$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddaa8e1-0cbe-38f5-94f7-df121cea4779.roa File: 1ddaa8e1-0cbe-38f5-94f7-df121cea4779.roa (raw, json) Hash identifier: yTq1YnwPgc/Vp5Z3aFpNIlASH2cyU791UlGV/+mCp/Y= Subject key identifier: BF:5B:39:52:05:DA:C6:BE:BF:49:ED:38:60:51:8A:83:8C:19:7C:BB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA7EFF69B0EC8F04E8700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddaa8e1-0cbe-38f5-94f7-df121cea4779.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 75.88.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:ef:f6:9b:0e:c8:f0:4e:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=96fbcff1-87ed-4278-9455-babe94f117a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:91:78:e9:50:e2:a0:6d:97:9e:cc:ab:80:fa: 88:23:dd:5d:c5:0e:4a:9f:9f:02:69:b6:f2:99:b6: d7:8c:de:66:6e:ab:0a:cb:0e:1e:96:cd:3b:df:0e: 6d:23:bb:90:86:da:f6:f9:88:d0:4d:9a:df:a4:ee: 42:99:59:25:bd:9c:a0:d3:b9:df:0c:4b:6b:f4:a1: db:88:24:eb:1a:9a:36:41:4a:ec:48:f0:e6:95:a5: d0:21:3a:a2:83:6a:cb:0b:ff:a7:32:b1:88:a0:aa: 0f:f3:7f:1a:ca:2a:2c:89:e4:51:7f:4a:dd:72:ba: 72:bd:6a:fa:57:99:c2:1a:30:0c:5e:d1:66:47:55: de:cd:1d:3a:ea:b3:94:99:b0:e9:bb:76:a6:53:3e: be:4c:a4:1b:0a:81:e4:c3:e8:9b:c0:b3:b9:95:00: 96:ba:27:ce:94:bc:2e:fc:e9:e3:b8:cb:c7:3f:e0: aa:be:34:61:81:6c:9d:c8:cc:d4:b4:24:af:11:48: 8c:72:62:da:e3:b8:f0:b6:e2:3a:3e:5b:45:77:de: 47:13:35:cd:7d:6f:88:98:14:f9:d9:3d:d2:71:c1: 01:03:a2:6b:36:e0:8e:71:7d:be:f2:ef:5a:b8:9b: 83:af:f3:38:ae:f9:7e:a1:1e:87:32:13:ad:a6:41: a5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5B:39:52:05:DA:C6:BE:BF:49:ED:38:60:51:8A:83:8C:19:7C:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddaa8e1-0cbe-38f5-94f7-df121cea4779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ff:6e:5e:31:c6:de:66:44:a4:cc:32:fa:23:04:a5:7c:45: fd:84:85:29:02:3b:fa:f7:72:07:00:40:8d:26:77:77:82:1a: e2:39:97:75:b0:41:ba:11:56:a1:6c:e9:11:4a:27:77:b1:4d: 58:ee:8a:b5:55:66:69:34:d8:7c:d5:d5:a1:31:b4:0b:f5:b4: 79:c0:25:3d:7d:2a:97:24:23:1b:b3:34:a5:38:b2:a5:7d:d8: a6:bc:18:45:b1:c0:2f:3a:ad:67:05:46:b9:a8:40:2b:68:de: 61:1c:9f:53:3c:f9:0c:eb:5e:5c:e3:f1:d0:7d:79:d0:e9:c9: ec:9e:7a:ff:3a:4a:9c:66:e1:cd:9a:92:3d:4c:9c:e9:73:67: 90:52:1e:db:a2:76:e0:41:e7:e9:ec:17:8d:72:f8:d7:31:50: 95:e0:27:d2:18:9e:4d:b3:8e:b3:c7:2d:1a:85:c4:bf:bd:5e: a5:c1:b2:23:4a:07:e7:1f:c0:59:b4:05:54:f6:fa:0e:c1:8d: 66:61:85:7b:5b:1f:69:7d:fa:35:ee:8d:54:66:f2:b2:9d:c7: 6c:12:06:cc:f0:e8:49:19:b9:8c:15:f5:02:85:12:ce:e4:30: 5a:48:66:ed:60:e5:d6:b3:6f:b0:03:87:a5:30:25:51:9e:ca: 09:e5:40:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6fv9psOyPBOhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OTZmYmNmZjEtODdlZC00Mjc4LTk0NTUtYmFiZTk0ZjExN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5F46VDioG2XnsyrgPqII91dxQ5Kn58Cabby mbbXjN5mbqsKyw4els073w5tI7uQhtr2+YjQTZrfpO5CmVklvZyg07nfDEtr9KHb iCTrGpo2QUrsSPDmlaXQITqig2rLC/+nMrGIoKoP838ayiosieRRf0rdcrpyvWr6 V5nCGjAMXtFmR1XezR066rOUmbDpu3amUz6+TKQbCoHkw+ibwLO5lQCWuifOlLwu /OnjuMvHP+CqvjRhgWydyMzUtCSvEUiMcmLa47jwtuI6PltFd95HEzXNfW+ImBT5 2T3SccEBA6JrNuCOcX2+8u9auJuDr/M4rvl+oR6HMhOtpkGlCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9bOVIF2sa+v0ntOGBRioOMGXy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRkYWE4ZTEtMGNiZS0z OGY1LTk0ZjctZGYxMjFjZWE0Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1jYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH/bl4xxt5mRKTMMvojBKV8Rf2EhSkCO/r3cgcAQI0md3eCGuI5l3Ww QboRVqFs6RFKJ3exTVjuirVVZmk02HzV1aExtAv1tHnAJT19KpckIxuzNKU4sqV9 2Ka8GEWxwC86rWcFRrmoQCto3mEcn1M8+QzrXlzj8dB9edDpyeyeev86Spxm4c2a kj1MnOlzZ5BSHtuiduBB5+nsF41y+NcxUJXgJ9IYnk2zjrPHLRqFxL+9XqXBsiNK B+cfwFm0BVT2+g7BjWZhhXtbH2l9+jXujVRm8rKdx2wSBszw6EkZuYwV9QKFEs7k MFpIZu1g5dazb7ADh6UwJVGeygnlQIk= -----END CERTIFICATE-----Generated at Wed May 7 21:40:01 2025 by rpki-client