$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4e0f960-00e0-3a29-96a3-7da763bf1758.roa File: a4e0f960-00e0-3a29-96a3-7da763bf1758.roa (raw, json) Hash identifier: XjuzC0M9KTglF3Q5h7IolnYHTbDxsxo+yiWp5PGlAPA= Subject key identifier: 2C:9F:9E:AB:20:26:1D:28:CB:C0:AB:7D:EC:79:F6:A0:9E:50:BA:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A147128A82793E6E8F540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4e0f960-00e0-3a29-96a3-7da763bf1758.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.117.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:14:71:28:a8:27:93:e6:e8:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=373a70a4-8b02-44e0-adb2-a739ec207f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d5:85:7d:c3:64:96:a1:22:e6:7f:29:e2:0d: 6d:5d:3f:ae:16:cc:04:b9:e6:83:84:65:f0:ee:75: a2:e6:3e:66:bf:a9:5c:de:1a:27:53:eb:c8:7a:11: 82:de:12:46:69:b5:b1:c5:1f:60:48:1f:1b:f6:d2: 73:26:7f:02:b4:be:ac:7b:09:ba:e3:b8:bc:15:7a: 20:89:20:11:29:de:ab:79:f6:98:56:ff:5a:e6:b6: 31:53:a6:14:8c:d5:2e:92:a1:a9:ec:55:9a:9c:fe: 96:20:68:38:08:1c:df:91:c0:2e:84:56:53:45:0f: af:5d:a8:0e:d0:f8:da:34:85:d2:d3:ae:2b:64:ba: 5a:8a:e5:3e:65:d6:53:b6:6b:f0:79:aa:49:17:d8: c8:a8:1d:0d:05:35:7c:5b:97:5a:1c:2a:8e:6d:3f: 53:4e:99:b1:f4:58:9d:5f:94:eb:1d:d9:02:00:00: 2d:9b:4f:0c:cd:47:54:d0:c9:0a:11:ba:c9:aa:52: 12:d8:9b:62:c6:67:a0:a6:75:41:17:fd:67:77:61: 18:df:8a:f1:6d:54:9e:a6:36:8d:2c:32:f6:3e:a6: a1:f1:0b:e1:ae:41:0d:28:de:b8:0d:8e:66:0f:5d: e5:d7:32:66:47:4e:38:10:05:24:1b:4d:2a:1e:2a: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9F:9E:AB:20:26:1D:28:CB:C0:AB:7D:EC:79:F6:A0:9E:50:BA:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4e0f960-00e0-3a29-96a3-7da763bf1758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e0:3b:c6:12:3d:36:b2:b4:6e:32:1e:01:f1:80:d7:1b:16: 1d:d8:7e:8d:ad:5d:24:bf:f5:b8:7f:ba:05:83:35:58:e5:d0: 50:ee:ef:ec:50:65:c5:79:af:37:75:0c:6d:38:fc:6b:9b:75: 20:40:3a:b4:31:96:21:6a:53:0d:c7:87:64:fc:cc:3e:a7:32: 3f:6e:3a:2a:b7:b7:7d:80:0f:11:e2:67:d4:d9:f6:7a:6d:be: d8:25:09:0e:7c:09:5a:69:83:1a:90:3c:42:76:18:6a:29:6f: fd:29:8c:ba:8b:28:1f:7e:a7:7c:f6:d4:a6:fd:47:37:28:2c: 36:0c:db:e0:67:40:85:4f:e4:8f:5b:cb:af:ce:aa:d0:ea:98: 3e:fc:ea:0b:25:b5:88:f6:b0:aa:2d:83:c9:36:64:82:d1:96: 75:59:44:be:4a:59:b8:10:07:de:6d:79:cd:65:7c:96:ba:51: 87:39:5b:b4:d6:ec:f4:eb:68:95:4c:ac:e0:77:78:b9:f7:6f: a7:26:0c:15:5b:63:20:7d:33:b7:d3:22:ad:b7:19:cf:77:10: 96:dd:a0:d8:e5:31:fb:ec:e6:c3:93:42:dc:a1:5a:2a:4c:b9: 1b:b7:ee:b3:82:e1:4f:23:68:9c:06:87:44:92:80:d7:9f:fb: 7a:82:05:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShRxKKgnk+bo9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzczYTcwYTQtOGIwMi00NGUwLWFkYjItYTczOWVjMjA3ZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtWFfcNklqEi5n8p4g1tXT+uFswEueaDhGXw 7nWi5j5mv6lc3honU+vIehGC3hJGabWxxR9gSB8b9tJzJn8CtL6sewm647i8FXog iSARKd6refaYVv9a5rYxU6YUjNUukqGp7FWanP6WIGg4CBzfkcAuhFZTRQ+vXagO 0PjaNIXS064rZLpaiuU+ZdZTtmvweapJF9jIqB0NBTV8W5daHCqObT9TTpmx9Fid X5TrHdkCAAAtm08MzUdU0MkKEbrJqlIS2JtixmegpnVBF/1nd2EY34rxbVSepjaN LDL2Pqah8QvhrkENKN64DY5mD13l1zJmR044EAUkG00qHirOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyfnqsgJh0oy8Crfex59qCeULpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTRlMGY5NjAtMDBlMC0z YTI5LTk2YTMtN2RhNzYzYmYxNzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS3WoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjgO8YSPTaytG4yHgHxgNcbFh3Yfo2tXSS/9bh/ugWDNVjl0FDu7+xQ ZcV5rzd1DG04/GubdSBAOrQxliFqUw3Hh2T8zD6nMj9uOiq3t32ADxHiZ9TZ9npt vtglCQ58CVppgxqQPEJ2GGopb/0pjLqLKB9+p3z21Kb9RzcoLDYM2+BnQIVP5I9b y6/OqtDqmD786gsltYj2sKotg8k2ZILRlnVZRL5KWbgQB95tec1lfJa6UYc5W7TW 7PTraJVMrOB3eLn3b6cmDBVbYyB9M7fTIq23Gc93EJbdoNjlMfvs5sOTQtyhWipM uRu37rOC4U8jaJwGh0SSgNef+3qCBQU= -----END CERTIFICATE-----Generated at Mon Jun 16 09:25:17 2025 by rpki-client