$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2eccbbe4-b2cc-332b-b73d-97379faed04a.roa File: 2eccbbe4-b2cc-332b-b73d-97379faed04a.roa (raw, json) Hash identifier: bKjWqXngKhVpBwOoFQ4y+OUxzT9eMVI6cs1yPVXfXHk= Subject key identifier: F2:1A:58:08:33:D9:6E:04:20:EE:03:AF:CE:1F:59:47:8C:8C:85:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3F8EE8DAF0E931F6742C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2eccbbe4-b2cc-332b-b73d-97379faed04a.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 75.89.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8e:e8:da:f0:e9:31:f6:74:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=2c33c3e0-8364-4930-8219-9c8ec521dd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:de:6a:f3:cf:02:03:c2:30:a6:82:23:a1: 46:a0:af:67:ee:a0:67:7b:20:8c:b6:2e:f0:0c:b6: a2:6b:74:30:d6:28:47:50:b7:38:79:70:7b:89:be: f3:fe:d8:20:57:16:dd:e4:16:5f:a0:39:24:f9:4a: de:18:b2:92:cd:26:2c:1d:e4:f5:0f:1c:44:8b:9f: 10:4a:9b:e5:3b:81:de:ea:19:c3:46:c5:6b:79:83: 28:49:10:c3:d4:5c:c8:56:20:23:5d:5a:c3:b1:13: 14:75:f2:a3:c5:48:48:42:e6:70:93:33:36:4a:fa: 11:d5:db:00:bb:18:83:2b:27:67:d4:68:14:50:40: c3:c3:c9:bc:6f:d0:dd:f5:b3:12:0a:21:4e:7d:e5: 52:54:2e:c9:21:dd:d5:11:c7:4b:4c:b6:a5:c5:a8: 1b:a8:1c:ae:ac:b8:25:e9:c2:58:4e:5f:2c:51:fa: ca:1a:a7:70:3a:f9:d7:16:38:6c:ab:17:5f:a9:85: 82:0e:67:5f:7d:9e:9b:6b:d2:73:5e:f3:c7:b0:2d: 04:cc:a8:09:34:fa:97:2f:6d:f1:63:91:73:05:c1: f6:41:46:80:f6:7c:65:73:16:40:72:79:ae:cf:d7: e9:30:ba:7d:8a:87:77:4d:e1:d9:ba:6e:22:8d:11: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1A:58:08:33:D9:6E:04:20:EE:03:AF:CE:1F:59:47:8C:8C:85:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2eccbbe4-b2cc-332b-b73d-97379faed04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:db:77:db:ba:63:6a:34:4e:2c:4e:7c:8c:74:3f:a9:2e:42: b7:be:30:66:c4:45:83:81:b3:2c:76:f5:de:90:fd:56:cc:a6: 8b:42:4f:92:4a:38:53:08:03:29:20:61:74:a4:51:0a:7f:21: 01:72:bc:28:43:ed:86:c6:07:64:20:25:7f:b4:2d:80:79:1b: c5:36:e5:e5:99:84:7d:50:e4:b4:c7:3d:62:43:9e:de:0e:41: cc:fb:f0:ed:5c:31:e5:8d:2b:02:6b:da:16:13:d0:40:7a:79: b6:77:9f:e9:cc:c2:47:ca:24:82:55:8c:52:84:79:26:ee:63: b2:0b:47:4c:ab:95:8a:45:ab:47:d0:29:5d:52:64:8b:3c:6e: a0:86:97:ae:e1:c3:f1:95:54:ed:16:ba:f6:04:2f:aa:e1:8e: ba:cb:00:7b:23:11:95:45:fd:52:36:b0:fd:9d:1e:2f:bc:93: fa:34:99:92:cc:ac:3e:41:3d:46:df:a8:5c:52:a1:2b:69:db: bf:49:a8:7a:61:e7:24:ef:04:9c:cb:18:1b:06:f4:a9:5e:9c: f4:a4:ea:66:eb:11:a3:c6:68:cb:6c:98:c8:ff:b8:a7:38:1e: 3e:f2:56:a4:8b:06:94:7c:45:10:d4:55:3f:d0:b3:98:f2:6b: cf:37:a0:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P47o2vDpMfZ0LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MmMzM2MzZTAtODM2NC00OTMwLTgyMTktOWM4ZWM1MjFkZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmneavPPAgPCMKaCI6FGoK9n7qBneyCMti7w DLaia3Qw1ihHULc4eXB7ib7z/tggVxbd5BZfoDkk+UreGLKSzSYsHeT1DxxEi58Q SpvlO4He6hnDRsVreYMoSRDD1FzIViAjXVrDsRMUdfKjxUhIQuZwkzM2SvoR1dsA uxiDKydn1GgUUEDDw8m8b9Dd9bMSCiFOfeVSVC7JId3VEcdLTLalxagbqByurLgl 6cJYTl8sUfrKGqdwOvnXFjhsqxdfqYWCDmdffZ6ba9JzXvPHsC0EzKgJNPqXL23x Y5FzBcH2QUaA9nxlcxZAcnmuz9fpMLp9iod3TeHZum4ijREe+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIaWAgz2W4EIO4Dr84fWUeMjIVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmVjY2JiZTQtYjJjYy0z MzJiLWI3M2QtOTczNzlmYWVkMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1nAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjbd9u6Y2o0TixOfIx0P6kuQre+MGbERYOBsyx29d6Q/VbMpotCT5JK OFMIAykgYXSkUQp/IQFyvChD7YbGB2QgJX+0LYB5G8U25eWZhH1Q5LTHPWJDnt4O Qcz78O1cMeWNKwJr2hYT0EB6ebZ3n+nMwkfKJIJVjFKEeSbuY7ILR0yrlYpFq0fQ KV1SZIs8bqCGl67hw/GVVO0WuvYEL6rhjrrLAHsjEZVF/VI2sP2dHi+8k/o0mZLM rD5BPUbfqFxSoStp279JqHph5yTvBJzLGBsG9KlenPSk6mbrEaPGaMtsmMj/uKc4 Hj7yVqSLBpR8RRDUVT/Qs5jya883oLY= -----END CERTIFICATE-----Generated at Sat May 10 19:10:28 2025 by rpki-client