$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ce120f4-61cb-3c05-9a54-660a6e9561a6.roa File: 0ce120f4-61cb-3c05-9a54-660a6e9561a6.roa (raw, json) Hash identifier: 8PL8XFMWB8e4FuC+KFbKHxvCeSGGQ/GkmSC4NweuBvQ= Subject key identifier: 1F:AD:5A:C7:3D:B8:01:F4:B9:1B:94:B2:BF:42:01:17:BB:DF:A3:C3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA0C40FE4C51E2AC10A8A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ce120f4-61cb-3c05-9a54-660a6e9561a6.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.117.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0c:40:fe:4c:51:e2:ac:10:a8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=a560247b-9829-4f40-a490-0a911ea62cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:32:2e:f1:b2:d8:34:2d:ee:07:94:c8:fd: b6:29:dc:11:0a:a9:68:3f:78:d5:32:52:32:50:09: db:8e:43:83:70:c9:42:52:73:b8:d1:e1:8a:dc:76: dc:f5:4e:ef:1c:65:fe:5b:8d:5d:95:5e:ff:f1:54: 01:05:c2:e6:bf:01:ea:31:ad:e6:3a:ce:d2:fd:95: b9:97:05:ae:bd:cb:51:b9:50:ab:af:42:4a:ef:39: a2:26:ae:34:6c:65:f4:6f:f3:3b:6c:88:88:78:5c: 53:0e:81:0a:68:19:63:17:d2:55:f7:fc:1b:87:33: 18:ee:84:f4:91:f5:a1:00:1f:df:68:4a:cb:08:49: 99:a7:42:fc:d9:37:b5:67:f7:6f:76:63:ad:10:8b: 64:16:90:e2:2b:c4:58:6e:bd:88:a6:d9:1e:80:02: 6a:c7:9a:ff:46:8c:71:a8:5c:d1:cf:4d:14:81:fc: 34:a8:25:33:57:6c:ec:bb:94:bb:d0:84:b6:76:a2: 17:22:a6:86:a3:20:be:d6:d1:9e:0f:b2:8d:b4:43: e7:69:90:b2:f0:08:eb:6b:b2:b9:6b:be:ac:f9:53: fd:e5:e9:55:61:90:af:52:66:f6:2c:ef:66:46:cf: 95:bd:90:39:95:6f:d7:c5:d8:eb:d6:a5:df:62:b2: 04:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AD:5A:C7:3D:B8:01:F4:B9:1B:94:B2:BF:42:01:17:BB:DF:A3:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ce120f4-61cb-3c05-9a54-660a6e9561a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:11:29:4d:79:ac:1c:b5:07:53:9f:a0:b2:8b:0f:cb:2b:58: 07:bf:61:d2:20:02:bc:24:6c:ba:96:97:50:b9:5e:d2:cf:e7: f0:c0:5c:64:fa:a9:0b:88:45:33:18:f8:1e:41:1a:13:45:f9: 5f:81:bd:de:48:65:98:c2:35:7f:1d:ab:03:48:42:0c:f8:19: 7a:5a:3c:eb:64:bd:80:5f:ec:54:f6:dd:8d:da:70:7b:44:0e: 6d:3d:a6:37:8b:48:b6:b6:8e:8c:64:10:b8:f0:8a:fa:00:e7: f6:7e:6f:57:1b:06:59:2e:5f:82:dd:53:35:ce:db:df:37:ae: 71:4b:72:47:9d:fe:2d:a7:2b:6a:ac:18:f6:76:4f:d1:d4:68: 12:5b:5c:16:92:46:3a:96:63:7a:7a:c9:02:1d:bb:bc:3c:b8: fb:11:a3:46:05:dd:7c:e8:ca:e6:ab:57:18:4e:09:75:f1:ff: 15:1c:88:37:08:de:f9:4c:8b:06:33:23:e4:d6:cd:02:70:df: 6d:f4:0d:2f:a6:8f:1c:ed:67:3a:66:1e:14:b6:3f:35:4b:f4: b8:94:f7:80:c1:42:28:94:54:72:a8:28:08:d5:22:00:07:9f: 94:67:6c:08:50:e3:f6:e0:ce:43:1f:bf:ae:c3:c9:6c:3e:8c: f3:07:8f:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgxA/kxR4qwQqKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk YTU2MDI0N2ItOTgyOS00ZjQwLWE0OTAtMGE5MTFlYTYyY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvygyLvGy2DQt7geUyP22KdwRCqloP3jVMlIy UAnbjkODcMlCUnO40eGK3Hbc9U7vHGX+W41dlV7/8VQBBcLmvwHqMa3mOs7S/ZW5 lwWuvctRuVCrr0JK7zmiJq40bGX0b/M7bIiIeFxTDoEKaBljF9JV9/wbhzMY7oT0 kfWhAB/faErLCEmZp0L82Te1Z/dvdmOtEItkFpDiK8RYbr2IptkegAJqx5r/Roxx qFzRz00Ugfw0qCUzV2zsu5S70IS2dqIXIqaGoyC+1tGeD7KNtEPnaZCy8Ajra7K5 a76s+VP95elVYZCvUmb2LO9mRs+VvZA5lW/Xxdjr1qXfYrIEMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+tWsc9uAH0uRuUsr9CARe736PDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGNlMTIwZjQtNjFjYi0z YzA1LTlhNTQtNjYwYTZlOTU2MWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3VIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4RKU15rBy1B1OfoLKLD8srWAe/YdIgArwkbLqWl1C5XtLP5/DAXGT6 qQuIRTMY+B5BGhNF+V+Bvd5IZZjCNX8dqwNIQgz4GXpaPOtkvYBf7FT23Y3acHtE Dm09pjeLSLa2joxkELjwivoA5/Z+b1cbBlkuX4LdUzXO2983rnFLcked/i2nK2qs GPZ2T9HUaBJbXBaSRjqWY3p6yQIdu7w8uPsRo0YF3XzoyuarVxhOCXXx/xUciDcI 3vlMiwYzI+TWzQJw3230DS+mjxztZzpmHhS2PzVL9LiU94DBQiiUVHKoKAjVIgAH n5RnbAhQ4/bgzkMfv67DyWw+jPMHjw0= -----END CERTIFICATE-----Generated at Sat May 10 21:53:26 2025 by rpki-client