$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06efbc59-7994-3adb-bb54-83a4aca76a69.roa File: 06efbc59-7994-3adb-bb54-83a4aca76a69.roa (raw, json) Hash identifier: PJrBnsHx6jozYALZLaO3CXobCC7qsPRAdFfjV6AfiI0= Subject key identifier: E7:E4:2C:96:AE:2A:1E:F3:AB:3B:4B:45:C5:90:CF:1E:1B:20:CA:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA89063D3AE91D82B8CA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06efbc59-7994-3adb-bb54-83a4aca76a69.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 75.88.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:89:06:3d:3a:e9:1d:82:b8:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=3e0ee3f6-03c8-4cbd-88ea-dac8d8db1428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:fe:c1:85:39:03:70:50:28:03:ea:9f:07: 63:4f:ba:34:20:11:43:a8:6b:0a:18:af:1f:78:36: f0:92:50:03:20:39:87:2d:e4:4e:7d:7e:09:44:ab: f6:5b:54:fb:0c:07:d0:d8:0b:7c:bf:3b:9e:52:b5: f2:63:0a:35:0e:97:bf:17:f3:b7:08:47:35:f2:87: 9a:e1:8f:cf:5a:04:47:8d:04:07:e3:eb:6f:d3:6d: de:a1:8c:f3:ee:d7:fd:e1:ae:21:9f:78:6b:0c:7e: aa:79:ff:90:b8:e1:79:e3:6e:7c:47:f5:89:5f:c7: 9a:70:17:3a:0d:18:50:d0:68:29:2f:56:93:0a:1d: fd:fb:ca:6a:bb:1e:2d:1c:2c:f2:cc:05:25:7c:fd: 7a:f8:e1:b6:d5:e3:6d:d9:ae:99:7b:87:c0:28:88: 15:a7:f1:5c:63:c6:a0:66:26:28:56:18:83:d3:eb: 30:b2:e1:ad:72:f1:b4:b1:bd:dd:1c:06:d5:75:45: 11:8e:01:ba:78:e7:c5:c7:e8:8b:c7:d0:a1:db:69: 73:47:a0:90:af:cc:61:d1:1c:53:c0:5d:8e:34:e2: d0:4e:b4:f4:b5:02:7a:11:d7:e3:eb:da:3e:4f:1f: b7:3b:c4:ad:55:08:71:be:93:5f:36:aa:78:3c:70: 62:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E4:2C:96:AE:2A:1E:F3:AB:3B:4B:45:C5:90:CF:1E:1B:20:CA:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06efbc59-7994-3adb-bb54-83a4aca76a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:04:87:c5:25:9f:3d:05:c6:4b:cd:fb:32:5c:fa:74:4d:8d: d0:d5:e9:78:f0:27:3e:50:b7:0b:91:22:a3:b8:aa:b5:35:7a: 49:74:cd:81:c4:14:bc:b1:a2:ed:1f:36:da:c6:f8:eb:be:c9: 6a:87:fa:d7:ac:87:f0:1c:4b:86:c3:44:50:ad:5f:81:86:6a: 64:20:59:9d:33:64:1f:58:e8:ea:aa:08:b1:fa:27:0a:94:d4: 51:cb:52:25:2c:7e:12:c8:59:19:34:a0:ae:ad:ee:28:96:65: 10:6c:66:6e:bf:e9:30:14:fd:4f:0b:ee:16:0a:f6:26:63:fc: 78:b2:78:b6:86:15:39:e7:08:dc:7a:9b:4c:e9:f3:da:2f:f1: 7b:69:93:35:59:7a:66:6d:39:c5:e6:bf:e8:4e:d0:70:cc:fe: b2:46:ba:44:6e:1f:e8:0a:e1:d6:48:8e:9f:6a:ed:79:31:29: ae:30:b1:e9:e2:55:7d:42:78:48:49:03:13:e4:28:a7:1a:4c: 96:50:9e:ef:90:3f:c4:e2:c5:65:7d:c7:90:d0:d3:f2:d0:a8: a4:ae:62:3f:dd:f2:6d:58:71:33:c7:4f:ec:61:46:da:a4:7d: e8:c4:d7:9b:be:3c:d1:ad:90:87:ea:c7:8d:bb:27:97:35:3a: f5:0f:5e:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qokGPTrpHYK4ykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk M2UwZWUzZjYtMDNjOC00Y2JkLTg4ZWEtZGFjOGQ4ZGIxNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob3+wYU5A3BQKAPqnwdjT7o0IBFDqGsKGK8f eDbwklADIDmHLeROfX4JRKv2W1T7DAfQ2At8vzueUrXyYwo1Dpe/F/O3CEc18oea 4Y/PWgRHjQQH4+tv023eoYzz7tf94a4hn3hrDH6qef+QuOF54258R/WJX8eacBc6 DRhQ0GgpL1aTCh39+8pqux4tHCzyzAUlfP16+OG21eNt2a6Ze4fAKIgVp/FcY8ag ZiYoVhiD0+swsuGtcvG0sb3dHAbVdUURjgG6eOfFx+iLx9Ch22lzR6CQr8xh0RxT wF2ONOLQTrT0tQJ6Edfj69o+Tx+3O8StVQhxvpNfNqp4PHBi2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfkLJauKh7zqztLRcWQzx4bIMoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDZlZmJjNTktNzk5NC0z YWRiLWJiNTQtODNhNGFjYTc2YTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYEh8Ulnz0FxkvN+zJc+nRNjdDV6XjwJz5QtwuRIqO4qrU1ekl0zYHE FLyxou0fNtrG+Ou+yWqH+tesh/AcS4bDRFCtX4GGamQgWZ0zZB9Y6OqqCLH6JwqU 1FHLUiUsfhLIWRk0oK6t7iiWZRBsZm6/6TAU/U8L7hYK9iZj/HiyeLaGFTnnCNx6 m0zp89ov8XtpkzVZemZtOcXmv+hO0HDM/rJGukRuH+gK4dZIjp9q7XkxKa4wseni VX1CeEhJAxPkKKcaTJZQnu+QP8TixWV9x5DQ0/LQqKSuYj/d8m1YcTPHT+xhRtqk fejE15u+PNGtkIfqx427J5c1OvUPXu0= -----END CERTIFICATE-----Generated at Mon Jun 30 21:04:01 2025 by rpki-client