$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126dd560-3b8f-36a3-82c0-bc110b196871.roa File: 126dd560-3b8f-36a3-82c0-bc110b196871.roa (raw, json) Hash identifier: D+FSt5/IxMKFt5s+i+EfrFWhYof7RlxJvDBlHJLWzcI= Subject key identifier: E9:82:CE:9A:CE:9B:7A:47:6E:AC:A5:D8:44:48:7B:27:57:87:F7:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA0BEE98D48D87D82138C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126dd560-3b8f-36a3-82c0-bc110b196871.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.88.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0b:ee:98:d4:8d:87:d8:21:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=74b82697-fa63-40d0-97af-6520e9f479f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c0:fd:17:99:12:6d:5b:41:57:80:ab:03:8d: 2b:23:f1:c0:ec:09:83:05:30:ed:cb:e3:80:80:e5: 55:ab:b8:12:f2:e2:39:8a:60:ae:12:f4:71:7c:9f: 85:67:96:e3:41:9c:d6:1b:4d:02:de:14:ca:a9:1d: 53:39:ee:0b:d2:13:be:28:3e:f7:81:2c:42:ec:8f: 17:c6:86:3e:cb:fe:bd:28:b1:38:d5:a4:01:7b:80: 25:c1:71:42:07:05:d9:61:0a:6e:a2:25:29:51:09: b7:86:2e:8e:e9:09:55:96:9d:9b:c0:ad:d4:25:04: 7f:36:e2:07:6f:83:c3:a1:79:96:6f:b2:bf:9e:e9: 37:6a:e8:0e:e2:7e:82:e8:5a:21:08:a2:70:d7:e7: 9d:ca:58:80:a9:e0:47:95:ae:40:50:bd:8a:ad:c1: 69:c9:b5:72:37:bc:5d:f6:94:89:2f:ee:49:2b:b8: 54:aa:47:3c:6f:25:a4:6e:dc:b9:80:98:60:a3:b9: 91:fa:0a:a7:58:86:f3:70:23:6a:3f:0d:a9:f3:77: a7:1c:bb:8b:fc:42:95:e6:e3:6c:3c:ab:60:c6:da: 95:87:ff:1b:1b:57:51:fe:78:ce:1a:3e:1a:98:79: 32:83:1c:e6:3c:f1:27:a8:bd:e8:7d:29:b2:48:42: 27:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:82:CE:9A:CE:9B:7A:47:6E:AC:A5:D8:44:48:7B:27:57:87:F7:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126dd560-3b8f-36a3-82c0-bc110b196871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b8:d2:25:77:44:0f:e9:bb:62:14:8e:a2:50:78:e3:a7:ed: ba:f3:89:a0:fb:46:39:72:e4:1c:5a:a4:c9:d9:65:24:bb:50: aa:40:e3:b9:e2:52:c6:bb:63:a1:42:90:e2:a9:7d:76:4f:3e: 43:b4:cd:c8:79:ca:34:2c:dd:6f:17:b1:36:4d:00:b3:5c:20: b8:14:ef:02:71:42:7d:4b:a3:63:b3:cc:cf:94:0d:a4:c8:85: ac:75:6d:61:4f:3c:da:37:eb:d1:76:70:70:6c:32:e1:6d:99: 1a:f9:25:2d:e6:b1:6d:34:47:03:62:05:96:ed:57:9b:39:73: 46:e9:c0:81:b0:a0:96:da:6f:e1:76:9f:df:4c:ac:42:06:2c: 79:d1:fb:4d:20:61:a0:5b:0f:79:f6:6d:87:73:af:5b:fe:95: d0:a4:59:d8:44:8d:b5:b3:6f:82:04:dd:47:78:5b:b3:b2:33: 49:89:1f:d0:58:de:f9:1d:86:db:f3:33:d8:f4:53:e1:05:6f: f1:68:14:f1:f3:aa:1e:39:fb:00:27:ca:65:ce:07:af:0b:73: 12:c6:78:d5:c8:ca:f6:84:2b:b8:40:57:6b:95:48:81:17:1a: 8e:08:b1:2b:5f:50:49:a1:26:5f:ea:53:8c:a7:35:7a:28:08: db:04:ea:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgvumNSNh9ghOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk NzRiODI2OTctZmE2My00MGQwLTk3YWYtNjUyMGU5ZjQ3OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sD9F5kSbVtBV4CrA40rI/HA7AmDBTDty+OA gOVVq7gS8uI5imCuEvRxfJ+FZ5bjQZzWG00C3hTKqR1TOe4L0hO+KD73gSxC7I8X xoY+y/69KLE41aQBe4AlwXFCBwXZYQpuoiUpUQm3hi6O6QlVlp2bwK3UJQR/NuIH b4PDoXmWb7K/nuk3augO4n6C6FohCKJw1+edyliAqeBHla5AUL2KrcFpybVyN7xd 9pSJL+5JK7hUqkc8byWkbty5gJhgo7mR+gqnWIbzcCNqPw2p83enHLuL/EKV5uNs PKtgxtqVh/8bG1dR/njOGj4amHkygxzmPPEnqL3ofSmySEInIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmCzprOm3pHbqyl2ERIeydXh/eUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTI2ZGQ1NjAtM2I4Zi0z NmEzLTgyYzAtYmMxMTBiMTk2ODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1iYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH240iV3RA/pu2IUjqJQeOOn7brziaD7Rjly5BxapMnZZSS7UKpA47ni Usa7Y6FCkOKpfXZPPkO0zch5yjQs3W8XsTZNALNcILgU7wJxQn1Lo2OzzM+UDaTI hax1bWFPPNo369F2cHBsMuFtmRr5JS3msW00RwNiBZbtV5s5c0bpwIGwoJbab+F2 n99MrEIGLHnR+00gYaBbD3n2bYdzr1v+ldCkWdhEjbWzb4IE3Ud4W7OyM0mJH9BY 3vkdhtvzM9j0U+EFb/FoFPHzqh45+wAnymXOB68LcxLGeNXIyvaEK7hAV2uVSIEX Go4IsStfUEmhJl/qU4ynNXooCNsE6kw= -----END CERTIFICATE-----Generated at Sun May 11 05:09:59 2025 by rpki-client