$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ea427a5-371b-3199-b88d-74724e01f06c.roa File: 4ea427a5-371b-3199-b88d-74724e01f06c.roa (raw, json) Hash identifier: S8Xy4bxdxoDWcLQde+Z9DXLlrUtAvx+MV6X1vUXEFCs= Subject key identifier: 1A:7D:61:4D:BC:6C:6C:E4:9E:D7:11:E8:3D:DF:80:63:37:AE:9F:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA0BFD44C47ED574C09B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ea427a5-371b-3199-b88d-74724e01f06c.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.89.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0b:fd:44:c4:7e:d5:74:c0:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=b9654813-16eb-4bfa-9d46-45dfdce5e0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:be:8f:a7:42:fe:f8:e6:b1:dc:cb:be:4f:83: ea:e9:1c:e4:ea:e2:87:63:ba:f5:53:51:94:61:25: f3:68:02:d3:f4:a9:0e:ab:f9:78:18:75:15:b1:65: 70:a1:e1:53:38:08:89:37:b3:53:23:a2:d7:18:fe: 73:14:7b:3d:d9:4a:e3:48:30:c8:42:87:1c:91:87: d1:2d:4a:0d:80:04:f9:85:d4:21:5f:9a:6f:c6:a9: 56:64:0e:c2:51:5c:a0:19:2f:1c:5f:5b:e2:d9:d2: 6b:aa:b0:6f:94:79:22:95:d8:ac:63:27:a3:78:f6: f8:38:90:6f:a3:f8:9b:7f:35:c8:da:ea:c0:e2:0c: 4d:cd:9c:2d:1b:48:08:f0:2b:37:58:8e:17:0f:8b: af:ec:06:f8:73:05:99:c6:a9:12:b4:65:07:3d:71: d2:15:87:f0:8d:4d:38:42:c7:f8:40:f3:81:da:54: 38:14:d7:2c:e7:ad:ac:10:56:f4:8b:19:b1:ee:07: cd:a6:3c:91:8a:59:88:94:ab:54:ba:45:dc:79:1f: a7:54:c4:cc:a9:8c:b8:7c:ce:85:0b:4d:e4:34:cb: 4a:3f:d0:26:71:5f:f4:de:b6:1c:1f:b0:e5:b8:37: 90:41:b9:2e:a8:4e:ca:b2:25:8b:8c:b5:8a:81:36: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7D:61:4D:BC:6C:6C:E4:9E:D7:11:E8:3D:DF:80:63:37:AE:9F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ea427a5-371b-3199-b88d-74724e01f06c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:84:3a:f6:fb:c7:e0:54:bb:77:f8:42:e1:76:4d:ee:d0:f7: b7:4b:29:e4:49:da:38:45:f2:62:ed:8a:2f:8f:78:fb:13:17: 18:25:de:2b:43:0e:8d:33:89:53:b9:0b:fc:f7:27:ab:2f:bd: 94:0b:af:d6:4b:1a:59:26:dd:f8:84:9c:89:2e:7d:09:a2:cd: 32:7f:f5:f3:c1:36:f8:36:5a:69:ff:4a:76:1e:52:9e:4a:4a: b5:5d:ff:ca:90:1b:cb:8a:cb:eb:26:59:03:3d:d2:dc:e6:ee: ae:4f:f0:7d:b5:81:d4:ea:61:a1:cd:8f:57:79:54:e9:43:a0: 87:57:05:90:f3:9c:58:d6:f6:f3:e1:dd:20:90:e0:da:32:32: 10:1c:f6:c1:16:f6:8d:3d:eb:1c:98:ee:c9:c9:e8:ce:6f:ca: 45:43:bf:4f:90:59:c5:ed:9c:79:5c:d1:8e:31:b9:ab:09:e5: bf:2a:57:dc:10:ec:f1:ab:23:34:ce:45:0e:a2:c9:ac:4a:ab: 0b:ec:d7:5e:89:2d:bc:0a:51:d0:ac:e2:8d:a8:3f:04:ff:4b: 69:d7:dd:0b:72:ea:a5:fd:0a:b8:66:d1:6c:b2:d5:af:a5:33: 10:3c:c1:b6:d7:8c:1f:a0:c0:22:60:cf:cf:8b:7a:9a:24:12: 0a:d2:c9:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgv9RMR+1XTAmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk Yjk2NTQ4MTMtMTZlYi00YmZhLTlkNDYtNDVkZmRjZTVlMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr6Pp0L++Oax3Mu+T4Pq6Rzk6uKHY7r1U1GU YSXzaALT9KkOq/l4GHUVsWVwoeFTOAiJN7NTI6LXGP5zFHs92UrjSDDIQocckYfR LUoNgAT5hdQhX5pvxqlWZA7CUVygGS8cX1vi2dJrqrBvlHkildisYyejePb4OJBv o/ibfzXI2urA4gxNzZwtG0gI8Cs3WI4XD4uv7Ab4cwWZxqkStGUHPXHSFYfwjU04 Qsf4QPOB2lQ4FNcs562sEFb0ixmx7gfNpjyRilmIlKtUukXceR+nVMTMqYy4fM6F C03kNMtKP9AmcV/03rYcH7DluDeQQbkuqE7KsiWLjLWKgTZncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp9YU28bGzkntcR6D3fgGM3rp+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGVhNDI3YTUtMzcxYi0z MTk5LWI4OGQtNzQ3MjRlMDFmMDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1mgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaEOvb7x+BUu3f4QuF2Te7Q97dLKeRJ2jhF8mLtii+PePsTFxgl3itD Do0ziVO5C/z3J6svvZQLr9ZLGlkm3fiEnIkufQmizTJ/9fPBNvg2Wmn/SnYeUp5K SrVd/8qQG8uKy+smWQM90tzm7q5P8H21gdTqYaHNj1d5VOlDoIdXBZDznFjW9vPh 3SCQ4NoyMhAc9sEW9o096xyY7snJ6M5vykVDv0+QWcXtnHlc0Y4xuasJ5b8qV9wQ 7PGrIzTORQ6iyaxKqwvs116JLbwKUdCs4o2oPwT/S2nX3Qty6qX9Crhm0Wyy1a+l MxA8wbbXjB+gwCJgz8+LepokEgrSyYo= -----END CERTIFICATE-----Generated at Sat May 10 07:01:43 2025 by rpki-client