$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12745f0e-e662-342d-905f-96f848e71092.roa File: 12745f0e-e662-342d-905f-96f848e71092.roa (raw, json) Hash identifier: 2jQ+zIbghvHj8ebO7kvOC4hVDUrFr84Itb+2lVeYJOU= Subject key identifier: 1E:3C:6F:BA:BB:22:EF:30:7B:0B:59:AE:AE:D6:D7:A5:02:AD:2C:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA0A29F4F2178B54694F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12745f0e-e662-342d-905f-96f848e71092.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.88.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0a:29:f4:f2:17:8b:54:69:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=6a1a6ebf-86c9-4de7-a041-91ad3f00b2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5c:bd:d5:59:40:b3:25:bb:d3:47:2a:c2:d6: 5e:bd:4f:62:2e:11:91:f2:21:9c:56:ef:d6:15:bd: 83:fd:87:8b:2e:63:7a:62:ad:ca:96:ba:7e:87:d6: e6:20:ab:61:ee:45:d6:ea:e7:fe:2d:43:55:3b:7b: 67:f7:2e:8e:03:09:43:a4:b5:22:68:68:7b:3c:a7: 7c:37:f7:2e:a5:91:a5:12:44:c2:a5:dc:d9:93:e5: 4a:ef:1e:12:fd:71:39:3e:6f:f0:19:7d:99:8c:53: 44:df:5e:a6:fa:c1:a0:a2:f4:9e:c0:3e:d5:b7:7c: 5d:ea:5b:8b:68:0e:aa:09:73:2a:4e:b1:80:39:8a: 82:3e:7b:dc:c3:ed:a8:0e:67:79:f8:9d:b4:c3:da: ff:58:c1:3b:aa:8c:61:25:d0:bc:a6:42:ce:2b:e9: 24:a3:36:5b:c3:00:96:1d:bc:50:d8:44:4d:1b:4b: d9:1c:d7:51:a8:83:72:5d:fa:54:ee:ab:39:67:9a: cf:56:ff:cb:24:ad:35:e6:bc:69:68:1c:d3:f1:da: 65:2d:9f:95:1a:90:ce:63:47:03:e3:66:12:ef:c4: c9:63:67:54:1a:02:7e:72:61:f7:a8:af:f4:83:81: 31:ee:fd:85:36:6c:96:c5:d2:f2:68:33:79:1a:f9: aa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3C:6F:BA:BB:22:EF:30:7B:0B:59:AE:AE:D6:D7:A5:02:AD:2C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12745f0e-e662-342d-905f-96f848e71092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7e:b9:b3:9d:d2:b6:64:0a:d4:a3:54:36:e0:ec:26:da:1f: 1c:e4:99:89:31:36:6f:a3:90:88:7c:1a:d4:f4:dd:c5:a1:47: 5c:67:53:ab:b5:cb:d7:eb:24:bd:10:29:e1:6e:41:55:ac:53: e6:de:00:d7:86:d2:f8:3c:c4:77:c2:d6:53:52:17:94:d7:35: 3a:5d:de:ad:6c:de:57:ea:45:87:08:b5:58:00:f6:c5:0c:24: 4d:01:a7:2c:8d:08:96:18:1f:2e:20:7d:cf:42:29:42:5e:61: d2:fe:d5:75:dc:40:b5:92:9f:d2:bd:b5:6e:87:64:af:27:13: f5:3b:21:aa:ba:b8:c3:aa:d6:29:68:9f:c9:00:ad:1c:16:8d: 37:4f:f8:5c:38:84:f6:da:64:82:6f:26:38:95:10:39:41:8b: be:51:ba:dc:d7:95:dc:46:db:b3:f5:9a:f1:a8:86:22:d3:08: 30:23:49:8f:69:cd:8d:39:7e:6f:c5:69:73:9c:e1:aa:f4:0c: 0b:3f:06:fc:b5:05:91:94:c1:34:b8:0f:74:b3:ff:96:f7:67: 08:db:01:01:98:1e:e6:df:11:91:14:92:af:b0:2a:20:57:06: 2c:d7:46:ac:a1:40:98:44:bf:87:34:4c:0e:e3:52:ff:fe:99: c4:99:6a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgop9PIXi1RpTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk NmExYTZlYmYtODZjOS00ZGU3LWEwNDEtOTFhZDNmMDBiMmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxly91VlAsyW700cqwtZevU9iLhGR8iGcVu/W Fb2D/YeLLmN6Yq3Klrp+h9bmIKth7kXW6uf+LUNVO3tn9y6OAwlDpLUiaGh7PKd8 N/cupZGlEkTCpdzZk+VK7x4S/XE5Pm/wGX2ZjFNE316m+sGgovSewD7Vt3xd6luL aA6qCXMqTrGAOYqCPnvcw+2oDmd5+J20w9r/WME7qoxhJdC8pkLOK+kkozZbwwCW HbxQ2ERNG0vZHNdRqINyXfpU7qs5Z5rPVv/LJK015rxpaBzT8dplLZ+VGpDOY0cD 42YS78TJY2dUGgJ+cmH3qK/0g4Ex7v2FNmyWxdLyaDN5GvmqPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB48b7q7Iu8wewtZrq7W16UCrSwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTI3NDVmMGUtZTY2Mi0z NDJkLTkwNWYtOTZmODQ4ZTcxMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1jgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5+ubOd0rZkCtSjVDbg7CbaHxzkmYkxNm+jkIh8GtT03cWhR1xnU6u1 y9frJL0QKeFuQVWsU+beANeG0vg8xHfC1lNSF5TXNTpd3q1s3lfqRYcItVgA9sUM JE0BpyyNCJYYHy4gfc9CKUJeYdL+1XXcQLWSn9K9tW6HZK8nE/U7Iaq6uMOq1ilo n8kArRwWjTdP+Fw4hPbaZIJvJjiVEDlBi75RutzXldxG27P1mvGohiLTCDAjSY9p zY05fm/FaXOc4ar0DAs/Bvy1BZGUwTS4D3Sz/5b3ZwjbAQGYHubfEZEUkq+wKiBX BizXRqyhQJhEv4c0TA7jUv/+mcSZags= -----END CERTIFICATE-----Generated at Sat May 10 10:31:27 2025 by rpki-client