$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac9f27f1-2429-3af7-8938-906af785972e.roa File: ac9f27f1-2429-3af7-8938-906af785972e.roa (raw, json) Hash identifier: DZrKhjpoSksj9EpPtF7cPs1cjbuWZ4rJEbYZTUi4+W0= Subject key identifier: 1A:59:4E:C4:F8:7D:D6:A0:F6:C3:F3:21:FD:B4:3F:A1:1C:74:E6:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB49356B3E800BECEA23780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac9f27f1-2429-3af7-8938-906af785972e.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 75.90.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:93:56:b3:e8:00:be:ce:a2:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=443cae83-d623-4596-a2f3-f952c96c92b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c7:2d:39:c7:eb:a7:8b:69:23:22:7f:e4:7c: 03:9a:0c:40:8c:ae:bc:35:bc:e1:6b:be:f2:4d:54: 9a:92:95:f9:39:c2:8b:da:f8:89:58:de:64:b9:2a: 77:72:16:7f:0b:07:67:95:e0:0d:c5:88:17:33:7c: 5d:bc:9c:95:94:3d:7e:2e:1b:f4:1b:9f:b4:33:49: 97:8d:8d:ce:53:47:79:66:9d:54:10:2e:7d:d6:92: 89:a9:7b:bb:6e:60:8b:7c:71:0c:8c:92:77:fb:bc: 86:ea:bb:d7:3c:90:d2:31:34:c0:01:69:80:db:d5: fe:cb:e5:aa:16:eb:62:1e:0e:53:7f:e2:f7:c8:1d: 00:e5:25:31:e4:5f:9f:f1:61:40:eb:36:31:4a:c1: 97:e3:97:8c:3b:a6:72:46:6e:ac:f2:11:3b:43:23: f2:af:81:8f:e4:39:aa:7f:0c:ba:73:e3:53:ce:61: 6b:88:5e:37:fb:37:48:73:57:3a:76:b1:3d:79:71: d9:3a:62:33:9f:91:50:13:12:93:34:a5:4d:46:97: e0:3d:03:f3:a0:4d:d4:26:f5:6f:ac:2b:9f:fa:01: 50:02:97:42:27:df:7c:df:1b:d7:35:5d:2c:91:2c: ba:19:5e:57:bf:30:03:72:b7:78:cc:4d:19:a0:f2: 13:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:4E:C4:F8:7D:D6:A0:F6:C3:F3:21:FD:B4:3F:A1:1C:74:E6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac9f27f1-2429-3af7-8938-906af785972e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:69:56:83:30:e7:07:87:75:33:e7:37:86:3a:32:34:39:c5: 88:84:b8:65:9f:9e:12:92:fb:21:d3:66:e7:ed:d5:b7:50:47: 44:4a:9b:22:e5:23:c3:3b:99:52:ae:27:96:01:ec:d5:e0:23: 40:b3:2c:d6:51:45:fa:0f:22:31:8c:5d:bd:e0:4f:78:e4:f8: 99:4a:78:94:56:f0:80:7d:f0:60:34:66:41:95:73:1e:83:d2: 52:16:3a:97:9d:cb:c1:0b:11:db:7f:fb:55:d7:62:7c:52:67: ed:1c:0c:62:63:81:06:c5:37:04:18:f3:ce:fe:af:22:69:7b: 6c:1f:2f:8d:08:fc:92:4a:ca:3a:6e:da:5d:01:d9:16:1f:ed: 29:5d:a2:e8:10:28:c7:6a:4b:67:4f:39:15:c7:22:6d:76:c8: df:d6:3b:46:25:65:a9:2b:cd:2e:0f:7a:7f:2a:af:0f:33:54: 08:a1:b6:ad:62:fc:e1:9e:1e:33:45:91:b4:16:0e:eb:0e:45: d0:2c:3b:92:d9:59:e9:f5:aa:f2:a3:87:d1:ef:fe:a9:0a:7b: 25:ba:5e:2d:7b:c1:ea:13:0a:43:67:ff:a8:2e:0c:46:d3:f7: e3:91:95:a6:64:f3:5c:e6:ae:c5:b0:16:82:fe:44:15:99:e3: d4:25:c8:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJNWs+gAvs6iN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NDQzY2FlODMtZDYyMy00NTk2LWEyZjMtZjk1MmM5NmM5MmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsctOcfrp4tpIyJ/5HwDmgxAjK68Nbzha77y TVSakpX5OcKL2viJWN5kuSp3chZ/CwdnleANxYgXM3xdvJyVlD1+Lhv0G5+0M0mX jY3OU0d5Zp1UEC591pKJqXu7bmCLfHEMjJJ3+7yG6rvXPJDSMTTAAWmA29X+y+Wq FutiHg5Tf+L3yB0A5SUx5F+f8WFA6zYxSsGX45eMO6ZyRm6s8hE7QyPyr4GP5Dmq fwy6c+NTzmFriF43+zdIc1c6drE9eXHZOmIzn5FQExKTNKVNRpfgPQPzoE3UJvVv rCuf+gFQApdCJ9983xvXNV0skSy6GV5XvzADcrd4zE0ZoPITHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpZTsT4fdag9sPzIf20P6EcdOYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWM5ZjI3ZjEtMjQyOS0z YWY3LTg5MzgtOTA2YWY3ODU5NzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1qfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtpVoMw5weHdTPnN4Y6MjQ5xYiEuGWfnhKS+yHTZuft1bdQR0RKmyLl I8M7mVKuJ5YB7NXgI0CzLNZRRfoPIjGMXb3gT3jk+JlKeJRW8IB98GA0ZkGVcx6D 0lIWOpedy8ELEdt/+1XXYnxSZ+0cDGJjgQbFNwQY887+ryJpe2wfL40I/JJKyjpu 2l0B2RYf7SldougQKMdqS2dPORXHIm12yN/WO0YlZakrzS4Pen8qrw8zVAihtq1i /OGeHjNFkbQWDusORdAsO5LZWen1qvKjh9Hv/qkKeyW6Xi17weoTCkNn/6guDEbT 9+ORlaZk81zmrsWwFoL+RBWZ49QlyK4= -----END CERTIFICATE-----Generated at Sat May 10 13:34:29 2025 by rpki-client