$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa File: 75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa (raw, json) Hash identifier: hWF9p6tP0/hWbgjZ7e7DNpTvwZ4huwZiAN2zjifrElk= Subject key identifier: AB:1B:E6:59:B2:94:43:83:4C:D0:7D:D4:A3:B1:15:3C:FD:B9:DF:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A147FC7F8C2A5E2501CC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 97.66.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:14:7f:c7:f8:c2:a5:e2:50:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d32869c7-7a1b-4b33-92b6-092ea62ccca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:34:2c:3a:a3:3a:40:0a:1c:e1:a3:8e:25: 69:a8:ad:79:8c:f7:fb:7c:4f:77:80:2c:c4:d9:5d: 19:17:43:b6:f5:ea:cc:41:c6:2d:83:9d:d7:44:a1: be:1f:c1:f3:e3:c0:9a:aa:a0:c8:32:5b:95:be:df: d4:0a:5e:cf:18:8e:a3:ce:90:c6:d0:19:2e:53:15: 23:54:82:25:f1:1d:49:f3:0f:2b:8f:3f:09:85:ce: 6e:4a:93:39:66:34:37:50:d8:3c:68:46:14:1e:1d: c9:b5:b3:44:97:88:e5:13:6e:1b:d2:ad:22:19:35: b7:67:24:43:0a:f4:90:46:c2:40:2f:07:72:06:35: 19:97:2c:ad:0f:1a:f9:a5:03:a9:c1:67:a4:17:4e: 5a:11:ee:c0:39:25:86:07:30:3b:5f:67:ee:cb:18: ef:63:02:f5:2a:83:d4:bb:b7:68:ea:b8:53:79:04: ea:9f:d2:56:9d:45:b3:ab:06:8d:6a:20:e9:35:c0: 2b:e2:e8:f8:e3:48:83:cf:d4:07:49:7f:f2:5c:83: f0:7c:32:f5:bb:0c:eb:45:b8:ed:70:20:bd:11:3a: 7f:9e:13:69:97:7d:cb:8c:2b:f1:28:05:f9:58:31: 79:2c:ca:75:d8:f1:30:f1:bf:f5:ec:17:0e:2b:de: 1c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1B:E6:59:B2:94:43:83:4C:D0:7D:D4:A3:B1:15:3C:FD:B9:DF:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a7:9c:5b:19:f3:cd:fc:99:0f:e1:82:ab:a4:88:89:06:ea: 98:d4:6f:6e:0b:21:00:00:ae:1d:77:1d:91:22:19:4c:5d:f6: cc:dd:77:a6:17:f7:59:ef:d0:7d:2f:7c:77:fb:ae:8b:aa:39: 43:3c:e1:1f:1c:f6:19:f7:56:38:1d:94:1c:4c:68:f2:cd:97: 48:0d:f7:31:0d:a0:08:bd:fb:54:ee:df:29:81:72:59:f2:29: eb:c1:8a:41:ad:c5:80:50:0d:8d:fa:64:42:5c:a4:a4:fb:c4: b3:bd:ad:7a:20:11:bc:4f:cb:98:79:4e:6a:16:18:7d:ab:41: c1:c9:45:38:f4:63:ef:35:23:ee:48:4e:37:d8:a8:72:63:84: 60:6d:21:8d:5e:e6:97:c4:16:5e:56:e7:24:9c:b4:77:6d:56: 22:52:bf:e2:b1:6d:03:5f:63:3a:84:52:24:e3:03:1a:1f:59: 3d:76:67:2e:07:b3:9c:d3:b1:75:79:7d:6f:a7:9e:9a:73:e6: 79:60:a6:ae:a6:fb:b0:4b:37:a3:d5:11:04:79:31:80:ce:c0: 6a:64:9f:96:58:a8:00:bb:97:2c:10:7d:74:53:d2:f0:88:4a: 14:d3:27:0c:6a:e2:7f:38:b1:8a:1f:72:21:47:bf:1f:b2:6a: de:08:40:d4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxShR/x/jCpeJQHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDMyODY5YzctN2ExYi00YjMzLTkyYjYtMDkyZWE2MmNjY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXk0LDqjOkAKHOGjjiVpqK15jPf7fE93gCzE 2V0ZF0O29erMQcYtg53XRKG+H8Hz48CaqqDIMluVvt/UCl7PGI6jzpDG0BkuUxUj VIIl8R1J8w8rjz8Jhc5uSpM5ZjQ3UNg8aEYUHh3JtbNEl4jlE24b0q0iGTW3ZyRD CvSQRsJALwdyBjUZlyytDxr5pQOpwWekF05aEe7AOSWGBzA7X2fuyxjvYwL1KoPU u7do6rhTeQTqn9JWnUWzqwaNaiDpNcAr4uj440iDz9QHSX/yXIPwfDL1uwzrRbjt cCC9ETp/nhNpl33LjCvxKAX5WDF5LMp12PEw8b/17BcOK94cUwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKsb5lmylEODTNB91KOxFTz9ud88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzVhNjIyM2MtMmNmOC0z MGNjLWJjNTgtNGU2YTBiZTRiMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYUIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFKecWxnzzfyZD+GCq6SIiQbqmNRvbgshAACuHXcdkSIZTF32zN13phf3 We/QfS98d/uui6o5QzzhHxz2GfdWOB2UHExo8s2XSA33MQ2gCL37VO7fKYFyWfIp 68GKQa3FgFANjfpkQlykpPvEs72teiARvE/LmHlOahYYfatBwclFOPRj7zUj7khO N9iocmOEYG0hjV7ml8QWXlbnJJy0d21WIlK/4rFtA19jOoRSJOMDGh9ZPXZnLgez nNOxdXl9b6eemnPmeWCmrqb7sEs3o9URBHkxgM7AamSfllioALuXLBB9dFPS8IhK FNMnDGrifzixih9yIUe/H7Jq3ghA1A== -----END CERTIFICATE-----Generated at Fri May 9 03:00:12 2025 by rpki-client