$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/931f944c-59db-3179-9f11-33a8b6222d41.roa File: 931f944c-59db-3179-9f11-33a8b6222d41.roa (raw, json) Hash identifier: Gq7PyIBajRxYbQ23rgDJszTA94VOV1lQFn6uCNjBeps= Subject key identifier: 11:FC:34:B7:3A:D9:0D:02:7D:1B:D6:62:68:EF:98:D3:CA:E2:3C:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3DE783A58EA28E363200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/931f944c-59db-3179-9f11-33a8b6222d41.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.89.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3d:e7:83:a5:8e:a2:8e:36:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=5bd5d5a2-942e-4733-bee9-76a7154f725b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5d:b5:16:2e:3e:82:a2:50:4c:4e:d4:62:7a: 9b:18:43:f6:1d:e7:d0:1a:05:87:7a:d6:01:54:49: 6d:c9:03:fc:43:69:bc:d0:2b:f8:a5:5a:b6:d2:48: 52:08:69:44:59:4e:2e:7e:25:33:0b:60:c7:61:4f: 5e:8f:e9:15:7f:79:26:52:4f:84:3e:d3:72:dc:af: 89:ae:54:cb:59:cf:4a:e8:84:5d:ad:20:2d:20:df: 4c:92:bf:35:a6:59:4e:6f:28:95:c5:7a:0c:ff:f3: 08:1c:77:6b:c8:18:9c:91:2e:94:35:04:d0:99:32: d4:94:ca:20:78:4f:b6:35:44:1c:a1:cc:19:cc:ef: ca:c7:83:e9:59:81:8a:b3:7c:50:40:80:ff:84:13: e7:3e:cd:6a:0b:b5:cd:a2:6f:52:0f:91:0d:c3:65: fa:67:4a:6b:f0:ce:39:56:b6:d5:56:a7:b8:c9:c0: a8:f9:25:1b:66:5e:8c:c3:67:22:75:69:98:0b:49: dc:6e:10:93:b5:82:1e:9b:2d:17:fb:5a:65:b8:5a: e6:fc:b8:47:39:58:1a:db:1c:dc:0d:f0:9d:f5:c9: c8:2e:77:c9:c2:f9:c3:33:33:ac:46:c8:f0:82:c2: 86:61:3a:41:ea:a9:dd:b0:bb:07:54:46:7d:bd:30: 44:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FC:34:B7:3A:D9:0D:02:7D:1B:D6:62:68:EF:98:D3:CA:E2:3C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/931f944c-59db-3179-9f11-33a8b6222d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d3:85:ea:72:bb:da:ea:b0:8e:6f:70:83:65:24:71:f1:4f: af:9e:67:4f:7d:d0:94:65:c6:d5:5c:67:c0:61:86:24:79:f9: 05:e6:9b:22:73:86:c7:e6:6b:11:8e:32:f8:7f:a3:e7:97:c9: 91:f8:ab:8c:8b:9f:ba:05:f1:99:f5:53:90:00:1d:55:96:85: e0:00:0f:4b:ba:62:1d:77:2a:b8:29:13:04:ee:74:6f:cd:5e: a3:57:19:1c:34:82:c4:50:29:87:4b:50:10:fd:53:be:43:d3: e7:b3:fc:7f:f7:22:74:58:a3:e6:9a:f7:29:7c:52:28:3d:1c: 52:16:37:8c:ad:a2:f8:94:66:34:29:48:b0:a2:12:81:b7:73: 8c:ca:04:24:4f:12:71:86:ad:26:24:0f:c4:17:3a:a4:ae:7c: dd:fb:fc:1e:ed:ec:cc:27:57:7b:f6:d8:73:af:4f:c2:ab:fd: 17:ac:31:4c:ed:fc:6e:90:91:59:dd:dd:96:b0:6d:a7:f8:1e: 45:92:a5:82:eb:58:32:52:af:c1:b6:6c:1e:50:d6:f6:aa:7d: 6d:35:ed:35:f1:3e:b6:a7:64:45:ea:88:5d:03:26:c7:66:67: 31:0c:36:e7:b9:15:ee:26:3d:d3:b7:49:25:a6:1a:52:f1:cd: c5:94:4a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj3ng6WOoo42MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NWJkNWQ1YTItOTQyZS00NzMzLWJlZTktNzZhNzE1NGY3MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l21Fi4+gqJQTE7UYnqbGEP2HefQGgWHetYB VEltyQP8Q2m80Cv4pVq20khSCGlEWU4ufiUzC2DHYU9ej+kVf3kmUk+EPtNy3K+J rlTLWc9K6IRdrSAtIN9Mkr81pllObyiVxXoM//MIHHdryBickS6UNQTQmTLUlMog eE+2NUQcocwZzO/Kx4PpWYGKs3xQQID/hBPnPs1qC7XNom9SD5ENw2X6Z0pr8M45 VrbVVqe4ycCo+SUbZl6Mw2cidWmYC0ncbhCTtYIemy0X+1pluFrm/LhHOVga2xzc DfCd9cnILnfJwvnDMzOsRsjwgsKGYTpB6qndsLsHVEZ9vTBE5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH8NLc62Q0CfRvWYmjvmNPK4jxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTMxZjk0NGMtNTlkYi0z MTc5LTlmMTEtMzNhOGI2MjIyZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1mYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3Thepyu9rqsI5vcINlJHHxT6+eZ0990JRlxtVcZ8BhhiR5+QXmmyJz hsfmaxGOMvh/o+eXyZH4q4yLn7oF8Zn1U5AAHVWWheAAD0u6Yh13KrgpEwTudG/N XqNXGRw0gsRQKYdLUBD9U75D0+ez/H/3InRYo+aa9yl8Uig9HFIWN4ytoviUZjQp SLCiEoG3c4zKBCRPEnGGrSYkD8QXOqSufN37/B7t7MwnV3v22HOvT8Kr/ResMUzt /G6QkVnd3Zawbaf4HkWSpYLrWDJSr8G2bB5Q1vaqfW017TXxPranZEXqiF0DJsdm ZzEMNue5Fe4mPdO3SSWmGlLxzcWUSjM= -----END CERTIFICATE-----Generated at Thu May 8 07:24:30 2025 by rpki-client