$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e7a8fc35-dcc9-333b-807d-5cd4c47efc6d.roa File: e7a8fc35-dcc9-333b-807d-5cd4c47efc6d.roa (raw, json) Hash identifier: ghf3aE/QafAzVnheRrO/o2X8WmR9+gWd7gQqo80J7zk= Subject key identifier: C5:B0:6E:2D:6C:0D:C1:78:08:96:33:91:C9:3A:39:2D:C1:7B:B5:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA7E4915030F79872A000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e7a8fc35-dcc9-333b-807d-5cd4c47efc6d.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 75.88.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:e4:91:50:30:f7:98:72:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=968d6cd5-4373-421e-9487-b1c5ef0558f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4e:38:cc:c8:cd:69:f6:2e:aa:63:6f:8a:ac: 38:b4:af:47:31:b1:c1:f1:7f:6a:04:ea:c0:f6:7f: bb:c0:e1:cd:d9:94:10:c9:a9:4e:38:d5:9b:d0:98: 70:3d:d5:bb:45:37:cf:3b:38:16:e7:2f:3e:c3:99: 6a:19:4d:96:d0:dd:a1:dd:7e:55:4e:4c:53:1d:bd: fb:d7:37:3c:3c:59:58:59:69:07:15:bc:6b:7d:85: b0:9c:e0:8f:e6:b2:f1:ab:bf:21:26:d9:14:b7:27: eb:cd:70:91:50:8e:2d:f2:e6:2d:b1:f8:cc:ac:70: 5f:f9:f8:b0:ca:5a:bc:ce:67:e2:a3:9c:98:dd:71: 26:cd:77:10:b5:43:0a:14:6b:4b:b1:51:8a:a1:37: 00:1c:6c:df:3d:53:60:83:61:1b:64:52:0c:e7:dc: b8:6b:b4:aa:7a:79:ec:c3:39:37:b9:74:02:f3:06: 94:99:01:7b:b3:0d:3e:06:95:5e:18:b5:bb:94:71: ca:f6:d4:b1:82:8d:bc:bf:22:70:df:6b:0a:d3:52: d1:63:ae:39:35:70:34:da:c3:59:9d:29:ff:f6:17: fb:f2:17:98:0e:e6:27:11:a9:6a:dd:b6:43:48:2a: d2:a9:5f:8e:c1:83:e5:20:1e:d8:40:00:06:62:9f: 00:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B0:6E:2D:6C:0D:C1:78:08:96:33:91:C9:3A:39:2D:C1:7B:B5:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e7a8fc35-dcc9-333b-807d-5cd4c47efc6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:12:ad:a1:54:fb:c6:fd:a8:3c:bd:bf:4d:ce:3f:e1:c4:d4: ef:9d:9d:9b:d8:1b:89:cb:51:b1:fb:48:bd:cd:ed:3f:94:b9: 47:a8:d6:3f:97:a8:85:1c:48:27:63:96:9a:b1:e5:e6:e6:d1: 35:18:1d:b0:ca:dc:6d:8b:ee:84:af:82:3a:b5:2b:5a:89:dd: 7e:58:86:5f:51:08:3f:0d:ee:1b:2f:94:fd:1e:69:b8:c2:ae: ac:6f:77:08:98:16:74:d9:50:c5:9c:bb:9b:f7:1f:53:a3:9e: 34:da:14:9c:27:40:79:3b:04:d8:08:7e:f3:04:9f:6b:c9:e3: b3:ba:a3:ee:dc:16:59:3e:9b:4a:96:e9:c8:46:e1:ce:1c:3a: 9f:92:d4:0b:5b:f1:15:f8:8c:bf:63:d3:1e:c5:71:3e:74:77: d3:b6:8b:bd:3f:bd:a0:46:6f:ff:22:ac:12:43:84:6a:71:8d: 23:9b:05:0c:13:15:88:6c:65:c0:a0:04:2f:77:76:ff:a2:88: 58:31:77:e1:00:1c:a3:4d:b5:71:d2:24:15:0a:05:c4:db:d1: 1a:a9:32:7e:44:58:49:95:76:48:23:6f:60:2e:c1:a3:6e:bd: ab:f2:ab:22:91:d8:43:ad:62:1d:5f:46:81:2e:06:cf:1e:dc: ff:f6:62:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6fkkVAw95hyoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OTY4ZDZjZDUtNDM3My00MjFlLTk0ODctYjFjNWVmMDU1OGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE44zMjNafYuqmNviqw4tK9HMbHB8X9qBOrA 9n+7wOHN2ZQQyalOONWb0JhwPdW7RTfPOzgW5y8+w5lqGU2W0N2h3X5VTkxTHb37 1zc8PFlYWWkHFbxrfYWwnOCP5rLxq78hJtkUtyfrzXCRUI4t8uYtsfjMrHBf+fiw ylq8zmfio5yY3XEmzXcQtUMKFGtLsVGKoTcAHGzfPVNgg2EbZFIM59y4a7Sqenns wzk3uXQC8waUmQF7sw0+BpVeGLW7lHHK9tSxgo28vyJw32sK01LRY645NXA02sNZ nSn/9hf78heYDuYnEalq3bZDSCrSqV+OwYPlIB7YQAAGYp8AewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWwbi1sDcF4CJYzkck6OS3Be7XAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTdhOGZjMzUtZGNjOS0z MzNiLTgwN2QtNWNkNGM0N2VmYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1hgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsSraFU+8b9qDy9v03OP+HE1O+dnZvYG4nLUbH7SL3N7T+UuUeo1j+X qIUcSCdjlpqx5ebm0TUYHbDK3G2L7oSvgjq1K1qJ3X5Yhl9RCD8N7hsvlP0eabjC rqxvdwiYFnTZUMWcu5v3H1OjnjTaFJwnQHk7BNgIfvMEn2vJ47O6o+7cFlk+m0qW 6chG4c4cOp+S1Atb8RX4jL9j0x7FcT50d9O2i70/vaBGb/8irBJDhGpxjSObBQwT FYhsZcCgBC93dv+iiFgxd+EAHKNNtXHSJBUKBcTb0RqpMn5EWEmVdkgjb2AuwaNu vavyqyKR2EOtYh1fRoEuBs8e3P/2YmI= -----END CERTIFICATE-----Generated at Sat May 10 13:18:32 2025 by rpki-client