$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d99a7803-6985-3933-9ff5-a5ce01a6780f.roa File: d99a7803-6985-3933-9ff5-a5ce01a6780f.roa (raw, json) Hash identifier: /qXOEgJ0N555FdYCDGOj3vL8jh4PgFZIjjao1VrvXv0= Subject key identifier: DB:B6:84:09:B0:22:E3:38:C0:5C:31:F6:03:A2:41:BE:D4:9E:F2:B0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716329903D74779BC8DDA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d99a7803-6985-3933-9ff5-a5ce01a6780f.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.117.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:63:29:90:3d:74:77:9b:c8:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=a0f6fb05-7657-48dd-951b-61e236f04bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:46:f0:8a:d9:32:60:ea:fd:97:2d:9d:59:f6: 75:aa:dc:7a:0e:8f:d0:f3:51:3a:90:c2:d9:21:20: 8d:e5:f7:31:5c:82:84:36:31:70:e9:60:1d:83:40: 29:27:a4:df:8c:c3:b9:75:1d:58:09:ed:4c:cd:72: 5c:cc:bb:ea:20:3e:80:fb:79:d2:a7:ed:f6:11:8c: b4:32:8f:5e:0b:43:55:c0:82:3a:1c:64:1b:ff:a1: 8b:b6:d5:a0:7d:29:5a:a8:29:35:a9:23:27:e5:b0: 85:df:21:c1:3b:3d:f7:cf:d4:ff:78:d8:63:39:c1: c4:fa:95:4e:62:7c:af:fd:4e:76:83:fd:5c:36:5b: 3c:0c:06:cd:64:0b:d3:30:23:95:d2:0b:15:bd:11: e7:ce:04:37:63:ce:72:f9:b5:e0:87:cc:a0:f4:ff: 89:9f:1e:08:e9:1b:24:65:fd:e4:d7:8a:b0:26:8c: 6f:61:64:35:ce:de:94:4d:88:1a:6e:4b:2b:96:41: ed:aa:63:d6:a2:77:03:bf:6a:a2:52:4b:c6:d0:ab: 38:67:3a:bd:47:28:88:5e:93:d7:dd:0b:10:47:09: 18:f4:79:2e:18:ac:b9:a7:d8:a7:a0:15:bd:6a:69: 16:e0:70:d5:4c:c2:bb:9b:2c:6f:97:19:0e:1d:a0: 06:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B6:84:09:B0:22:E3:38:C0:5C:31:F6:03:A2:41:BE:D4:9E:F2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d99a7803-6985-3933-9ff5-a5ce01a6780f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0a:1e:f9:30:0f:96:5f:f6:e2:f2:5e:4e:f4:fd:00:3f:ff: 6e:be:7a:3c:fd:50:5a:62:ba:d3:ba:12:c3:d6:92:f1:6f:e6: 20:3c:ed:62:b9:c3:15:e4:a2:d5:cc:c1:b0:39:33:f1:ab:a5: 73:6c:33:3e:b9:e4:76:65:1f:2c:e5:06:95:9a:fc:c8:a9:5b: 3a:0e:c8:07:74:14:0e:ae:13:69:2a:6a:56:cb:17:25:a9:21: 28:04:5f:58:13:04:f3:6f:ad:b9:a7:ed:4d:82:9a:55:2c:94: 8a:e2:06:76:bf:fb:5e:15:7d:44:93:5a:9d:a4:29:40:2d:d3: f4:27:9f:41:53:52:62:2a:1a:6f:7c:ea:66:b4:94:fb:9e:e8: 73:52:ba:d1:43:86:c3:cf:5b:e7:56:a9:e2:78:e9:05:1c:a2: 5a:8f:fc:32:ba:a1:a8:1d:f8:e5:3b:6a:52:94:50:9c:94:72: 78:ed:51:b6:c6:ec:5c:07:17:20:f1:ff:96:02:11:7c:8a:8c: 86:6f:6f:af:73:38:c5:f8:8d:e0:45:ea:73:8b:fa:11:86:a7: cd:9a:ec:d8:48:b1:cc:1d:7f:19:b7:8d:40:ee:0d:ba:0c:65: df:2f:2e:c3:93:3e:73:78:d8:a0:b9:a1:ee:1d:6b:9f:b4:1f: 13:05:6b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWMpkD10d5vI3aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YTBmNmZiMDUtNzY1Ny00OGRkLTk1MWItNjFlMjM2ZjA0YmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0bwitkyYOr9ly2dWfZ1qtx6Do/Q81E6kMLZ ISCN5fcxXIKENjFw6WAdg0ApJ6TfjMO5dR1YCe1MzXJczLvqID6A+3nSp+32EYy0 Mo9eC0NVwII6HGQb/6GLttWgfSlaqCk1qSMn5bCF3yHBOz33z9T/eNhjOcHE+pVO Ynyv/U52g/1cNls8DAbNZAvTMCOV0gsVvRHnzgQ3Y85y+bXgh8yg9P+Jnx4I6Rsk Zf3k14qwJoxvYWQ1zt6UTYgabksrlkHtqmPWoncDv2qiUkvG0Ks4Zzq9RyiIXpPX 3QsQRwkY9HkuGKy5p9inoBW9amkW4HDVTMK7myxvlxkOHaAGlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu2hAmwIuM4wFwx9gOiQb7UnvKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDk5YTc4MDMtNjk4NS0z OTMzLTlmZjUtYTVjZTAxYTY3ODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS3WCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkKHvkwD5Zf9uLyXk70/QA//26+ejz9UFpiutO6EsPWkvFv5iA87WK5 wxXkotXMwbA5M/GrpXNsMz655HZlHyzlBpWa/MipWzoOyAd0FA6uE2kqalbLFyWp ISgEX1gTBPNvrbmn7U2CmlUslIriBna/+14VfUSTWp2kKUAt0/Qnn0FTUmIqGm98 6ma0lPue6HNSutFDhsPPW+dWqeJ46QUcolqP/DK6oagd+OU7alKUUJyUcnjtUbbG 7FwHFyDx/5YCEXyKjIZvb69zOMX4jeBF6nOL+hGGp82a7NhIscwdfxm3jUDuDboM Zd8vLsOTPnN42KC5oe4da5+0HxMFaw4= -----END CERTIFICATE-----Generated at Sun Apr 27 10:42:08 2025 by rpki-client