$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5ed174a-4acb-3bb4-8bdc-2491e89775a1.roa File: d5ed174a-4acb-3bb4-8bdc-2491e89775a1.roa (raw, json) Hash identifier: scbEUAh1D+/27c4dOUMm/qA4s09mvxtbNMveBFATg/M= Subject key identifier: B0:66:B1:5A:6C:44:83:35:AF:B9:66:92:5E:11:F6:4F:91:A1:0F:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB49346F2BDB81D28C64BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5ed174a-4acb-3bb4-8bdc-2491e89775a1.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 75.90.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:93:46:f2:bd:b8:1d:28:c6:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=ee9ee50b-c096-433b-9dca-3eadb27d64bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4a:fb:ab:bc:c4:26:d1:53:fb:60:f2:10:5d: 80:fc:a2:61:af:b2:ca:b9:a4:65:99:8d:cb:86:50: 3b:7c:74:9e:8c:f1:04:9f:b1:28:c5:47:7f:33:57: 3a:28:ff:03:aa:d3:c0:44:d7:e7:17:55:cd:36:c1: 5f:33:dc:82:82:d2:95:f0:97:ef:dd:e2:10:2c:e0: f0:dd:f0:af:cf:9a:c3:eb:7f:66:9e:ac:a1:9d:ec: ad:c8:76:24:f3:d4:27:69:ce:e8:7e:78:c3:03:7a: e1:a6:fb:68:88:38:85:ed:52:7a:2e:64:d9:7d:e0: ca:24:06:ab:1f:72:e8:eb:cb:9d:6b:cd:bc:dc:1a: 25:8b:1d:3c:e1:12:6f:8d:12:2b:3c:b7:44:66:9b: 6e:b1:2b:4b:00:74:7b:74:ef:a8:33:67:ce:4a:d0: af:50:72:e0:78:55:35:65:11:e6:3e:7e:fc:95:38: f3:49:08:03:16:1f:37:72:f1:44:9e:92:a3:ba:c4: 42:1b:ac:84:c8:6f:8d:22:f0:74:f9:2b:d7:87:ad: b6:d7:60:03:8d:66:e4:3c:85:c7:be:63:77:03:c6: 5c:1f:1a:0b:69:bc:05:7a:a0:76:08:88:e7:de:fc: 01:1f:34:16:3f:81:97:3a:4b:e4:de:50:1c:24:35: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:66:B1:5A:6C:44:83:35:AF:B9:66:92:5E:11:F6:4F:91:A1:0F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5ed174a-4acb-3bb4-8bdc-2491e89775a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:8d:e9:d4:45:89:49:c3:fc:b1:eb:6c:c5:42:33:18:74:9d: 5e:69:0c:89:73:d8:54:e7:5a:f0:5e:ae:21:3d:4f:1c:bf:ac: d0:43:f9:ad:0c:73:58:92:4e:46:35:d3:ef:aa:e2:0c:36:2c: 4f:03:45:84:96:b4:52:38:2b:97:ac:30:76:38:c3:a4:1d:65: c3:6a:8e:aa:2d:ed:c6:9e:6d:33:a9:09:87:87:6b:b3:aa:7f: 9b:3a:48:3c:70:1c:86:f6:46:b3:50:97:f6:89:15:ed:26:86: 59:83:61:85:f5:f7:4e:98:c8:ff:9b:b0:56:95:29:7d:90:91: de:de:56:2f:81:41:12:2d:4e:df:f4:6c:0b:c3:64:61:dd:0e: f2:56:80:51:cb:78:f7:b5:44:1d:88:92:30:24:6b:7c:ea:83: 85:f5:8b:b4:99:68:60:b4:d4:dd:2b:8e:d7:78:7f:0b:f4:b1: 75:0e:f0:3d:cd:35:53:29:ed:16:51:2e:d2:fd:92:65:b2:17: f4:a6:b1:a6:16:2a:6e:24:c1:60:25:4e:83:e7:1c:60:2c:12: 65:a2:6f:07:fa:44:61:2e:cc:32:d1:ad:8b:1d:b2:bc:59:44: ca:30:2b:9c:6a:28:56:4e:14:4d:80:fc:00:e1:a0:30:90:39: 48:57:3a:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJNG8r24HSjGS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZWU5ZWU1MGItYzA5Ni00MzNiLTlkY2EtM2VhZGIyN2Q2NGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0r7q7zEJtFT+2DyEF2A/KJhr7LKuaRlmY3L hlA7fHSejPEEn7EoxUd/M1c6KP8DqtPARNfnF1XNNsFfM9yCgtKV8Jfv3eIQLODw 3fCvz5rD639mnqyhneytyHYk89Qnac7ofnjDA3rhpvtoiDiF7VJ6LmTZfeDKJAar H3Lo68uda8283Bolix084RJvjRIrPLdEZptusStLAHR7dO+oM2fOStCvUHLgeFU1 ZRHmPn78lTjzSQgDFh83cvFEnpKjusRCG6yEyG+NIvB0+SvXh62212ADjWbkPIXH vmN3A8ZcHxoLabwFeqB2CIjn3vwBHzQWP4GXOkvk3lAcJDV2lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBmsVpsRIM1r7lmkl4R9k+RoQ+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDVlZDE3NGEtNGFjYi0z YmI0LThiZGMtMjQ5MWU4OTc3NWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1qeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADON6dRFiUnD/LHrbMVCMxh0nV5pDIlz2FTnWvBeriE9Txy/rNBD+a0M c1iSTkY10++q4gw2LE8DRYSWtFI4K5esMHY4w6QdZcNqjqot7caebTOpCYeHa7Oq f5s6SDxwHIb2RrNQl/aJFe0mhlmDYYX1906YyP+bsFaVKX2Qkd7eVi+BQRItTt/0 bAvDZGHdDvJWgFHLePe1RB2IkjAka3zqg4X1i7SZaGC01N0rjtd4fwv0sXUO8D3N NVMp7RZRLtL9kmWyF/SmsaYWKm4kwWAlToPnHGAsEmWibwf6RGEuzDLRrYsdsrxZ RMowK5xqKFZOFE2A/ADhoDCQOUhXOo0= -----END CERTIFICATE-----Generated at Wed May 7 17:17:49 2025 by rpki-client