$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06efbc59-7994-3adb-bb54-83a4aca76a69.roa File: 06efbc59-7994-3adb-bb54-83a4aca76a69.roa (raw, json) Hash identifier: bIYHEyo9S0jhTWt2MC7Q+w2VTd0jL+tNvp93ZIzakK4= Subject key identifier: 80:27:D2:CD:EA:23:FF:B2:75:CB:54:53:DF:31:86:75:0E:E3:84:9E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D71605CEAB6FF5010AAC900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06efbc59-7994-3adb-bb54-83a4aca76a69.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.88.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:60:5c:ea:b6:ff:50:10:aa:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=6f0d388e-417f-484e-9223-79f1ff50c263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5b:b8:32:a6:77:46:d4:cf:eb:71:d8:0c:9a: 94:10:cf:92:c6:f5:ef:08:c0:d7:a4:b1:a2:13:df: 75:37:21:10:a0:61:a3:ce:12:a9:50:e2:a1:f5:71: c5:33:10:f3:26:a2:f7:38:95:fb:5d:aa:2c:c8:40: 2b:97:31:1a:72:b9:62:48:e9:39:15:d8:29:5c:eb: 11:2b:9a:f4:bf:f1:07:c5:25:8d:10:d4:1b:20:06: 51:c1:57:49:2a:e7:8a:2c:dd:ef:fa:37:b4:03:4c: eb:c6:61:e6:f0:46:8e:45:14:3d:0d:8b:5e:df:78: 52:a8:db:78:17:51:77:b5:03:a1:7c:14:86:5b:c6: 87:c9:d2:50:5a:0e:55:03:b6:d8:4c:e0:60:08:80: fa:f2:ca:5e:4e:31:43:05:c6:f2:b2:94:ef:a4:b4: d0:9f:f2:3c:b0:72:c8:2e:da:c0:cb:30:74:79:42: fa:e5:bb:2e:00:3d:7e:ab:e2:b1:76:5f:4f:61:f4: 79:e2:39:5c:15:f5:07:20:d4:15:70:0f:b4:df:16: 04:82:a0:df:97:76:ed:ae:0e:af:07:3d:a1:3c:8d: 44:2b:b7:c6:3a:e0:6d:8f:28:0e:ff:f1:5d:1b:23: b7:d5:36:be:af:e2:b8:7b:54:6a:fd:e1:9e:8e:e4: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:27:D2:CD:EA:23:FF:B2:75:CB:54:53:DF:31:86:75:0E:E3:84:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06efbc59-7994-3adb-bb54-83a4aca76a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b9:97:67:fc:0d:45:d1:50:dc:90:10:4e:e8:58:1e:18:c2: 45:b6:1e:a0:4b:34:b1:c7:58:e4:e8:dc:ce:7e:3f:3c:e9:13: 44:79:fe:2f:b6:58:83:60:c1:bf:56:3d:25:f8:c9:ef:51:5c: 0f:ec:0b:56:3a:a9:1f:54:9e:39:f5:9f:0b:3b:d1:be:cb:92: 49:4a:be:57:ff:f5:a9:c2:54:83:22:8b:51:88:78:0a:d0:6c: 0b:a0:22:a2:4c:8f:23:ac:5c:bf:34:47:af:44:59:a5:80:33: a8:12:0e:ae:b5:9f:7f:81:7c:89:32:30:9d:83:47:5b:2c:52: d3:58:d2:8f:52:34:3b:13:f9:cf:18:bf:4c:ff:6f:7f:1a:4b: 4f:46:c7:10:28:9e:9d:52:ac:b4:04:d2:63:d3:12:c9:ac:2a: ed:94:a6:f4:d4:d3:c9:e8:65:d9:0d:3c:d2:7d:a0:df:69:d5: 36:62:97:f8:49:ae:64:c3:36:aa:c9:ef:67:eb:a2:2b:56:ba: 47:9f:ca:dc:7c:2d:6d:84:58:07:cd:b2:1e:34:5a:9b:39:7d: b4:20:f3:df:39:52:d8:63:6c:41:cf:3e:3f:39:62:83:ef:6d: 45:1f:fa:ac:34:d6:d2:45:95:cb:e8:62:89:90:d9:00:de:fd: af:af:02:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWBc6rb/UBCqyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NmYwZDM4OGUtNDE3Zi00ODRlLTkyMjMtNzlmMWZmNTBjMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1u4MqZ3RtTP63HYDJqUEM+SxvXvCMDXpLGi E991NyEQoGGjzhKpUOKh9XHFMxDzJqL3OJX7XaosyEArlzEacrliSOk5FdgpXOsR K5r0v/EHxSWNENQbIAZRwVdJKueKLN3v+je0A0zrxmHm8EaORRQ9DYte33hSqNt4 F1F3tQOhfBSGW8aHydJQWg5VA7bYTOBgCID68speTjFDBcbyspTvpLTQn/I8sHLI LtrAyzB0eUL65bsuAD1+q+Kxdl9PYfR54jlcFfUHINQVcA+03xYEgqDfl3btrg6v Bz2hPI1EK7fGOuBtjygO//FdGyO31Ta+r+K4e1Rq/eGejuSwGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAn0s3qI/+ydctUU98xhnUO44SeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDZlZmJjNTktNzk5NC0z YWRiLWJiNTQtODNhNGFjYTc2YTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH25l2f8DUXRUNyQEE7oWB4YwkW2HqBLNLHHWOTo3M5+PzzpE0R5/i+2 WINgwb9WPSX4ye9RXA/sC1Y6qR9Unjn1nws70b7LkklKvlf/9anCVIMii1GIeArQ bAugIqJMjyOsXL80R69EWaWAM6gSDq61n3+BfIkyMJ2DR1ssUtNY0o9SNDsT+c8Y v0z/b38aS09GxxAonp1SrLQE0mPTEsmsKu2UpvTU08noZdkNPNJ9oN9p1TZil/hJ rmTDNqrJ72froitWukefytx8LW2EWAfNsh40Wps5fbQg8985UthjbEHPPj85YoPv bUUf+qw01tJFlcvoYomQ2QDe/a+vAq4= -----END CERTIFICATE-----Generated at Sun May 11 00:41:08 2025 by rpki-client