$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc00b87c-d30d-36a0-b61c-c2c29be96ecd.roa File: dc00b87c-d30d-36a0-b61c-c2c29be96ecd.roa (raw, json) Hash identifier: LAckQR540n+q2KgoIDKeu3MkklPXgjRvbU4mzY+fwBQ= Subject key identifier: 0B:A6:34:45:40:E4:54:3A:45:38:BA:EA:68:1F:2E:26:8D:81:E8:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3DD629DC6E53112FFF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc00b87c-d30d-36a0-b61c-c2c29be96ecd.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.89.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3d:d6:29:dc:6e:53:11:2f:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=db3071e0-f5c9-42f6-b56a-4f03cfe0d198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:52:8c:11:83:4a:f9:fc:33:03:f1:2e:ab: 02:1e:42:2d:6c:4f:2b:0a:18:19:1d:ba:40:db:24: f3:2c:30:0c:f7:ec:c9:bf:25:2f:8e:a2:ea:a5:c1: 19:98:46:9d:e6:d6:24:55:37:8e:aa:a0:ee:5d:2f: 8b:8d:75:f9:e5:0f:21:dd:7b:e5:f0:31:bf:81:0b: 00:c9:f1:87:54:41:21:47:3c:9d:cb:0b:59:57:8f: dd:b8:dd:2c:3f:36:bf:31:2f:35:53:b8:0d:82:74: bd:d2:0e:41:7f:e3:c3:d3:4d:5e:96:2f:a7:fe:e6: 6d:4f:5d:b9:89:78:3b:31:0a:58:e1:eb:c5:6a:29: da:8c:c8:8c:49:67:7b:64:76:2f:9b:f8:1e:a1:90: 85:fc:d6:92:40:47:e7:8b:fc:ef:bf:1b:d3:f6:67: ee:74:4c:50:0a:c5:d9:4e:b7:e0:91:35:c8:21:64: ce:09:56:01:fb:66:34:ce:fa:2a:a7:57:c2:ee:dd: 8b:81:c0:7a:e5:d7:7e:11:5f:7a:54:40:70:0e:3d: 98:b4:fc:95:e3:cc:46:4a:57:14:7a:ed:6c:2d:4f: c6:e3:60:c8:4f:4d:04:55:03:c3:02:a4:85:5d:7e: e3:ac:72:ff:a7:bd:3e:0a:9b:bd:bd:e3:12:06:d0: 90:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A6:34:45:40:E4:54:3A:45:38:BA:EA:68:1F:2E:26:8D:81:E8:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc00b87c-d30d-36a0-b61c-c2c29be96ecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:fe:d6:4a:be:93:9a:27:28:1e:60:3e:78:b8:91:ad:3c:76: eb:b9:5c:32:03:17:09:b3:7a:85:0e:53:6b:3a:e8:ff:11:f5: d3:c1:79:c5:c8:1f:43:28:b6:49:e9:66:27:05:d6:af:71:4f: fc:cd:81:fd:95:7b:6f:37:e7:13:32:aa:35:81:8f:83:40:32: 26:e8:11:3c:cf:63:a9:e5:e6:e2:a3:15:46:28:9d:0f:3e:a5: 8b:41:3e:44:9a:ba:a0:c2:26:af:f8:f3:8e:0d:6f:2a:fd:9f: 12:4c:1d:73:02:df:99:15:7c:ca:0b:88:2e:30:06:c3:3f:59: 1e:18:93:78:af:23:3e:2d:88:74:9a:c2:2f:c0:e0:a1:34:11: 36:12:98:e4:df:f5:89:ab:ea:5a:4e:de:f2:dc:68:fc:64:06: ab:07:3a:d9:f2:fe:4c:a7:d5:3f:2b:9b:fb:da:11:96:d8:1b: c1:ec:ab:b3:fd:b2:d6:c4:2f:2e:b0:24:3b:f0:52:18:53:75: be:fd:00:72:85:98:ee:cd:c8:ab:f8:bb:c9:be:f0:55:4b:48: fa:a4:f6:e6:c6:4e:e1:22:37:54:aa:fd:37:f9:6b:e9:3c:a2: e0:31:bf:7a:b4:8b:0c:5f:bf:e5:af:d7:64:38:8f:e4:39:d5: a9:17:e7:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj3WKdxuUxEv/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZGIzMDcxZTAtZjVjOS00MmY2LWI1NmEtNGYwM2NmZTBkMTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgZSjBGDSvn8MwPxLqsCHkItbE8rChgZHbpA 2yTzLDAM9+zJvyUvjqLqpcEZmEad5tYkVTeOqqDuXS+LjXX55Q8h3Xvl8DG/gQsA yfGHVEEhRzydywtZV4/duN0sPza/MS81U7gNgnS90g5Bf+PD001eli+n/uZtT125 iXg7MQpY4evFainajMiMSWd7ZHYvm/geoZCF/NaSQEfni/zvvxvT9mfudExQCsXZ TrfgkTXIIWTOCVYB+2Y0zvoqp1fC7t2LgcB65dd+EV96VEBwDj2YtPyV48xGSlcU eu1sLU/G42DIT00EVQPDAqSFXX7jrHL/p70+Cpu9veMSBtCQVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAumNEVA5FQ6RTi66mgfLiaNgejEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGMwMGI4N2MtZDMwZC0z NmEwLWI2MWMtYzJjMjliZTk2ZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1lIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX+1kq+k5onKB5gPni4ka08duu5XDIDFwmzeoUOU2s66P8R9dPBecXI H0MotknpZicF1q9xT/zNgf2Ve2835xMyqjWBj4NAMiboETzPY6nl5uKjFUYonQ8+ pYtBPkSauqDCJq/4844Nbyr9nxJMHXMC35kVfMoLiC4wBsM/WR4Yk3ivIz4tiHSa wi/A4KE0ETYSmOTf9Ymr6lpO3vLcaPxkBqsHOtny/kyn1T8rm/vaEZbYG8Hsq7P9 stbELy6wJDvwUhhTdb79AHKFmO7NyKv4u8m+8FVLSPqk9ubGTuEiN1Sq/Tf5a+k8 ouAxv3q0iwxfv+Wv12Q4j+Q51akX56I= -----END CERTIFICATE-----Generated at Tue May 6 20:08:00 2025 by rpki-client