$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4e0f960-00e0-3a29-96a3-7da763bf1758.roa File: a4e0f960-00e0-3a29-96a3-7da763bf1758.roa (raw, json) Hash identifier: 8TYVsF0I8MdlYdNPqGq1XPwzVztkt9PUHxPu33tl2cU= Subject key identifier: 72:8D:EE:1D:8E:DE:A3:A5:C9:5B:C6:26:13:DD:D5:6B:FF:51:2C:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CC66845A0D36DA410B60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4e0f960-00e0-3a29-96a3-7da763bf1758.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 75.117.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cc:66:84:5a:0d:36:da:41:0b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=b0a7ba8f-9c00-46b8-9d24-6dc7fb884d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:2d:07:c3:14:8e:db:7d:94:c6:90:60:ff: 05:4c:29:49:be:ce:26:39:8b:7d:1a:6b:9c:e8:fb: 11:8f:44:f9:e8:2b:35:c3:6d:5a:18:f2:3c:86:79: 97:2a:51:a8:07:cb:89:b0:cd:5f:23:12:7a:e0:f0: 85:65:0f:99:c2:23:1c:9f:f1:d2:46:6c:b7:ed:27: 7f:cc:ff:9a:39:a9:64:4f:30:e4:48:de:1c:83:23: e5:c7:cd:9c:4e:24:10:97:06:99:b2:77:ce:69:7e: 64:ba:62:a7:07:d0:8b:7e:66:f3:12:cc:3f:32:8c: af:a2:b6:43:7d:c4:2a:b3:5a:99:fe:1b:db:c9:cc: 3d:fd:d1:f9:31:0b:c3:bb:52:86:6d:89:51:f7:5f: 57:53:34:7b:26:1e:e3:7c:b9:d9:23:0e:dd:9a:1f: 05:e5:f7:87:46:bb:ef:39:70:5e:00:28:6e:5b:90: 09:24:9a:02:6c:ef:6c:45:fa:a6:db:3f:d2:26:c1: f8:7f:6a:d5:dc:bd:62:a1:e9:bf:16:1c:0f:5c:73: db:6b:23:f7:fb:64:74:94:75:46:72:92:04:ea:d0: e7:71:cc:17:90:62:bf:ea:63:0b:a6:82:5d:43:be: 71:73:85:30:5c:f7:48:69:d5:34:93:61:97:30:ca: 7f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8D:EE:1D:8E:DE:A3:A5:C9:5B:C6:26:13:DD:D5:6B:FF:51:2C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4e0f960-00e0-3a29-96a3-7da763bf1758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:3c:19:49:3f:4d:4f:e6:88:95:9f:3a:0c:a5:b8:63:f7:a4: 62:68:78:cd:e7:84:90:93:c0:43:52:74:ec:d5:b7:9e:50:6d: 99:28:57:27:ac:8c:61:bc:19:62:43:8d:5d:3c:1f:ef:d8:b3: 46:d1:83:ba:fd:7d:90:7a:95:d7:6e:66:c0:84:b1:fe:c8:2c: 15:9c:e5:73:7f:20:1a:39:9c:2b:b4:50:7d:6a:49:94:d3:fa: 4a:69:12:f6:04:9a:05:0c:63:70:dd:d2:71:42:4c:d5:1b:57: dd:df:67:fa:86:db:d7:18:1e:98:09:41:ba:38:06:b8:dc:4d: c6:4b:64:ad:3d:ba:44:8c:29:cd:20:ed:b2:93:53:96:40:a4: a3:5e:5a:85:8c:1e:96:93:29:21:1a:e3:78:d7:59:d2:1d:7b: 64:b5:c6:55:63:ff:13:dd:2f:6f:3b:2a:11:94:ce:00:e0:5c: 83:ee:dc:b6:07:fa:5d:ec:63:d1:ef:61:3d:04:d7:6d:a3:59: 38:17:3d:6e:eb:62:8e:ec:58:71:2e:ef:c5:bb:17:19:be:a1: ea:fa:34:75:3f:79:f6:6e:61:a7:cf:58:94:3b:f4:a8:55:4d: 7e:5d:d2:81:ae:d6:74:35:2a:5a:b6:0c:81:9a:2c:1f:5d:e5: e2:71:87:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMxmhFoNNtpBC2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YjBhN2JhOGYtOWMwMC00NmI4LTlkMjQtNmRjN2ZiODg0ZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn0tB8MUjtt9lMaQYP8FTClJvs4mOYt9Gmuc 6PsRj0T56Cs1w21aGPI8hnmXKlGoB8uJsM1fIxJ64PCFZQ+ZwiMcn/HSRmy37Sd/ zP+aOalkTzDkSN4cgyPlx82cTiQQlwaZsnfOaX5kumKnB9CLfmbzEsw/MoyvorZD fcQqs1qZ/hvbycw9/dH5MQvDu1KGbYlR919XUzR7Jh7jfLnZIw7dmh8F5feHRrvv OXBeAChuW5AJJJoCbO9sRfqm2z/SJsH4f2rV3L1ioem/FhwPXHPbayP3+2R0lHVG cpIE6tDnccwXkGK/6mMLpoJdQ75xc4UwXPdIadU0k2GXMMp/sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKN7h2O3qOlyVvGJhPd1Wv/USwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTRlMGY5NjAtMDBlMC0z YTI5LTk2YTMtN2RhNzYzYmYxNzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS3WoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo8GUk/TU/miJWfOgyluGP3pGJoeM3nhJCTwENSdOzVt55QbZkoVyes jGG8GWJDjV08H+/Ys0bRg7r9fZB6ldduZsCEsf7ILBWc5XN/IBo5nCu0UH1qSZTT +kppEvYEmgUMY3Dd0nFCTNUbV93fZ/qG29cYHpgJQbo4BrjcTcZLZK09ukSMKc0g 7bKTU5ZApKNeWoWMHpaTKSEa43jXWdIde2S1xlVj/xPdL287KhGUzgDgXIPu3LYH +l3sY9HvYT0E122jWTgXPW7rYo7sWHEu78W7Fxm+oer6NHU/efZuYafPWJQ79KhV TX5d0oGu1nQ1Klq2DIGaLB9d5eJxh+0= -----END CERTIFICATE-----Generated at Thu Aug 7 04:00:38 2025 by rpki-client