$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4bee0d7-9bd7-333d-a5bf-f6b1c64c2e43.roa File: d4bee0d7-9bd7-333d-a5bf-f6b1c64c2e43.roa (raw, json) Hash identifier: In/itulSPmC2Z/oHgOOQoGrrMJJC1c8wpdjb73kYwKU= Subject key identifier: 31:42:F1:55:AA:29:B2:20:07:7F:88:20:4A:88:97:1E:2E:D8:87:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA8B1646D9C594AC0E0C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4bee0d7-9bd7-333d-a5bf-f6b1c64c2e43.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 75.117.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:8b:16:46:d9:c5:94:ac:0e:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=11843e3a-bbfd-46eb-bdae-60adc2eb2be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fe:8b:cb:61:ca:57:92:ea:f6:f6:2e:e8:57: c4:9f:ed:d9:de:bb:65:9c:84:90:0e:8e:a0:78:8f: 8d:d9:41:91:fc:54:be:9a:3a:15:76:38:4c:03:e6: 70:f6:27:ff:4d:8e:35:25:b9:64:44:e3:c6:a3:03: ab:26:ff:a1:3f:60:df:67:4f:80:ac:b0:48:a6:91: a4:7b:c6:83:64:48:59:66:c1:34:78:9b:f3:2a:94: ba:63:10:87:07:83:bb:45:de:79:0e:47:40:11:0f: 8c:a3:07:2e:8e:f6:6e:81:6c:b6:b6:b3:fc:b8:d9: 9e:9a:d8:1a:61:05:e6:5c:12:11:d6:d5:d2:92:77: 25:cc:dd:4f:24:ad:30:c6:e2:3d:a0:a3:ed:ca:83: f3:2e:c4:48:a5:cc:18:ee:11:d5:f9:2f:b7:3b:a1: fe:17:78:6e:fd:d9:fc:f2:69:33:2c:30:1b:0e:84: 7c:d7:d3:6e:eb:8a:63:05:d2:f4:31:ce:cb:d0:f2: 40:96:95:3a:80:9e:12:7b:5c:c5:09:16:69:1a:7f: 59:fc:27:2d:5e:34:26:7b:f4:46:06:67:0c:be:7d: f2:67:50:c1:81:05:05:68:3b:b8:55:2a:7a:67:79: 81:f7:3a:aa:34:c2:04:67:a7:70:e3:c7:74:fd:69: e4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:42:F1:55:AA:29:B2:20:07:7F:88:20:4A:88:97:1E:2E:D8:87:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4bee0d7-9bd7-333d-a5bf-f6b1c64c2e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ef:0d:a1:f7:a5:e2:dd:a0:84:a7:43:24:8c:9d:3c:0b:c3: 3f:93:06:b0:30:a5:b8:50:1d:88:05:c0:47:f4:6c:57:cb:ff: ba:f4:ab:ed:92:2c:21:95:a0:2a:07:4b:66:6a:c1:14:cf:3c: e2:f3:e9:19:17:05:8f:e8:6e:18:7f:38:8e:87:28:9d:3a:18: 74:9f:03:45:1a:1d:3e:4a:5c:38:93:a9:9d:e7:f4:4c:bf:1b: 77:0b:2e:54:9f:9d:75:9b:97:33:1f:dd:a9:a9:de:00:c3:02: f1:5a:c8:f0:ba:20:58:f9:51:ae:db:3e:cc:49:68:df:dd:89: 4e:aa:bf:02:88:8a:ea:a0:ad:d0:3f:07:0e:b1:15:c3:c7:de: de:bc:62:4c:e8:d6:cf:93:30:6b:95:c9:6a:f8:00:24:41:ce: da:ad:5f:33:4c:fe:37:4a:97:0a:90:e7:16:0b:e3:21:1e:c4: 84:e1:58:a3:3d:64:24:26:57:ff:7d:c6:e6:f4:10:88:3a:0d: 16:e1:5f:a3:85:2f:71:75:32:44:fa:c9:0e:08:df:4f:5a:ad: 9a:30:7f:f5:a5:c4:0a:ea:89:a0:8f:b3:02:24:a9:73:86:d9: f5:69:95:03:ed:ff:8a:a0:6c:45:6f:21:93:a3:18:74:b7:8f: 2a:b6:f4:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qosWRtnFlKwODIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MTE4NDNlM2EtYmJmZC00NmViLWJkYWUtNjBhZGMyZWIyYmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf6Ly2HKV5Lq9vYu6FfEn+3Z3rtlnISQDo6g eI+N2UGR/FS+mjoVdjhMA+Zw9if/TY41JblkROPGowOrJv+hP2DfZ0+ArLBIppGk e8aDZEhZZsE0eJvzKpS6YxCHB4O7Rd55DkdAEQ+MowcujvZugWy2trP8uNmemtga YQXmXBIR1tXSknclzN1PJK0wxuI9oKPtyoPzLsRIpcwY7hHV+S+3O6H+F3hu/dn8 8mkzLDAbDoR819Nu64pjBdL0Mc7L0PJAlpU6gJ4Se1zFCRZpGn9Z/CctXjQme/RG BmcMvn3yZ1DBgQUFaDu4VSp6Z3mB9zqqNMIEZ6dw48d0/WnkIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFC8VWqKbIgB3+IIEqIlx4u2IcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRiZWUwZDctOWJkNy0z MzNkLWE1YmYtZjZiMWM2NGMyZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS3WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfvDaH3peLdoISnQySMnTwLwz+TBrAwpbhQHYgFwEf0bFfL/7r0q+2S LCGVoCoHS2ZqwRTPPOLz6RkXBY/obhh/OI6HKJ06GHSfA0UaHT5KXDiTqZ3n9Ey/ G3cLLlSfnXWblzMf3amp3gDDAvFayPC6IFj5Ua7bPsxJaN/diU6qvwKIiuqgrdA/ Bw6xFcPH3t68Ykzo1s+TMGuVyWr4ACRBztqtXzNM/jdKlwqQ5xYL4yEexIThWKM9 ZCQmV/99xub0EIg6DRbhX6OFL3F1MkT6yQ4I309arZowf/WlxArqiaCPswIkqXOG 2fVplQPt/4qgbEVvIZOjGHS3jyq29JA= -----END CERTIFICATE-----Generated at Sun Jun 15 19:59:25 2025 by rpki-client