$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/30b18c3a-2211-37a5-942d-391130987f11.roa File: 30b18c3a-2211-37a5-942d-391130987f11.roa (raw, json) Hash identifier: rMU3nuRQymWq3sSoqYxpVm5NtdMYoMRwwcpYGqRn/AE= Subject key identifier: 07:0D:44:81:6E:24:BD:D9:B9:8F:3C:8A:EF:9B:82:CF:24:99:97:8F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A14099AE3104A78096D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/30b18c3a-2211-37a5-942d-391130987f11.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.77.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:14:09:9a:e3:10:4a:78:09:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=6590ddbc-632c-427d-9cc5-47ad09b8f791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:13:0f:0a:ae:5d:96:48:fe:99:54:45:ee: f5:13:a8:f0:5e:e7:2c:88:01:93:c9:14:5e:d0:79: ef:bf:a7:63:d1:de:0e:a4:43:f7:20:ac:3a:ae:6d: 82:71:9e:fb:dd:04:30:6c:7a:33:4f:1f:ff:92:29: 5b:e5:a6:70:43:62:7d:5a:79:f9:bd:f7:d1:5b:0a: 92:89:ea:29:3e:64:49:8b:13:06:23:88:bc:0c:07: cc:f9:8e:49:b2:09:8b:c7:f8:7d:c9:80:ed:c6:97: 11:eb:bd:1f:b5:f7:f0:ae:17:e4:2a:0a:68:39:f5: 23:7e:bb:bb:b0:30:d4:08:62:3d:36:81:85:55:15: b5:8e:38:fd:0a:ef:cc:99:6f:2c:7a:9d:f1:19:59: 3b:9e:f2:ad:7f:4a:05:04:da:b1:ae:26:22:61:4e: 3d:4d:21:d6:03:0c:10:71:b7:f7:dd:ce:03:67:e6: d8:71:02:28:ae:ac:1b:97:ea:d6:45:21:bf:84:e9: 66:c4:b5:49:ae:ec:bd:e5:97:39:a4:34:47:db:ae: a0:ab:b3:74:09:f0:f5:6d:c6:21:ec:82:83:23:7c: ff:49:0e:c9:7f:6d:b8:97:83:36:51:95:1b:9a:cf: f6:29:b4:58:20:38:8a:50:1f:52:d4:8c:47:ea:7a: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0D:44:81:6E:24:BD:D9:B9:8F:3C:8A:EF:9B:82:CF:24:99:97:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/30b18c3a-2211-37a5-942d-391130987f11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.77.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:5a:0b:dd:ea:31:bf:ad:c3:e1:33:52:84:6c:9d:77:91:7b: fb:28:06:cd:3f:7c:ed:45:11:ff:9c:95:7d:ee:74:10:a9:41: dc:d8:41:48:90:90:8e:5f:49:d3:52:d1:e4:cb:70:e6:61:58: fa:48:50:b4:b7:ae:55:fa:21:8b:e0:5d:e2:4a:bb:6e:39:d8: 75:29:2f:34:8a:87:54:87:48:e1:e7:c0:a0:25:19:5f:53:b6: 00:97:97:b1:96:b0:e5:88:d4:96:28:c3:0a:f4:44:bd:e5:cd: f3:7e:b4:f3:fb:47:d9:1c:92:19:c4:94:5d:89:7d:15:2f:54: 53:d0:6d:d1:e8:88:9c:69:a4:e0:df:35:ac:c2:8f:2f:d4:b8: f2:3a:7d:fd:d9:ae:9d:73:0a:62:5c:ad:c4:99:af:ca:11:90: 1b:79:42:fc:6a:3f:5d:e8:bc:59:78:66:c2:ea:d0:29:73:9a: db:73:bc:8d:2b:a2:a4:c6:ff:c7:ac:b8:42:a3:c4:0c:30:28: b9:71:4e:de:90:fa:3e:5c:83:4f:d9:14:12:4d:3e:32:ca:ca: 61:41:ff:57:90:5d:39:8c:e4:5c:b9:83:87:fe:35:c0:ab:72: 3f:89:22:a1:90:43:61:69:65:ba:24:ae:d8:8a:a9:98:31:40: aa:f9:d5:23 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxShQJmuMQSngJbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NjU5MGRkYmMtNjMyYy00MjdkLTljYzUtNDdhZDA5YjhmNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszQTDwquXZZI/plURe71E6jwXucsiAGTyRRe 0Hnvv6dj0d4OpEP3IKw6rm2CcZ773QQwbHozTx//kilb5aZwQ2J9Wnn5vffRWwqS ieopPmRJixMGI4i8DAfM+Y5JsgmLx/h9yYDtxpcR670ftffwrhfkKgpoOfUjfru7 sDDUCGI9NoGFVRW1jjj9Cu/MmW8sep3xGVk7nvKtf0oFBNqxriYiYU49TSHWAwwQ cbf33c4DZ+bYcQIorqwbl+rWRSG/hOlmxLVJruy95Zc5pDRH266gq7N0CfD1bcYh 7IKDI3z/SQ7Jf224l4M2UZUbms/2KbRYIDiKUB9S1IxH6no3SQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAcNRIFuJL3ZuY88iu+bgs8kmZePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzBiMThjM2EtMjIxMS0z N2E1LTk0MmQtMzkxMTMwOTg3ZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAS00wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAd1oL3eoxv63D4TNShGydd5F7+ygGzT987UUR/5yVfe50EKlB3NhBSJCQ jl9J01LR5Mtw5mFY+khQtLeuVfohi+Bd4kq7bjnYdSkvNIqHVIdI4efAoCUZX1O2 AJeXsZaw5YjUlijDCvREveXN83608/tH2RySGcSUXYl9FS9UU9Bt0eiInGmk4N81 rMKPL9S48jp9/dmunXMKYlytxJmvyhGQG3lC/Go/Xei8WXhmwurQKXOa23O8jSui pMb/x6y4QqPEDDAouXFO3pD6PlyDT9kUEk0+MsrKYUH/V5BdOYzkXLmDh/41wKty P4kioZBDYWlluiSu2IqpmDFAqvnVIw== -----END CERTIFICATE-----Generated at Sat May 10 22:01:19 2025 by rpki-client