$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0dda5f5b-b490-38fd-adfa-705c42f5c4f2.roa File: 0dda5f5b-b490-38fd-adfa-705c42f5c4f2.roa (raw, json) Hash identifier: prUS+w3UU4pnxVS93g1iyOJm0FxAQX+sIRHf302CDY4= Subject key identifier: B7:40:C6:DC:16:7B:1A:01:46:8F:8D:83:93:33:6A:08:75:1A:FB:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D4DB9545DC70997B68DC1F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0dda5f5b-b490-38fd-adfa-705c42f5c4f2.roa Signing time: Mon 10 Feb 2025 02:00:38 +0000 ROA not before: Mon 10 Feb 2025 02:00:38 +0000 ROA not after: Sun 11 May 2025 01:00:38 +0000 asID: 7029 IP address blocks: 75.117.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d4:db:95:45:dc:70:99:7b:68:dc:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 10 02:00:38 2025 GMT Not After : May 11 01:00:38 2025 GMT Subject: CN=cf576d2d-5595-4bd1-b274-c4cd5db7222b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:d8:61:87:cb:08:15:c3:4e:68:20:69:12: ec:c4:53:93:e8:e5:93:26:d7:40:88:81:ee:9b:e2: 8d:d9:f3:31:93:a0:c9:4d:d5:4e:2f:7f:13:bf:8d: 38:e3:c9:0c:04:62:14:6a:f5:c1:c1:ed:a6:e3:34: 93:3c:bd:a7:c3:9c:57:d9:ae:76:55:22:86:02:db: 4c:02:7e:ab:50:8d:64:20:f9:76:ed:36:63:30:99: 30:f5:87:fe:a1:01:cf:99:b5:06:68:17:e2:15:f6: 3e:05:46:bf:c2:13:f8:bb:66:7d:29:34:5b:46:f8: a8:3e:0f:3f:4a:d0:fa:cd:78:74:0f:78:7d:9d:16: a0:9e:de:9a:8f:c1:60:51:03:b6:8b:c3:89:76:98: 2c:9c:99:a9:df:43:65:2c:ad:27:bf:8d:28:f9:fc: 7d:3c:ea:25:2a:ec:bf:46:88:93:f2:b2:a4:0f:e5: 6b:4d:f5:fa:85:bb:52:ba:2e:b7:11:2b:ea:42:64: ab:74:fc:f1:9a:d8:84:77:93:7d:e8:e7:d7:97:52: 46:ed:a5:b2:f7:57:3b:26:f0:67:16:90:f3:a2:79: 4d:86:1f:c6:44:6f:e5:9e:e3:0a:2f:2a:0e:bb:ea: 9f:91:65:b7:72:bc:e1:f0:7c:ef:c7:4e:f3:18:0b: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:40:C6:DC:16:7B:1A:01:46:8F:8D:83:93:33:6A:08:75:1A:FB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0dda5f5b-b490-38fd-adfa-705c42f5c4f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:0d:8c:e1:fa:97:83:e7:0a:85:9d:02:09:16:cf:62:a2:5f: 91:c0:44:05:7c:b2:f3:f9:56:0c:a3:c4:2f:a3:c7:db:80:b6: c9:8d:6d:c0:6d:46:a6:4e:2f:84:60:16:9f:38:9c:1b:4f:08: a7:59:0b:00:4f:57:62:7d:05:34:a3:da:04:75:60:f5:a7:05: 92:6f:48:cd:66:e1:fe:3e:aa:4a:bc:54:ac:a1:a9:8c:ea:5e: 74:ef:ee:6a:c8:20:a0:54:c5:3a:ec:f1:62:cb:ed:9c:49:c1: 89:bc:1a:86:4d:1a:86:34:1d:3a:1e:59:3d:7f:95:fc:45:67: 10:2f:8e:c8:03:8b:04:55:b2:ca:39:35:e5:a4:14:ae:7a:b6: de:3e:2b:53:b8:52:b2:a3:3a:df:ac:6f:9d:31:1f:1f:5f:d9: b6:68:44:2f:76:22:63:44:25:b1:96:ff:eb:a0:9d:27:07:15: da:1a:37:38:1e:94:f1:08:fb:1f:c8:25:62:61:ca:02:2b:f0: 9d:36:7a:34:9d:fb:05:a8:6c:39:f6:b4:d0:25:8c:d1:31:c2: 8d:a1:5c:ab:d1:f0:5f:e2:4d:9b:a1:3c:17:ad:fe:44:fe:f1: ab:61:dd:27:8c:2b:bb:0c:62:00:82:90:c4:90:9b:b9:c9:f1: da:76:cb:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjU25VF3HCZe2jcH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMDAyMDAzOFoXDTI1MDUxMTAxMDAzOFowLzEtMCsGA1UEAxMk Y2Y1NzZkMmQtNTU5NS00YmQxLWIyNzQtYzRjZDVkYjcyMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7XYYYfLCBXDTmggaRLsxFOT6OWTJtdAiIHu m+KN2fMxk6DJTdVOL38Tv40448kMBGIUavXBwe2m4zSTPL2nw5xX2a52VSKGAttM An6rUI1kIPl27TZjMJkw9Yf+oQHPmbUGaBfiFfY+BUa/whP4u2Z9KTRbRvioPg8/ StD6zXh0D3h9nRagnt6aj8FgUQO2i8OJdpgsnJmp30NlLK0nv40o+fx9POolKuy/ RoiT8rKkD+VrTfX6hbtSui63ESvqQmSrdPzxmtiEd5N96OfXl1JG7aWy91c7JvBn FpDzonlNhh/GRG/lnuMKLyoOu+qfkWW3crzh8Hzvx07zGAtslQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdAxtwWexoBRo+Ng5Mzagh1GvvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGRkYTVmNWItYjQ5MC0z OGZkLWFkZmEtNzA1YzQyZjVjNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS3XYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUNjOH6l4PnCoWdAgkWz2KiX5HARAV8svP5VgyjxC+jx9uAtsmNbcBt RqZOL4RgFp84nBtPCKdZCwBPV2J9BTSj2gR1YPWnBZJvSM1m4f4+qkq8VKyhqYzq XnTv7mrIIKBUxTrs8WLL7ZxJwYm8GoZNGoY0HToeWT1/lfxFZxAvjsgDiwRVsso5 NeWkFK56tt4+K1O4UrKjOt+sb50xHx9f2bZoRC92ImNEJbGW/+ugnScHFdoaNzge lPEI+x/IJWJhygIr8J02ejSd+wWobDn2tNAljNExwo2hXKvR8F/iTZuhPBet/kT+ 8ath3SeMK7sMYgCCkMSQm7nJ8dp2ywU= -----END CERTIFICATE-----Generated at Sun Apr 27 01:13:06 2025 by rpki-client