$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/513f8577-4c6d-385b-b5fd-f9a670e9a96a.roa File: 513f8577-4c6d-385b-b5fd-f9a670e9a96a.roa (raw, json) Hash identifier: s4nW8JVybQCEr4WD9PSb7z3jh/RgDWttPjRWFXlNikw= Subject key identifier: 6A:9F:FF:66:2C:E7:CD:26:9F:85:88:CD:53:1A:8D:0C:BD:B5:4B:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AE7F3FF10F52357D48F85640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/513f8577-4c6d-385b-b5fd-f9a670e9a96a.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.117.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:3f:f1:0f:52:35:7d:48:f8:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=3f6016dd-4732-45c9-a53d-6a0b0e2a48c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:31:9b:8e:17:b1:70:9a:78:54:b1:74:e0: 25:db:98:7d:b5:43:15:3d:ae:4b:78:4b:63:a2:1c: 2f:5b:10:5a:03:18:c9:f2:b3:1b:ff:be:7c:8a:79: 84:23:38:63:cd:1e:23:b3:7b:12:df:f2:1f:3d:6d: 65:65:9f:7f:ef:fc:d3:07:81:44:e7:3e:80:2c:c0: 73:34:06:50:c9:a7:37:8b:12:60:69:fc:c1:1e:0a: 5d:5c:0e:33:58:20:0a:af:0b:00:58:9f:be:1d:2e: ba:a4:c1:df:cd:dc:e5:a2:56:e5:2e:9d:55:dc:f3: f7:ed:1d:31:5f:b6:c0:a3:9c:a5:f0:4b:78:c3:21: bb:93:63:1a:a0:2f:77:0d:a3:c8:95:53:b1:b8:69: d8:d4:2c:3f:37:49:76:d7:c7:af:2b:27:10:1f:4c: e8:d3:5f:a3:53:40:87:e4:df:d7:1e:1b:75:04:f8: 37:d3:90:27:24:9b:25:34:83:2e:2c:ec:8d:88:25: 23:95:39:d6:db:99:25:21:be:a3:80:fa:c7:98:28: d9:7b:64:12:82:60:d7:f4:96:33:ed:5d:ba:72:fe: 1b:b7:6e:ef:d7:68:d2:37:eb:07:6e:c9:e2:2e:a4: 9a:19:29:1b:31:e2:17:da:1c:32:ba:68:06:27:53: d4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9F:FF:66:2C:E7:CD:26:9F:85:88:CD:53:1A:8D:0C:BD:B5:4B:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/513f8577-4c6d-385b-b5fd-f9a670e9a96a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ae:cf:df:77:9a:ba:44:a3:63:07:9e:29:cc:ec:c2:cf:22: 26:77:a4:76:7e:3d:6a:ac:74:1a:0a:6e:40:6a:9f:85:dc:d4: 66:3d:68:fa:ef:9e:1b:ea:ec:c6:09:89:c9:f1:a8:49:ad:cd: 32:eb:f0:1f:e0:8e:2d:e8:39:4d:68:35:e5:d9:fb:89:65:8d: 5a:9d:8f:20:51:38:93:a7:fc:a7:da:66:d1:b5:0e:e7:b2:84: 23:92:13:14:06:af:cc:3c:bd:35:6b:6a:b7:9c:29:4f:50:74: 9a:4f:47:da:9f:31:55:ff:7a:56:ee:08:29:b2:27:db:95:06: 79:e9:8d:b9:2b:d7:b3:d3:1a:7d:b0:38:32:dc:85:6e:bb:f9: 27:ad:d9:c5:22:a7:11:21:9e:2c:50:b1:e0:ba:08:39:78:b4: 7d:9d:06:fe:a4:7e:13:8d:dc:c1:89:c7:4c:19:29:06:a3:bc: 1b:d5:1e:7d:0f:d6:46:8b:09:70:dd:b8:3c:1f:42:ea:3b:37: 2c:05:76:8e:2b:11:52:45:26:35:55:e9:5e:f8:93:97:25:87: f2:44:8c:56:aa:85:36:aa:24:86:52:ff:32:50:d9:41:db:25: bb:05:71:33:b2:0f:1e:ea:4e:1c:07:8d:3f:04:1e:20:6f:14: a2:9e:df:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmufz/xD1I1fUj4VkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk M2Y2MDE2ZGQtNDczMi00NWM5LWE1M2QtNmEwYjBlMmE0OGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvocxm44XsXCaeFSxdOAl25h9tUMVPa5LeEtj ohwvWxBaAxjJ8rMb/758inmEIzhjzR4js3sS3/IfPW1lZZ9/7/zTB4FE5z6ALMBz NAZQyac3ixJgafzBHgpdXA4zWCAKrwsAWJ++HS66pMHfzdzlolblLp1V3PP37R0x X7bAo5yl8Et4wyG7k2MaoC93DaPIlVOxuGnY1Cw/N0l218evKycQH0zo01+jU0CH 5N/XHht1BPg305AnJJslNIMuLOyNiCUjlTnW25klIb6jgPrHmCjZe2QSgmDX9JYz 7V26cv4bt27v12jSN+sHbsniLqSaGSkbMeIX2hwyumgGJ1PUywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqf/2Ys580mn4WIzVMajQy9tUvNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTEzZjg1NzctNGM2ZC0z ODViLWI1ZmQtZjlhNjcwZTlhOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3V2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCuz993mrpEo2MHninM7MLPIiZ3pHZ+PWqsdBoKbkBqn4Xc1GY9aPrv nhvq7MYJicnxqEmtzTLr8B/gji3oOU1oNeXZ+4lljVqdjyBROJOn/KfaZtG1Duey hCOSExQGr8w8vTVrarecKU9QdJpPR9qfMVX/elbuCCmyJ9uVBnnpjbkr17PTGn2w ODLchW67+Set2cUipxEhnixQseC6CDl4tH2dBv6kfhON3MGJx0wZKQajvBvVHn0P 1kaLCXDduDwfQuo7NywFdo4rEVJFJjVV6V74k5clh/JEjFaqhTaqJIZS/zJQ2UHb JbsFcTOyDx7qThwHjT8EHiBvFKKe3+s= -----END CERTIFICATE-----Generated at Sat May 10 19:10:24 2025 by rpki-client