$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52cccad2-b588-35a8-9455-17b92e317030.roa File: 52cccad2-b588-35a8-9455-17b92e317030.roa (raw, json) Hash identifier: n1kNfOgs6li9/3ceq01bBJqBIkpfsXHfcko7vLRC9Kc= Subject key identifier: 7F:07:63:4A:3E:31:0F:CB:1F:FA:03:DE:0B:9A:80:E1:2E:D1:D6:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA0A555028C202DA1D4B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52cccad2-b588-35a8-9455-17b92e317030.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.117.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0a:55:50:28:c2:02:da:1d:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=f74c445b-edd0-4670-ba8a-09dd8110a281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5d:8f:c8:9d:08:8f:4f:48:56:7b:de:b2:af: 72:7c:6e:3e:4e:ab:64:33:d5:93:25:e6:68:d1:28: 6a:a2:8e:08:84:d3:88:16:8e:b3:9f:02:5f:7e:58: 56:ea:2f:c0:f0:fd:17:13:6f:e7:af:46:66:e5:a8: 0c:3b:d9:3a:c0:1c:73:af:ea:d2:1f:83:e4:fd:31: a0:c8:18:a8:e4:7a:98:dd:8e:91:4e:9d:80:f4:fc: 17:7c:63:f1:39:48:fa:ce:f9:0c:78:71:85:c4:fe: d6:95:a5:14:a0:d8:83:dc:2a:95:82:3a:a2:25:82: 99:aa:5c:62:0a:58:c1:d0:34:7e:b0:84:37:66:bd: 8a:67:3b:47:20:9b:38:7e:47:cc:90:fa:75:ed:af: 09:17:2a:b7:52:69:d4:f4:ee:52:91:fb:81:5f:59: 72:7c:34:f7:d9:90:ae:af:7e:91:d4:c1:30:93:80: 07:ca:98:80:c0:fc:e2:e9:d9:ed:f8:42:a4:c7:78: a4:29:90:2b:64:eb:11:38:26:73:b5:fd:66:45:5c: 9f:21:10:38:9a:04:31:bf:9b:64:90:5c:7e:0c:63: 6c:91:e2:12:28:e3:2e:18:ea:fb:ba:b5:97:0c:bf: 61:58:7b:be:94:76:61:93:e1:bb:18:16:1a:bd:b7: 1c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:07:63:4A:3E:31:0F:CB:1F:FA:03:DE:0B:9A:80:E1:2E:D1:D6:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52cccad2-b588-35a8-9455-17b92e317030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3d:ca:4a:14:0d:ec:bd:33:02:ff:83:78:e7:3f:30:75:35: 5f:5f:94:4f:9b:d5:dc:58:56:0f:d2:67:27:32:1e:1f:36:59: cc:53:59:e6:f3:02:41:74:f9:f1:32:e4:1d:f1:84:56:f6:ef: 12:6f:d3:c1:bd:1d:c4:0f:35:8e:98:c6:71:25:34:95:1d:b7: 09:5c:f4:1d:87:a3:a0:2b:01:c2:ee:c4:f3:7e:e2:2e:94:7f: db:92:70:59:28:04:28:ae:e7:65:a7:48:d4:c2:9b:f5:ca:19: 14:24:6d:09:80:94:a1:94:ac:c5:7b:fa:97:ad:93:80:8a:66: bd:14:8d:ef:1e:42:7c:82:76:af:44:ac:f9:d3:d5:10:df:c2: 8c:72:03:18:5b:24:8d:25:76:a1:4f:a1:e3:ad:b9:1c:f9:d6: af:a5:bc:52:52:7f:aa:49:1b:9c:67:bf:62:c1:fb:cc:14:4d: 14:67:77:34:07:17:27:82:0c:75:77:53:b6:32:22:a1:af:b6: d0:e5:b0:7c:cd:0c:7f:5e:6b:67:fa:63:06:d5:38:3c:33:ec: 92:da:3d:ad:21:28:33:06:71:a6:30:4e:e3:33:11:a2:92:27: 2c:3f:81:fd:32:81:79:5c:1c:17:c9:ca:22:45:d6:f9:0d:40: 18:68:2d:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgpVUCjCAtodS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk Zjc0YzQ0NWItZWRkMC00NjcwLWJhOGEtMDlkZDgxMTBhMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF2PyJ0Ij09IVnvesq9yfG4+TqtkM9WTJeZo 0Shqoo4IhNOIFo6znwJfflhW6i/A8P0XE2/nr0Zm5agMO9k6wBxzr+rSH4Pk/TGg yBio5HqY3Y6RTp2A9PwXfGPxOUj6zvkMeHGFxP7WlaUUoNiD3CqVgjqiJYKZqlxi CljB0DR+sIQ3Zr2KZztHIJs4fkfMkPp17a8JFyq3UmnU9O5SkfuBX1lyfDT32ZCu r36R1MEwk4AHypiAwPzi6dnt+EKkx3ikKZArZOsROCZztf1mRVyfIRA4mgQxv5tk kFx+DGNskeISKOMuGOr7urWXDL9hWHu+lHZhk+G7GBYavbccsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8HY0o+MQ/LH/oD3guagOEu0dbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTJjY2NhZDItYjU4OC0z NWE4LTk0NTUtMTdiOTJlMzE3MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3UYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk9ykoUDey9MwL/g3jnPzB1NV9flE+b1dxYVg/SZycyHh82WcxTWebz AkF0+fEy5B3xhFb27xJv08G9HcQPNY6YxnElNJUdtwlc9B2Ho6ArAcLuxPN+4i6U f9uScFkoBCiu52WnSNTCm/XKGRQkbQmAlKGUrMV7+petk4CKZr0Uje8eQnyCdq9E rPnT1RDfwoxyAxhbJI0ldqFPoeOtuRz51q+lvFJSf6pJG5xnv2LB+8wUTRRndzQH FyeCDHV3U7YyIqGvttDlsHzNDH9ea2f6YwbVODwz7JLaPa0hKDMGcaYwTuMzEaKS Jyw/gf0ygXlcHBfJyiJF1vkNQBhoLYg= -----END CERTIFICATE-----Generated at Sun May 11 13:37:03 2025 by rpki-client