8:52:29:65:08:b9:98:3d:eb:dd:3a: f6:f9:9f:7f:76:ed:46:1b:92:37:0a:ab:ac:43:ab: 43:22:8d:cf:d5:da:07:b9:26:ef:e4:dd:5a:35:ae: 34:38:c2:89:2c:b1:20:e7:fb:ae:db:cb:52:d9:2c: a2:5a:bf:e3:dd:9d:8e:92:f9:3b:76:69:68:6f:c3: 2d:ab:4a:88:89:19:4b:f4:5f:29:cb:3d:45:50:5c: 3f:a2:ef:8f:8f:3e:b0:6e:fd:f3:c0:78:af:cc:d0: 47:58:2f:1c:3f:c3:9c:21:ea:d7:5e:81:be:d3:40: 20:d9:a4:0e:8e:12:06:38:c9:3a:b9:aa:f6:cb:fb: 30:58:21:e8:3f:16:31:32:c1:fc:3f:cb:9d:f3:34: 5d:84:a6:60:6a:da:9a:25:ce:61:69:01:0c:67:ea: 6c:a6:44:b5:46:4a:fd:c7:94:53:f8:14:57:25:f5: 5a:4d:60:f1:7d:86:a4:27:04:57:83:a6:32:bc:49: 59:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8E:80:6B:95:2F:56:B6:78:F1:96:AA:E6:10:2A:0E:80:0C:FA:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff4c6145-8ec0-37a5-9245-623e9f5edfdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ce:10:cb:76:af:3b:b0:c5:6b:3d:a2:be:3f:40:7e:6a:58: d8:a3:2c:74:78:03:5e:85:9b:c1:75:61:4f:33:78:7f:21:8c: 47:0e:d3:fd:70:ff:d8:19:a5:ae:84:da:41:e5:04:be:23:04: 15:1d:67:2a:a6:bb:d5:cb:5b:e6:be:f8:d1:f9:a0:4a:98:2b: f5:ff:bb:1b:ad:57:27:60:64:cd:b6:ca:51:3d:16:df:b3:e8: 19:e7:93:3d:1d:69:4f:fc:88:ab:7a:6f:5c:87:4c:d6:f0:db: 24:db:88:6a:87:f7:45:98:97:fe:97:f4:a3:35:c0:09:ac:b9: a4:7a:4a:b3:84:05:e0:07:e4:a9:dc:bd:6f:86:ad:0d:84:f4: 04:23:99:c9:bd:f4:cb:bc:b8:f3:2c:38:75:cf:01:1e:36:e5: 82:dd:f5:a7:93:06:82:3b:29:14:5b:95:fd:e0:78:02:d4:fd: 8b:02:99:9d:56:72:90:dd:4d:ee:90:0c:3a:c0:27:4a:4a:0b: fe:a8:49:18:87:98:2b:f1:27:35:9e:27:f9:25:3a:d4:e8:b5: c7:e0:e2:5b:6b:4b:e1:9b:d3:f7:2c:40:3d:98:db:25:a8:42: 90:1e:c1:3a:bf:d1:83:c4:a9:df:6b:7a:6c:73:7e:41:d8:67: 4e:1b:53:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMEebBCexpsGRcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzc0MloXDTI1MDQyMTE5Mzc0MlowLzEtMCsGA1UEAxMk ZTM4ZTgwZTMtZWI3NC00NWRhLTg1ODAtNzhjYWNjNzAyYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RJ2+ee7zcmXr0s5UJW0kucR4PULf3HZO9O0 wcYL0mOQu1wRUvDpbqlcQ9NvzD78EAB4SPzPtMk3reEDrOhk2FIpZQi5mD3r3Tr2 +Z9/du1GG5I3CqusQ6tDIo3P1doHuSbv5N1aNa40OMKJLLEg5/uu28tS2SyiWr/j 3Z2Okvk7dmlob8Mtq0qIiRlL9F8pyz1FUFw/ou+Pjz6wbv3zwHivzNBHWC8cP8Oc IerXXoG+00Ag2aQOjhIGOMk6uar2y/swWCHoPxYxMsH8P8ud8zRdhKZgatqaJc5h aQEMZ+pspkS1Rkr9x5RT+BRXJfVaTWDxfYakJwRXg6YyvElZwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+OgGuVL1a2ePGWquYQKg6ADPqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY0YzYxNDUtOGVjMC0z N2E1LTkyNDUtNjIzZTlmNWVkZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1tgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzOEMt2rzuwxWs9or4/QH5qWNijLHR4A16Fm8F1YU8zeH8hjEcO0/1w /9gZpa6E2kHlBL4jBBUdZyqmu9XLW+a++NH5oEqYK/X/uxutVydgZM22ylE9Ft+z 6Bnnkz0daU/8iKt6b1yHTNbw2yTbiGqH90WYl/6X9KM1wAmsuaR6SrOEBeAH5Knc vW+GrQ2E9AQjmcm99Mu8uPMsOHXPAR425YLd9aeTBoI7KRRblf3geALU/YsCmZ1W cpDdTe6QDDrAJ0pKC/6oSRiHmCvxJzWeJ/klOtTotcfg4ltrS+Gb0/csQD2Y2yWo QpAewTq/0YPEqd9remxzfkHYZ04bUwk= -----END CERTIFICATE-----Generated at Sun Apr 6 03:55:14 2025 by rpki-client