$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1283ac16-4d23-3714-b85f-8499fcbbf803.roa File: 1283ac16-4d23-3714-b85f-8499fcbbf803.roa (raw, json) Hash identifier: vx7dxxGqiutRpRHH+9QnyxN20DVXzFciYmzdVyidqgs= Subject key identifier: 5F:28:53:8E:C3:6F:CC:1E:0D:3D:5E:93:1F:8D:F6:03:C5:FD:93:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB491C1B4FA078A1592BC30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1283ac16-4d23-3714-b85f-8499fcbbf803.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 75.88.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:91:c1:b4:fa:07:8a:15:92:bc:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=dad7e464-3fb2-4c52-a9ac-893138c86305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:14:54:d6:58:1a:4c:ce:26:09:6a:8a:4b: a3:e7:3b:e5:49:49:be:3c:02:ee:10:6f:9f:36:71: bf:b8:7f:f7:6c:73:a0:f0:bb:87:b8:5e:51:b2:8b: 87:45:d2:41:d7:e5:bd:19:72:b8:5d:22:f2:84:6e: 79:ca:72:04:15:d5:e1:eb:03:0c:97:21:4d:85:32: a4:d5:e2:ed:5c:61:e7:3a:27:2e:60:cb:d8:be:0c: 78:68:55:59:e3:20:e8:89:d6:af:83:38:67:83:cb: df:d6:8b:c7:cc:8c:e2:ec:f3:71:c2:c2:5a:96:b4: a9:77:dd:42:f2:c2:dd:7c:1f:c0:e1:d9:9a:16:fa: e6:4f:2b:98:cf:ab:37:07:34:d5:cb:68:71:06:2e: b3:f6:48:54:3b:83:65:56:9b:57:52:16:fc:b7:97: 53:7e:34:21:a7:3f:34:42:ff:21:4b:2d:06:e0:70: 80:e6:7a:6c:90:87:93:6a:5d:d7:7a:39:83:06:1e: ec:91:95:b8:8a:1e:e2:13:a0:47:58:bd:e1:01:13: b6:5a:98:cc:67:13:d2:42:26:2c:9c:cb:a3:14:c6: b3:d0:45:f9:6d:69:26:73:e8:0c:b1:c4:1f:62:4d: f4:be:f0:1e:4e:f0:03:3e:96:80:44:80:02:10:0d: 34:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:28:53:8E:C3:6F:CC:1E:0D:3D:5E:93:1F:8D:F6:03:C5:FD:93:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1283ac16-4d23-3714-b85f-8499fcbbf803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ae:05:54:73:31:d2:b0:62:cd:ab:4b:19:09:02:c1:81:24: 4c:74:47:ab:91:a0:c0:db:ed:99:30:73:ce:48:13:77:a8:18: 30:20:85:77:b4:8e:2e:fd:ba:9b:b7:da:3d:c5:46:14:02:f4: ee:3b:87:35:2f:19:c5:b1:65:25:62:8c:81:05:f4:11:b8:64: 62:20:c9:aa:1a:11:a1:b8:75:e7:3a:8b:46:71:ec:d2:a1:6b: cc:4e:26:1c:7f:00:7f:14:4d:91:5d:e1:62:af:ce:d7:ff:3d: 26:19:95:6e:e8:fc:9e:32:ad:db:7a:1c:c0:cd:02:c2:d5:db: 81:0f:b8:08:7d:92:0b:25:b1:f6:54:3a:a3:1b:87:96:ef:e4: 5a:5d:22:3e:2c:47:69:4e:49:0c:8c:1a:d2:c0:8c:f0:0d:77: ea:c8:34:3f:4f:0b:eb:14:65:17:34:8e:13:3c:a5:eb:7b:a5: 5c:f4:1e:db:5c:b4:c6:a2:e3:5b:9a:50:81:cc:62:01:e3:c7: c8:24:1a:01:c5:89:29:df:1e:fb:b1:a8:f2:f8:c1:fa:4d:f9: 6e:0b:9d:c1:b5:9d:fb:d6:d4:11:7f:b3:5c:39:77:25:77:18: 30:88:eb:fe:23:89:3c:fb:c1:bb:0b:82:21:53:fc:56:3e:cb: 43:3f:a8:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJHBtPoHihWSvDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZGFkN2U0NjQtM2ZiMi00YzUyLWE5YWMtODkzMTM4Yzg2MzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuckUVNZYGkzOJglqikuj5zvlSUm+PALuEG+f NnG/uH/3bHOg8LuHuF5RsouHRdJB1+W9GXK4XSLyhG55ynIEFdXh6wMMlyFNhTKk 1eLtXGHnOicuYMvYvgx4aFVZ4yDoidavgzhng8vf1ovHzIzi7PNxwsJalrSpd91C 8sLdfB/A4dmaFvrmTyuYz6s3BzTVy2hxBi6z9khUO4NlVptXUhb8t5dTfjQhpz80 Qv8hSy0G4HCA5npskIeTal3XejmDBh7skZW4ih7iE6BHWL3hARO2WpjMZxPSQiYs nMujFMaz0EX5bWkmc+gMscQfYk30vvAeTvADPpaARIACEA00TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8oU47Db8weDT1ekx+N9gPF/ZOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTI4M2FjMTYtNGQyMy0z NzE0LWI4NWYtODQ5OWZjYmJmODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1hoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+uBVRzMdKwYs2rSxkJAsGBJEx0R6uRoMDb7Zkwc85IE3eoGDAghXe0 ji79upu32j3FRhQC9O47hzUvGcWxZSVijIEF9BG4ZGIgyaoaEaG4dec6i0Zx7NKh a8xOJhx/AH8UTZFd4WKvztf/PSYZlW7o/J4yrdt6HMDNAsLV24EPuAh9kgslsfZU OqMbh5bv5FpdIj4sR2lOSQyMGtLAjPANd+rIND9PC+sUZRc0jhM8pet7pVz0Httc tMai41uaUIHMYgHjx8gkGgHFiSnfHvuxqPL4wfpN+W4LncG1nfvW1BF/s1w5dyV3 GDCI6/4jiTz7wbsLgiFT/FY+y0M/qJQ= -----END CERTIFICATE-----Generated at Sun May 11 12:44:35 2025 by rpki-client