$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cd7301d-8874-31f5-bc17-74bd6043da2a.roa File: 7cd7301d-8874-31f5-bc17-74bd6043da2a.roa (raw, json) Hash identifier: 7Xh2iZ9IeGTV4nbrRMyMtk4ZwFXfvW+kzU2J05jKZ6Y= Subject key identifier: F8:99:06:51:13:7A:B0:D7:46:AB:E7:2F:7E:A0:28:AE:BE:03:6F:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3E5E3AD85E5B6C3E5880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cd7301d-8874-31f5-bc17-74bd6043da2a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 75.117.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3e:5e:3a:d8:5e:5b:6c:3e:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=326c53cd-ceff-4537-a215-4f16b8dc7739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:8d:85:98:a5:69:bf:3e:22:be:23:c1:af: e6:b6:c9:0f:38:52:42:dd:0b:c8:4e:8c:3d:d3:c3: e2:ef:3e:8b:b5:95:05:f0:af:e4:c8:83:fc:0d:a1: e5:60:84:2f:49:64:4d:d5:d9:0d:a0:53:1b:25:f9: 9b:46:2d:43:16:a5:88:ab:71:ef:88:cc:de:a0:b9: 01:99:a9:64:22:14:f1:db:28:9a:6f:62:7d:1b:84: 07:82:92:af:8d:09:95:80:06:5c:0b:e0:70:d9:0d: c5:59:c8:85:81:18:18:cd:5d:f9:a2:09:fc:87:04: e3:a1:ea:e6:a2:b0:88:3b:f2:67:d4:9f:fc:16:3d: 04:bb:e8:ef:ad:99:97:86:d7:96:df:e6:bd:b0:87: 9b:2b:d0:b3:15:62:aa:1d:90:ff:61:1b:1d:7e:c3: c8:d6:01:3e:e1:b5:79:91:ef:1c:be:e9:ee:bd:e5: e6:82:35:d7:a3:b1:20:c6:fa:ee:80:aa:36:ec:51: f2:77:26:90:2a:0c:25:3d:a5:a2:44:f3:11:87:d7: 0b:82:82:d2:c4:2d:6d:be:e4:bc:2f:04:e8:d0:ac: b7:fa:9c:11:78:eb:b6:dd:4f:36:9b:9c:1b:6e:43: 23:f8:3f:dd:fd:c5:a2:f9:00:3b:82:ad:02:c9:ab: 3a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:99:06:51:13:7A:B0:D7:46:AB:E7:2F:7E:A0:28:AE:BE:03:6F:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cd7301d-8874-31f5-bc17-74bd6043da2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:16:f3:c4:c9:6a:f8:41:b3:7a:66:ed:c1:ac:75:7a:82:e1: 25:8e:df:df:ec:ad:6e:32:fa:d1:27:d9:17:53:56:c5:9c:c0: 24:0b:44:ad:0f:69:af:86:e4:59:d6:54:5a:69:99:f8:07:73: 70:40:94:68:d4:58:17:ff:a5:fe:51:60:3a:ca:94:11:e7:fc: 61:d0:f2:08:90:c4:b3:30:cf:07:97:39:89:7b:73:59:91:62: a4:fd:b7:e6:95:7e:c2:c5:2e:4a:a2:6f:65:3d:bd:19:e6:7c: ab:06:6c:ec:d0:f0:ea:7f:8a:e9:0e:2a:e4:2b:49:64:ac:ff: c7:94:56:75:e0:a6:b0:96:87:fd:1a:23:81:a0:97:28:88:9a: 21:88:a4:62:cf:49:d1:46:28:7b:ee:ee:f3:48:7d:d3:5e:54: b2:52:d2:8e:ff:49:be:ee:7c:56:2d:11:a0:46:e9:72:32:58: b6:71:ac:e8:df:b3:15:76:c1:b3:8a:f0:05:cb:b1:54:de:59: d5:5e:48:55:fa:47:a1:67:1d:aa:2e:5f:20:4f:2a:f0:30:ca: c9:12:3b:6d:ea:12:60:19:5d:5d:68:23:bd:d5:e7:4e:19:f5: 50:c6:11:90:41:a1:97:eb:52:d9:eb:b0:44:e7:63:59:c4:54: 3a:77:0c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj5eOtheW2w+WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzI2YzUzY2QtY2VmZi00NTM3LWEyMTUtNGYxNmI4ZGM3NzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J2NhZilab8+Ir4jwa/mtskPOFJC3QvITow9 08Pi7z6LtZUF8K/kyIP8DaHlYIQvSWRN1dkNoFMbJfmbRi1DFqWIq3HviMzeoLkB malkIhTx2yiab2J9G4QHgpKvjQmVgAZcC+Bw2Q3FWciFgRgYzV35ogn8hwTjoerm orCIO/Jn1J/8Fj0Eu+jvrZmXhteW3+a9sIebK9CzFWKqHZD/YRsdfsPI1gE+4bV5 ke8cvunuveXmgjXXo7EgxvrugKo27FHydyaQKgwlPaWiRPMRh9cLgoLSxC1tvuS8 LwTo0Ky3+pwReOu23U82m5wbbkMj+D/d/cWi+QA7gq0Cyas60QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiZBlETerDXRqvnL36gKK6+A2+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2NkNzMwMWQtODg3NC0z MWY1LWJjMTctNzRiZDYwNDNkYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS3XcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgW88TJavhBs3pm7cGsdXqC4SWO39/srW4y+tEn2RdTVsWcwCQLRK0P aa+G5FnWVFppmfgHc3BAlGjUWBf/pf5RYDrKlBHn/GHQ8giQxLMwzweXOYl7c1mR YqT9t+aVfsLFLkqib2U9vRnmfKsGbOzQ8Op/iukOKuQrSWSs/8eUVnXgprCWh/0a I4GglyiImiGIpGLPSdFGKHvu7vNIfdNeVLJS0o7/Sb7ufFYtEaBG6XIyWLZxrOjf sxV2wbOK8AXLsVTeWdVeSFX6R6FnHaouXyBPKvAwyskSO23qEmAZXV1oI73V504Z 9VDGEZBBoZfrUtnrsETnY1nEVDp3DNA= -----END CERTIFICATE-----Generated at Sat May 10 07:25:22 2025 by rpki-client