$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e927098c-4722-3a1a-8c6b-5da635318786.roa File: e927098c-4722-3a1a-8c6b-5da635318786.roa (raw, json) Hash identifier: adhVH468d/zqWF8nqJOLcD564oF6/dYwbwZMSzZlMyc= Subject key identifier: A8:F8:83:37:F9:2D:71:07:66:21:59:82:0E:80:5E:7C:AC:0F:0D:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB4919AAFF5A16CE376AB20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e927098c-4722-3a1a-8c6b-5da635318786.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 75.88.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:91:9a:af:f5:a1:6c:e3:76:ab:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=1c942805-d488-4f35-be06-9e3fad6cd77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:20:08:51:d6:cd:3d:41:ae:ad:39:de:65:d2: 3a:72:77:63:a9:3c:a6:3c:e5:ec:5c:07:f2:06:a8: 14:0e:5f:22:7b:3c:67:8c:09:ed:50:83:65:7a:0d: d1:e6:4d:3d:71:f5:0d:8f:8e:29:3f:b3:a0:72:52: ed:00:a8:ba:30:bc:89:9a:3c:eb:16:27:41:e5:6c: 09:54:84:dc:2f:11:4a:85:d1:47:28:de:5f:8c:9b: b6:78:55:5f:b1:fa:3d:e4:23:50:01:84:5d:0d:7e: 0e:8e:41:66:ee:09:a8:8f:4b:50:05:d4:59:55:8f: e4:32:50:a3:ca:5d:9c:a8:94:c7:b0:9f:06:9b:ea: b2:5a:91:b6:c5:44:3d:c1:ed:8e:64:b3:85:00:77: 18:bb:04:80:7e:e6:45:3d:52:7c:07:f4:1d:f3:f0: 91:c5:71:16:42:a9:ff:a6:ae:ee:b0:85:21:f2:9d: 63:b5:07:ff:0a:05:5d:ff:59:5d:d8:ab:2a:8c:9c: be:53:13:a0:a0:a7:f5:16:29:ea:85:38:dc:3e:36: 5b:96:e3:ba:00:ef:60:d3:be:97:e7:27:74:fd:cb: 67:af:69:33:4d:24:c8:53:a2:76:30:8e:30:31:1e: 3c:ec:1c:76:99:49:02:b1:15:54:14:10:08:61:cd: c5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F8:83:37:F9:2D:71:07:66:21:59:82:0E:80:5E:7C:AC:0F:0D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e927098c-4722-3a1a-8c6b-5da635318786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:01:9c:6f:e2:03:dd:54:8f:2b:17:0f:05:0b:ba:78:49:59: b5:cc:c9:ec:44:90:82:53:df:71:17:4c:c0:27:f1:a6:ba:80: 75:88:ef:75:60:7b:de:5f:ba:35:3b:6b:c6:15:a1:55:13:9b: 2e:d4:c5:40:ac:21:4f:e8:7a:dd:61:2e:09:23:88:20:6f:c3: 97:d5:f0:7d:34:de:8c:41:6d:d7:81:f5:e2:e6:d5:e7:a4:2d: 9c:c1:d1:22:73:01:11:33:7a:db:0b:13:6c:a9:a5:07:de:ee: 86:cc:41:c8:11:c1:6b:f8:75:ab:c8:6d:86:29:25:49:dd:3c: fc:f1:e6:bb:a8:fc:fa:ea:6d:35:6b:65:80:b1:d0:b5:a6:87: 0b:b1:24:9f:3c:87:7b:c5:1c:92:92:f3:a9:43:7e:5a:ad:6b: 16:33:6b:0f:5e:28:f5:4c:72:e7:22:01:05:e6:98:fd:e3:cb: 88:24:f4:6a:0d:89:c2:25:8b:91:8f:5c:74:58:ab:24:8e:33: 58:05:b6:43:b4:06:96:66:62:29:5e:71:99:cd:ec:ea:0c:8d: 04:5f:05:27:ee:1e:5c:29:1a:92:84:8f:3b:12:54:a2:1e:ec: 50:be:aa:d0:62:1c:5c:05:d0:9b:90:0d:d9:91:0b:86:5b:0b: 98:0c:ad:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJGar/WhbON2qyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MWM5NDI4MDUtZDQ4OC00ZjM1LWJlMDYtOWUzZmFkNmNkNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yAIUdbNPUGurTneZdI6cndjqTymPOXsXAfy BqgUDl8iezxnjAntUINleg3R5k09cfUNj44pP7OgclLtAKi6MLyJmjzrFidB5WwJ VITcLxFKhdFHKN5fjJu2eFVfsfo95CNQAYRdDX4OjkFm7gmoj0tQBdRZVY/kMlCj yl2cqJTHsJ8Gm+qyWpG2xUQ9we2OZLOFAHcYuwSAfuZFPVJ8B/Qd8/CRxXEWQqn/ pq7usIUh8p1jtQf/CgVd/1ld2KsqjJy+UxOgoKf1FinqhTjcPjZbluO6AO9g076X 5yd0/ctnr2kzTSTIU6J2MI4wMR487Bx2mUkCsRVUFBAIYc3FxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKj4gzf5LXEHZiFZgg6AXnysDw3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTkyNzA5OGMtNDcyMi0z YTFhLThjNmItNWRhNjM1MzE4Nzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1gYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoBnG/iA91UjysXDwULunhJWbXMyexEkIJT33EXTMAn8aa6gHWI73Vg e95fujU7a8YVoVUTmy7UxUCsIU/oet1hLgkjiCBvw5fV8H003oxBbdeB9eLm1eek LZzB0SJzAREzetsLE2yppQfe7obMQcgRwWv4davIbYYpJUndPPzx5ruo/PrqbTVr ZYCx0LWmhwuxJJ88h3vFHJKS86lDflqtaxYzaw9eKPVMcuciAQXmmP3jy4gk9GoN icIli5GPXHRYqySOM1gFtkO0BpZmYilecZnN7OoMjQRfBSfuHlwpGpKEjzsSVKIe 7FC+qtBiHFwF0JuQDdmRC4ZbC5gMrXc= -----END CERTIFICATE-----Generated at Sun May 11 14:49:07 2025 by rpki-client