$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32af0595-5901-34a8-9e69-6c75411c5f19.roa File: 32af0595-5901-34a8-9e69-6c75411c5f19.roa (raw, json) Hash identifier: a9xdnNU/PZuVQn8BKcNwA9OsdOs4ANR/6iHyCRi3k2I= Subject key identifier: BB:AB:50:8D:E6:26:9D:65:7E:41:65:7B:E1:37:AA:E9:9F:B1:E5:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B6357BE443E23B267340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32af0595-5901-34a8-9e69-6c75411c5f19.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 75.89.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b6:35:7b:e4:43:e2:3b:26:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=f408c084-0940-4b2c-90d3-c50d5702166d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:35:eb:29:d5:a6:fc:e0:b7:e3:e9:3e:27: a0:c2:c1:1b:f8:ef:7c:1a:65:ac:74:c3:fe:a8:01: ae:dc:49:87:83:c7:14:d2:57:a3:9d:35:82:8b:79: b4:25:7b:cc:bc:a3:7e:d3:9c:97:da:86:f0:aa:a1: c1:e6:54:2d:d4:3c:9b:50:2b:67:94:9e:86:d8:81: 3d:25:bd:e9:8b:4a:94:e6:54:aa:1f:c7:51:7a:bb: c7:7d:5e:09:5b:a1:e9:8b:02:a2:36:07:d4:62:76: b8:5a:39:fe:1e:20:4b:26:fa:e1:c1:30:a8:7d:02: cf:64:6b:36:69:b7:f5:6a:ca:00:07:e7:be:c0:cd: ee:e9:8c:59:22:03:71:0e:1e:e5:5b:9c:99:2e:e4: b5:c2:75:cb:fc:c4:8e:1d:ce:2b:99:f8:aa:2b:39: 59:66:1a:c7:eb:ec:c8:28:52:0c:ce:3c:4b:21:dd: 46:7a:2b:4b:0e:26:93:e8:a5:e5:95:ef:e7:41:10: 3f:62:39:24:c3:2d:3a:34:ab:5a:64:7e:1b:bf:10: a1:25:58:e4:7a:c4:d7:cb:48:1a:c2:61:73:b0:4c: b8:32:b7:e3:31:10:5f:98:2d:20:8b:e1:da:bd:04: 14:88:61:2f:8e:05:99:bc:da:37:84:89:cc:67:24: 2c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AB:50:8D:E6:26:9D:65:7E:41:65:7B:E1:37:AA:E9:9F:B1:E5:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32af0595-5901-34a8-9e69-6c75411c5f19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:12:b9:d7:2f:0e:f4:60:9d:17:c9:db:02:41:69:62:40:48: 60:2f:33:58:c0:52:46:ba:07:10:04:fe:18:fa:6b:39:4a:3e: ca:54:99:46:1e:19:19:71:e5:8c:3d:b6:98:af:2d:e5:82:51: 4f:d3:25:03:1c:05:e6:b6:db:db:09:67:45:e0:7d:af:6f:a4: 11:64:31:33:c8:fc:7b:78:6e:08:69:27:87:fc:ab:85:a1:39: 78:a9:e2:50:dc:18:c9:51:c9:b4:17:be:7a:b7:1a:ea:c5:bf: b4:3b:8c:82:d5:c1:3d:fd:1c:6b:a1:b6:75:37:2d:12:de:5d: 43:db:9e:d3:ae:25:e2:0b:14:85:bc:21:a2:79:15:39:d0:fb: 2a:57:c6:e9:31:db:ce:32:6e:e4:80:d8:7b:fb:55:8f:20:61: 2a:f9:62:4c:4c:77:b8:a6:ff:e3:76:78:83:e5:d8:03:b7:01: 07:0f:1d:8a:cb:f9:af:da:eb:d9:ce:54:a8:a0:b7:90:ee:8d: 13:40:59:c5:b4:aa:2c:e3:a0:40:f1:ea:7f:48:62:5a:71:70: ad:dc:9b:b7:54:b3:01:69:3f:11:07:7c:18:11:49:a9:32:20: c5:3e:2f:73:a0:c5:f2:99:fb:33:a0:30:6c:c8:54:f3:54:e0: 5e:f6:0c:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbY1e+RD4jsmc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZjQwOGMwODQtMDk0MC00YjJjLTkwZDMtYzUwZDU3MDIxNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9016ynVpvzgt+PpPiegwsEb+O98GmWsdMP+ qAGu3EmHg8cU0lejnTWCi3m0JXvMvKN+05yX2obwqqHB5lQt1DybUCtnlJ6G2IE9 Jb3pi0qU5lSqH8dRervHfV4JW6HpiwKiNgfUYna4Wjn+HiBLJvrhwTCofQLPZGs2 abf1asoAB+e+wM3u6YxZIgNxDh7lW5yZLuS1wnXL/MSOHc4rmfiqKzlZZhrH6+zI KFIMzjxLId1GeitLDiaT6KXlle/nQRA/Yjkkwy06NKtaZH4bvxChJVjkesTXy0ga wmFzsEy4MrfjMRBfmC0gi+HavQQUiGEvjgWZvNo3hInMZyQsvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLurUI3mJp1lfkFle+E3qumfseWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzJhZjA1OTUtNTkwMS0z NGE4LTllNjktNmM3NTQxMWM1ZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1lMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcSudcvDvRgnRfJ2wJBaWJASGAvM1jAUka6BxAE/hj6azlKPspUmUYe GRlx5Yw9tpivLeWCUU/TJQMcBea229sJZ0Xgfa9vpBFkMTPI/Ht4bghpJ4f8q4Wh OXip4lDcGMlRybQXvnq3GurFv7Q7jILVwT39HGuhtnU3LRLeXUPbntOuJeILFIW8 IaJ5FTnQ+ypXxukx284ybuSA2Hv7VY8gYSr5YkxMd7im/+N2eIPl2AO3AQcPHYrL +a/a69nOVKigt5DujRNAWcW0qizjoEDx6n9IYlpxcK3cm7dUswFpPxEHfBgRSaky IMU+L3OgxfKZ+zOgMGzIVPNU4F72DEU= -----END CERTIFICATE-----Generated at Sun May 11 05:10:57 2025 by rpki-client