$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/346b09d1-64b5-3be2-a94a-1eb6327d8015.roa File: 346b09d1-64b5-3be2-a94a-1eb6327d8015.roa (raw, json) Hash identifier: ZehxUSfcQx5CVofOqSvGoXqMEgSc2VnzEVOSfpMP3DE= Subject key identifier: 02:04:3E:96:6D:E4:E8:17:C2:F0:6D:90:51:EA:0B:00:84:C2:47:B0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1900C973B8300BE39080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/346b09d1-64b5-3be2-a94a-1eb6327d8015.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 75.88.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:19:00:c9:73:b8:30:0b:e3:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=1f3085c1-e358-4ce6-995b-00843c56f631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:b1:39:d5:bf:35:b9:97:8f:4c:d2:e6:a1: 85:af:8e:e7:72:3a:71:fe:ce:6a:16:b8:0b:26:8c: 09:64:bc:5d:b1:19:7b:bd:86:4d:91:8e:ee:77:82: 5f:85:18:86:ba:a3:4b:90:7c:36:2b:53:28:5d:4a: 29:de:c7:54:d5:51:5e:7b:50:37:f0:2c:fe:3f:c8: 97:d9:77:aa:19:da:cb:51:a3:7e:d7:b0:ed:c8:a2: 2e:89:b1:42:6d:ba:23:12:af:a9:43:46:02:23:6f: 62:ed:05:61:f0:e2:5d:97:f3:e3:1a:46:2f:ef:ce: 90:b5:91:83:1c:65:99:12:05:66:79:26:a9:ba:8c: 3d:14:07:bf:b0:cc:a5:98:ef:43:ee:28:01:29:8e: 5b:e4:4b:3a:13:ba:d2:bd:ad:a6:c9:66:35:d4:e9: 0e:e7:01:61:af:c1:56:86:8a:3f:2b:37:80:21:62: af:cb:34:53:59:b4:a9:9d:9c:3e:2f:2c:00:33:ac: 29:62:d5:a6:88:39:77:fb:bc:16:02:6c:38:e8:d9: 06:9a:ab:76:57:9c:79:57:64:57:ed:e7:7e:a3:c0: ef:9f:0f:80:aa:af:52:3e:1a:ac:47:c9:b3:6f:7c: 53:e2:0e:a4:1f:b6:6c:00:c1:8b:43:9a:a8:6e:80: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:04:3E:96:6D:E4:E8:17:C2:F0:6D:90:51:EA:0B:00:84:C2:47:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/346b09d1-64b5-3be2-a94a-1eb6327d8015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:25:b0:8e:78:2a:5d:e6:81:5b:23:4e:ff:e3:e3:72:f6:e8: 9c:89:78:75:83:9f:e9:0d:d3:6a:13:3d:ea:b5:5a:12:17:0d: 66:0a:6b:17:f0:33:21:23:28:82:ce:fd:ed:11:a7:2f:c7:8b: 89:58:52:c1:60:df:55:f9:2a:ec:79:4d:73:58:5c:c7:c9:11: 86:67:f3:92:ef:7e:98:9f:3b:91:e6:ee:b2:aa:c7:79:00:58: ed:2d:90:48:3a:0b:f1:98:a1:f1:27:0f:01:d5:e2:28:5e:71: ef:dd:d1:95:70:84:b1:13:18:e8:4b:54:10:5b:bb:e6:fe:b8: 34:85:ae:b4:41:0c:f6:fe:55:22:d5:9b:ab:97:8d:b3:a2:ef: bf:39:50:81:6a:03:8e:be:9f:82:ef:e3:60:58:65:70:3e:e2: 04:30:49:56:0e:ab:18:3c:cb:a7:ff:ff:5a:84:35:96:be:fd: 1e:4f:b3:62:5f:29:39:41:b7:16:03:b5:a7:bb:1e:51:09:c3: 9a:f2:c3:e6:f9:5b:50:50:b5:f8:29:11:cd:80:fd:c2:02:cb: f2:52:65:78:2a:6f:43:e8:03:e6:79:a5:db:e0:37:07:39:5a: 74:26:3a:9e:2b:25:82:d5:dc:ba:2f:9b:1c:f3:a9:0c:20:bc: 2c:9a:6c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhkAyXO4MAvjkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MWYzMDg1YzEtZTM1OC00Y2U2LTk5NWItMDA4NDNjNTZmNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxaxOdW/NbmXj0zS5qGFr47ncjpx/s5qFrgL JowJZLxdsRl7vYZNkY7ud4JfhRiGuqNLkHw2K1MoXUop3sdU1VFee1A38Cz+P8iX 2XeqGdrLUaN+17DtyKIuibFCbbojEq+pQ0YCI29i7QVh8OJdl/PjGkYv786QtZGD HGWZEgVmeSapuow9FAe/sMylmO9D7igBKY5b5Es6E7rSva2myWY11OkO5wFhr8FW hoo/KzeAIWKvyzRTWbSpnZw+LywAM6wpYtWmiDl3+7wWAmw46NkGmqt2V5x5V2RX 7ed+o8Dvnw+Aqq9SPhqsR8mzb3xT4g6kH7ZsAMGLQ5qoboCjJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIEPpZt5OgXwvBtkFHqCwCEwkewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzQ2YjA5ZDEtNjRiNS0z YmUyLWE5NGEtMWViNjMyN2Q4MDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1jQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFglsI54Kl3mgVsjTv/j43L26JyJeHWDn+kN02oTPeq1WhIXDWYKaxfw MyEjKILO/e0Rpy/Hi4lYUsFg31X5Kux5TXNYXMfJEYZn85LvfpifO5Hm7rKqx3kA WO0tkEg6C/GYofEnDwHV4ihece/d0ZVwhLETGOhLVBBbu+b+uDSFrrRBDPb+VSLV m6uXjbOi7785UIFqA46+n4Lv42BYZXA+4gQwSVYOqxg8y6f//1qENZa+/R5Ps2Jf KTlBtxYDtae7HlEJw5ryw+b5W1BQtfgpEc2A/cICy/JSZXgqb0PoA+Z5pdvgNwc5 WnQmOp4rJYLV3LovmxzzqQwgvCyabLE= -----END CERTIFICATE-----Generated at Sat May 10 06:38:09 2025 by rpki-client