$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ac1987c-f88d-3172-a637-1190e9dafcde.roa File: 8ac1987c-f88d-3172-a637-1190e9dafcde.roa (raw, json) Hash identifier: m1/x+Ki712GIovngz3gRGPWlzXP9Hf3Gy/MCH3qWVOQ= Subject key identifier: A1:73:9D:A6:33:2C:92:75:D0:27:D8:6E:55:38:37:00:E8:85:28:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA2326ACE4A61A02FF1380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ac1987c-f88d-3172-a637-1190e9dafcde.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.91.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:23:26:ac:e4:a6:1a:02:ff:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=ff96ce13-9def-47a9-94e8-7d049adddf63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:76:3b:9a:5c:bd:cf:04:b9:e1:55:21:19:6a: 25:e9:fd:1d:21:0a:5b:55:4c:d5:c7:8b:66:04:fb: 85:bd:4c:de:77:0c:b3:2a:5f:bc:75:9a:f3:d4:17: d7:43:54:2a:bc:68:5a:0b:62:81:04:3b:6f:73:34: af:92:b6:ae:f5:e7:37:b1:8b:17:6c:3e:95:5d:64: 30:2e:da:14:cd:30:f6:dd:a9:74:54:28:d4:b1:61: 3d:53:1d:53:60:15:f3:79:6f:22:96:bf:00:2b:42: c4:67:90:71:c4:1d:0e:1e:cd:bc:28:5c:f3:2f:26: e7:56:e6:c6:eb:86:98:c2:76:cf:c0:d7:02:a1:ea: c4:84:5c:33:27:63:57:d6:11:b1:2a:68:14:77:ad: 5c:ee:21:74:f4:f8:c0:c9:a9:68:40:d5:51:7b:e1: 05:66:48:f7:a8:c4:ad:4d:50:da:52:01:da:45:4a: 42:98:01:17:4f:a8:e4:1b:3e:98:44:dd:11:b2:52: 7b:af:c2:d4:4e:9a:e5:d4:d9:53:b2:78:0f:20:e5: a9:84:fc:e4:2f:bd:77:93:ca:09:87:6d:ba:8c:1b: b2:45:15:40:8f:55:1c:5f:88:48:7d:90:08:84:f6: b6:b9:eb:47:ef:e8:a5:de:8d:c9:8f:b1:64:81:a3: 82:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:73:9D:A6:33:2C:92:75:D0:27:D8:6E:55:38:37:00:E8:85:28:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ac1987c-f88d-3172-a637-1190e9dafcde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:82:b0:76:b0:3b:34:bf:70:fc:97:09:a2:67:7d:02:cd:81: 7c:69:c4:d2:d8:e7:9e:e6:a2:77:98:95:d8:33:c8:77:d1:f0: c0:fa:90:5f:1a:49:1f:93:e3:46:a3:72:e6:19:a9:b2:9e:fc: 65:d9:48:21:9e:e3:d8:01:31:3a:df:55:87:de:32:83:d1:ad: 82:4c:b9:65:58:3a:4e:f5:a6:f6:35:df:d9:e7:8c:b2:d5:8c: 3e:7f:08:88:a2:6b:cc:c2:68:d2:8b:7e:dd:ed:9c:d9:2c:c2: c5:df:4a:1f:c4:07:d4:95:e2:78:b3:7c:31:4b:ba:47:b7:76: 54:e1:c9:3f:36:d2:33:b2:5e:99:a5:22:a5:cd:28:1e:6b:b5: 2b:97:e7:ab:f3:df:15:38:d0:38:2c:62:ff:47:fe:8b:49:a7: 43:53:2b:82:ad:e7:bc:9f:61:cf:be:0a:b6:87:83:9c:9f:57: 4d:8a:8e:fc:1d:d7:9b:03:4e:db:c3:76:66:6d:6e:93:bd:ab: 0a:11:3e:23:9e:10:4d:d6:10:af:cb:ad:20:52:b3:5f:94:d8: c6:15:67:30:e4:aa:e5:ac:47:ba:c1:c1:d9:17:5e:a6:b4:42: e8:4e:36:71:47:a3:69:b6:ff:24:7e:dc:fd:43:c6:46:cd:98: 9f:8e:0e:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiMmrOSmGgL/E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk ZmY5NmNlMTMtOWRlZi00N2E5LTk0ZTgtN2QwNDlhZGRkZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnY7mly9zwS54VUhGWol6f0dIQpbVUzVx4tm BPuFvUzedwyzKl+8dZrz1BfXQ1QqvGhaC2KBBDtvczSvkrau9ec3sYsXbD6VXWQw LtoUzTD23al0VCjUsWE9Ux1TYBXzeW8ilr8AK0LEZ5BxxB0OHs28KFzzLybnVubG 64aYwnbPwNcCoerEhFwzJ2NX1hGxKmgUd61c7iF09PjAyaloQNVRe+EFZkj3qMSt TVDaUgHaRUpCmAEXT6jkGz6YRN0RslJ7r8LUTprl1NlTsngPIOWphPzkL713k8oJ h226jBuyRRVAj1UcX4hIfZAIhPa2uetH7+il3o3Jj7FkgaOCtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFznaYzLJJ10CfYblU4NwDohSjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGFjMTk4N2MtZjg4ZC0z MTcyLWE2MzctMTE5MGU5ZGFmY2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1suMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuCsHawOzS/cPyXCaJnfQLNgXxpxNLY557moneYldgzyHfR8MD6kF8a SR+T40ajcuYZqbKe/GXZSCGe49gBMTrfVYfeMoPRrYJMuWVYOk71pvY139nnjLLV jD5/CIiia8zCaNKLft3tnNkswsXfSh/EB9SV4nizfDFLuke3dlThyT820jOyXpml IqXNKB5rtSuX56vz3xU40DgsYv9H/otJp0NTK4Kt57yfYc++CraHg5yfV02Kjvwd 15sDTtvDdmZtbpO9qwoRPiOeEE3WEK/LrSBSs1+U2MYVZzDkquWsR7rBwdkXXqa0 QuhONnFHo2m2/yR+3P1DxkbNmJ+ODhI= -----END CERTIFICATE-----Generated at Tue Jul 1 09:57:14 2025 by rpki-client