$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e2838b-017a-3e21-8f71-e3de49aaf056.roa File: 17e2838b-017a-3e21-8f71-e3de49aaf056.roa (raw, json) Hash identifier: 6amCSq3bUec6XIupKWzpP7tw185f2jIbzKPjF98tbb8= Subject key identifier: DB:4D:A0:4F:F7:AC:81:9C:0A:50:8E:01:9C:73:F7:E9:04:13:B4:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A142AB25C9DF4E42D9C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e2838b-017a-3e21-8f71-e3de49aaf056.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.89.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:14:2a:b2:5c:9d:f4:e4:2d:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=43ac522a-2b77-448f-a8ba-a0cb53de6f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c8:8b:cb:7d:76:fb:7d:85:7c:89:b9:e1:36: c5:ad:d1:d8:4b:18:0f:6d:25:1d:b1:a4:5e:22:54: c2:8f:54:42:cc:ff:cc:08:ff:e1:5f:78:70:32:45: 85:b5:bb:40:15:a6:b1:ea:ae:eb:f8:df:92:53:0a: e4:44:ca:12:45:5a:1b:5b:75:bd:8a:8d:5f:0e:ab: 15:08:00:8d:2f:25:70:e0:e9:6c:8c:e9:b1:21:a8: b2:5c:ff:69:5e:42:49:a7:c7:80:c8:56:85:96:d9: bb:49:5c:83:70:43:1b:d4:b5:2c:42:ea:ac:5c:6c: 68:30:10:da:5d:82:e5:c2:c0:16:4d:e4:a2:0c:35: f0:9c:c1:52:65:bf:38:cd:e4:b2:2f:10:82:a2:dc: 84:e6:94:90:cb:23:0d:2c:6c:4a:e8:fa:2f:24:51: ac:e2:f2:e3:66:00:41:45:51:7f:2f:9c:11:3e:40: b5:27:83:38:cd:fa:74:6e:00:0e:60:6c:cf:7f:f0: d0:5f:a6:da:88:85:b6:68:f8:92:73:3a:48:62:4f: 29:aa:73:85:9b:0b:2c:90:b9:c9:3a:8e:aa:63:b7: 41:00:00:9d:fd:ee:2b:af:1b:c1:66:02:79:9e:d5: 89:97:24:e5:6c:bd:26:2d:dc:7e:cf:ac:2b:77:ed: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4D:A0:4F:F7:AC:81:9C:0A:50:8E:01:9C:73:F7:E9:04:13:B4:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e2838b-017a-3e21-8f71-e3de49aaf056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8b:e5:7d:8f:21:61:bb:39:52:3a:46:98:2d:98:e6:d9:d9: d4:23:fb:ec:98:ca:47:3b:b3:57:3c:40:2d:80:2f:1c:23:85: aa:e1:b9:7e:2b:ae:57:aa:07:c1:54:03:67:c2:5a:74:12:54: 12:ef:1b:97:16:72:33:6d:cd:d7:fd:8e:4b:d1:a0:37:94:34: f2:f4:99:a6:6f:8d:91:e6:ad:fb:23:e3:fc:cd:c2:39:7b:ac: d0:64:e9:d8:40:49:9f:72:24:a9:c6:f4:7e:95:5d:05:34:0c: 08:1b:02:cb:d6:ca:2c:de:5d:8b:d6:2e:a8:69:b0:cd:22:e1: aa:1a:35:0b:fb:d9:b7:a1:5b:94:19:20:bf:71:1c:08:0c:18: 56:32:f5:4c:65:57:3a:56:ec:07:e2:d5:fb:10:9f:9c:74:61: 41:d8:43:8a:0c:4e:d0:3d:15:ad:1c:d1:30:08:18:69:ed:b9: 6a:41:16:c6:27:36:f6:e0:77:33:15:5d:d6:5c:c1:8c:f8:24: b0:72:f0:12:21:b3:dc:fb:34:7f:c3:1d:40:44:39:0c:33:b4: e3:a8:48:a3:af:85:1f:4d:1e:dd:34:52:bd:8b:57:5b:45:10: 02:57:8f:fc:f0:97:5c:1f:f4:36:8d:cb:cc:93:03:f6:8b:ed: 96:f5:13:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShQqslyd9OQtnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDNhYzUyMmEtMmI3Ny00NDhmLWE4YmEtYTBjYjUzZGU2ZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8iLy312+32FfIm54TbFrdHYSxgPbSUdsaRe IlTCj1RCzP/MCP/hX3hwMkWFtbtAFaax6q7r+N+SUwrkRMoSRVobW3W9io1fDqsV CACNLyVw4OlsjOmxIaiyXP9pXkJJp8eAyFaFltm7SVyDcEMb1LUsQuqsXGxoMBDa XYLlwsAWTeSiDDXwnMFSZb84zeSyLxCCotyE5pSQyyMNLGxK6PovJFGs4vLjZgBB RVF/L5wRPkC1J4M4zfp0bgAOYGzPf/DQX6baiIW2aPiSczpIYk8pqnOFmwsskLnJ Oo6qY7dBAACd/e4rrxvBZgJ5ntWJlyTlbL0mLdx+z6wrd+3EPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtNoE/3rIGcClCOAZxz9+kEE7RcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTdlMjgzOGItMDE3YS0z ZTIxLThmNzEtZTNkZTQ5YWFmMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1mUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+L5X2PIWG7OVI6RpgtmObZ2dQj++yYykc7s1c8QC2ALxwjharhuX4r rleqB8FUA2fCWnQSVBLvG5cWcjNtzdf9jkvRoDeUNPL0maZvjZHmrfsj4/zNwjl7 rNBk6dhASZ9yJKnG9H6VXQU0DAgbAsvWyizeXYvWLqhpsM0i4aoaNQv72behW5QZ IL9xHAgMGFYy9UxlVzpW7Afi1fsQn5x0YUHYQ4oMTtA9Fa0c0TAIGGntuWpBFsYn NvbgdzMVXdZcwYz4JLBy8BIhs9z7NH/DHUBEOQwztOOoSKOvhR9NHt00Ur2LV1tF EAJXj/zwl1wf9DaNy8yTA/aL7Zb1Eyw= -----END CERTIFICATE-----Generated at Sat May 10 20:45:13 2025 by rpki-client