$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dd4c02a-5ee8-3d01-bdf1-cb5a5d68b0fa.roa File: 7dd4c02a-5ee8-3d01-bdf1-cb5a5d68b0fa.roa (raw, json) Hash identifier: iLcNeXTx6GKQcerHl1+InFTmCdcU+j/xKTGaY31tRZs= Subject key identifier: 68:18:3F:D9:B7:E2:4F:98:B9:98:9D:1D:9E:47:7F:D5:1D:F0:08:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AABBD1C26937A1284BC540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dd4c02a-5ee8-3d01-bdf1-cb5a5d68b0fa.roa Signing time: Thu 20 Feb 2025 18:16:31 +0000 ROA not before: Thu 20 Feb 2025 18:16:31 +0000 ROA not after: Wed 21 May 2025 17:16:31 +0000 asID: 7029 IP address blocks: 75.117.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:bb:d1:c2:69:37:a1:28:4b:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:16:31 2025 GMT Not After : May 21 17:16:31 2025 GMT Subject: CN=72d06a90-843c-4e7d-8036-b9c356825bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:4c:5e:d0:b2:6c:ec:12:44:e8:de:d9:54: b6:df:62:57:b2:93:10:88:e9:0d:66:97:d4:53:67: 0a:f1:a4:f9:c9:9e:bc:6f:00:2e:27:ab:9d:f9:75: ed:b8:6b:c7:87:a1:cc:2f:8b:92:8e:7c:14:56:5d: 03:62:b6:30:c9:cf:0f:29:c3:a8:06:8a:69:12:12: d4:01:82:09:b9:3b:9b:5e:b9:88:f9:bd:e2:3a:18: 41:9d:e3:cf:96:6a:9f:1c:40:cc:e7:3f:b3:c1:9c: b0:89:f7:a6:5b:96:53:9f:a9:7e:fd:1e:aa:59:7f: 39:e6:2e:6c:06:35:2d:03:73:4f:18:cd:97:ae:07: a7:53:57:e7:62:2b:fb:5e:00:9f:40:d4:c3:f7:e3: 58:47:b3:ff:8c:da:fc:80:03:d5:b9:01:44:54:63: e1:35:5c:80:03:e4:0a:d4:29:35:9c:14:e3:60:fe: 40:02:a1:0e:15:f0:bd:de:61:d8:69:65:14:d6:11: ad:5b:98:6e:b8:94:0a:71:08:97:ca:bb:13:b6:5a: dc:33:5b:45:3d:4a:aa:4c:47:b2:d3:cf:16:8b:94: 2c:4a:6c:7e:c5:8d:66:4d:94:d8:7c:52:28:4b:0f: 90:8d:6f:e7:fd:3d:c7:f0:e5:af:28:55:f7:4c:f3: 4d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:18:3F:D9:B7:E2:4F:98:B9:98:9D:1D:9E:47:7F:D5:1D:F0:08:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dd4c02a-5ee8-3d01-bdf1-cb5a5d68b0fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b8:cb:1a:89:af:b9:91:40:21:fd:fc:40:89:f7:3d:1f:e4: 6a:ad:b1:e6:01:b8:87:56:7c:69:b1:1e:c0:d7:3d:a4:05:25: 7a:bf:b3:13:7b:14:ff:2b:05:2c:bc:2c:26:9f:5e:b3:e0:96: 17:03:54:4b:81:ae:23:72:2d:98:f4:dd:8d:fe:96:85:03:2f: 1b:7d:4c:db:23:a8:08:25:65:82:73:e2:e9:a2:90:2c:00:b5: 18:09:be:2c:fd:56:96:b6:40:b3:04:1a:48:9b:2a:e4:ac:56: 6b:1b:a2:e3:8d:4b:b0:e6:e7:aa:90:19:86:52:1c:49:9c:23: 60:81:15:83:53:33:a4:d5:dd:9a:ad:de:2a:9f:4d:19:e1:7f: 0a:c3:e0:e7:d6:82:2a:09:55:4d:e8:6f:46:65:ed:eb:2d:eb: aa:16:06:3a:a0:26:b6:fd:24:de:54:6e:d9:ab:f4:62:ca:25: 3e:42:00:cd:5d:4b:63:65:3e:0a:0e:5b:f0:4c:d0:5d:6f:c5: 71:93:72:45:81:80:26:5c:9c:78:eb:2e:75:06:a6:ad:b8:05: a7:27:1d:97:8c:d8:05:07:30:94:95:9b:f0:66:0e:56:94:0d: d0:b5:1b:5a:a1:73:b7:aa:61:e7:21:f6:c0:e5:04:e7:81:aa: 12:8f:38:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqrvRwmk3oShLxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTYzMVoXDTI1MDUyMTE3MTYzMVowLzEtMCsGA1UEAxMk NzJkMDZhOTAtODQzYy00ZTdkLTgwMzYtYjljMzU2ODI1YmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkalMXtCybOwSROje2VS232JXspMQiOkNZpfU U2cK8aT5yZ68bwAuJ6ud+XXtuGvHh6HML4uSjnwUVl0DYrYwyc8PKcOoBoppEhLU AYIJuTubXrmI+b3iOhhBnePPlmqfHEDM5z+zwZywifemW5ZTn6l+/R6qWX855i5s BjUtA3NPGM2XrgenU1fnYiv7XgCfQNTD9+NYR7P/jNr8gAPVuQFEVGPhNVyAA+QK 1Ck1nBTjYP5AAqEOFfC93mHYaWUU1hGtW5huuJQKcQiXyrsTtlrcM1tFPUqqTEey 088Wi5QsSmx+xY1mTZTYfFIoSw+QjW/n/T3H8OWvKFX3TPNNFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgYP9m34k+YuZidHZ5Hf9Ud8Ah8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2RkNGMwMmEtNWVlOC0z ZDAxLWJkZjEtY2I1YTVkNjhiMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS3VUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq4yxqJr7mRQCH9/ECJ9z0f5GqtseYBuIdWfGmxHsDXPaQFJXq/sxN7 FP8rBSy8LCafXrPglhcDVEuBriNyLZj03Y3+loUDLxt9TNsjqAglZYJz4umikCwA tRgJviz9Vpa2QLMEGkibKuSsVmsbouONS7Dm56qQGYZSHEmcI2CBFYNTM6TV3Zqt 3iqfTRnhfwrD4OfWgioJVU3ob0Zl7est66oWBjqgJrb9JN5Ubtmr9GLKJT5CAM1d S2NlPgoOW/BM0F1vxXGTckWBgCZcnHjrLnUGpq24BacnHZeM2AUHMJSVm/BmDlaU DdC1G1qhc7eqYech9sDlBOeBqhKPOLo= -----END CERTIFICATE-----Generated at Mon Apr 28 17:35:36 2025 by rpki-client