$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36f45a7f-69aa-3a86-8d48-42ae1d9b3e22.roa File: 36f45a7f-69aa-3a86-8d48-42ae1d9b3e22.roa (raw, json) Hash identifier: ZavYfsePPy47Dpik4J8HgfHXUnG5NBMTn/nYK0w8meE= Subject key identifier: 66:E5:CD:84:9D:FD:21:FF:78:BE:A6:41:2A:16:2E:85:83:6A:75:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A3C8527CAF81BC84342B23F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36f45a7f-69aa-3a86-8d48-42ae1d9b3e22.roa Signing time: Wed 18 Jun 2025 21:57:33 +0000 ROA not before: Wed 18 Jun 2025 21:57:33 +0000 ROA not after: Tue 16 Sep 2025 21:57:33 +0000 asID: 134990 IP address blocks: 75.119.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:85:27:ca:f8:1b:c8:43:42:b2:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 18 21:57:33 2025 GMT Not After : Sep 16 21:57:33 2025 GMT Subject: CN=78e83062-ea1b-4e47-9e71-9e36cbb8a8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:51:eb:9b:ef:32:27:33:5a:c7:10:36:55: c8:9d:35:97:11:05:9c:c2:eb:e6:a3:83:ff:39:8d: 00:97:b2:18:21:42:76:63:c5:d1:18:c5:17:34:67: 16:63:53:c2:84:63:3f:62:b2:a4:be:71:73:41:82: b0:58:26:e8:9b:fa:57:e4:a9:ff:73:8a:46:69:99: b6:a5:e4:6f:7e:8a:b1:0b:9b:79:c6:e1:76:f0:fe: bf:1f:5a:8b:ea:1d:92:28:8a:32:66:3a:ba:6e:d4: ec:6e:0d:db:c1:a6:58:8d:7e:26:df:7e:36:e1:fd: 24:f5:7d:56:8d:a8:1d:c1:17:40:5a:c2:08:63:f6: 2d:a3:c8:e2:af:10:64:cc:a0:4d:b2:e1:c7:e1:4f: d6:61:09:2a:27:99:44:f5:db:6e:7a:28:aa:cc:3c: 0d:6b:36:a5:f2:53:a0:b7:62:db:33:93:2f:f9:dd: 0e:68:45:80:b4:1a:2b:e0:ce:55:77:e8:44:b4:aa: a4:45:d7:98:1d:29:45:14:6b:6b:39:7f:57:aa:d0: 53:d1:d3:1f:5e:ad:5a:3c:a0:a1:1a:5f:9e:cb:6f: 54:31:91:31:57:b0:9a:ea:99:08:b2:b7:04:24:32: d9:20:be:24:ae:18:45:e3:27:46:df:b1:24:f0:3a: f1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E5:CD:84:9D:FD:21:FF:78:BE:A6:41:2A:16:2E:85:83:6A:75:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36f45a7f-69aa-3a86-8d48-42ae1d9b3e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.119.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:37:8d:3e:f0:bd:7e:49:92:62:85:ef:0b:dd:b6:8a:ae:4f: a5:4c:d9:a6:49:59:06:c2:ba:7d:c2:53:75:2f:e8:a6:6c:9c: ce:54:94:d2:ad:36:2f:71:ca:72:b4:88:75:ee:70:60:40:0c: e1:24:59:1f:ab:a7:4a:65:de:e8:09:67:ec:0c:10:a4:b6:3f: cc:0c:ca:50:db:de:c7:cb:9d:7d:dc:67:33:59:c5:98:43:02: be:cf:c4:b6:c8:73:c9:39:c0:e0:e8:21:64:65:45:71:8a:78: 45:70:1b:5a:69:ae:b7:28:96:52:46:2e:b5:5c:fd:67:e1:6c: 85:04:6d:ca:52:24:d4:39:0e:7a:f2:dd:13:21:79:02:b8:bc: 9e:28:d5:95:ae:c6:8b:56:a7:bd:c9:c6:83:99:ca:8a:d7:71: ba:83:90:4f:f2:88:32:96:73:84:ce:14:8f:e4:f4:0b:c6:10: 6d:03:35:52:90:2d:72:53:7a:8c:95:84:d3:08:49:90:7a:ea: da:8b:06:02:7f:14:74:40:1e:be:34:63:47:6c:c9:7d:70:f0: 37:a1:c3:6c:1b:19:c7:59:04:9b:64:a4:df:61:eb:04:9e:8f: ec:2f:49:eb:af:1d:5c:44:59:31:d0:90:a4:38:72:81:e3:00: f9:f4:29:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8hSfK+BvIQ0KyPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxODIxNTczM1oXDTI1MDkxNjIxNTczM1owLzEtMCsGA1UEAxMk NzhlODMwNjItZWExYi00ZTQ3LTllNzEtOWUzNmNiYjhhOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBRR65vvMiczWscQNlXInTWXEQWcwuvmo4P/ OY0Al7IYIUJ2Y8XRGMUXNGcWY1PChGM/YrKkvnFzQYKwWCbom/pX5Kn/c4pGaZm2 peRvfoqxC5t5xuF28P6/H1qL6h2SKIoyZjq6btTsbg3bwaZYjX4m33424f0k9X1W jagdwRdAWsIIY/Yto8jirxBkzKBNsuHH4U/WYQkqJ5lE9dtueiiqzDwNazal8lOg t2LbM5Mv+d0OaEWAtBor4M5Vd+hEtKqkRdeYHSlFFGtrOX9XqtBT0dMfXq1aPKCh Gl+ey29UMZExV7Ca6pkIsrcEJDLZIL4krhhF4ydG37Ek8DrxzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGblzYSd/SH/eL6mQSoWLoWDanXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzZmNDVhN2YtNjlhYS0z YTg2LThkNDgtNDJhZTFkOWIzZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHS3cAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA3jT7wvX5JkmKF7wvdtoquT6VM2aZJWQbCun3CU3Uv6KZsnM5UlNKt Ni9xynK0iHXucGBADOEkWR+rp0pl3ugJZ+wMEKS2P8wMylDb3sfLnX3cZzNZxZhD Ar7PxLbIc8k5wODoIWRlRXGKeEVwG1pprrcollJGLrVc/WfhbIUEbcpSJNQ5Dnry 3RMheQK4vJ4o1ZWuxotWp73JxoOZyorXcbqDkE/yiDKWc4TOFI/k9AvGEG0DNVKQ LXJTeoyVhNMISZB66tqLBgJ/FHRAHr40Y0dsyX1w8Dehw2wbGcdZBJtkpN9h6wSe j+wvSeuvHVxEWTHQkKQ4coHjAPn0KUY= -----END CERTIFICATE-----Generated at Tue Jul 1 00:57:09 2025 by rpki-client