$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d0a1101-0a6f-3fea-aad2-0637eeb6638c.roa File: 8d0a1101-0a6f-3fea-aad2-0637eeb6638c.roa (raw, json) Hash identifier: wKcu0SD5rFJ3GQ8xmNg+gkAU6Buu5lcSS2kCyXgsG9I= Subject key identifier: F7:10:B2:F3:57:84:06:79:B9:89:6A:D3:34:FA:FD:F6:D3:B8:4B:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B4149A1E13907DC596D99AE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d0a1101-0a6f-3fea-aad2-0637eeb6638c.roa Signing time: Thu 01 May 2025 01:00:46 +0000 ROA not before: Thu 01 May 2025 01:00:46 +0000 ROA not after: Wed 30 Jul 2025 01:00:46 +0000 asID: 7029 IP address blocks: 75.117.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:14:9a:1e:13:90:7d:c5:96:d9:9a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 1 01:00:46 2025 GMT Not After : Jul 30 01:00:46 2025 GMT Subject: CN=ac6ad80b-07cb-4a72-9d07-49d9143a127c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c5:49:36:a2:7d:93:a4:57:af:1b:d2:07:b5: 98:e3:4e:6b:51:a2:46:f9:4f:b5:21:06:ba:52:a6: c4:1f:02:28:f0:a2:0b:2a:1c:4b:96:43:f9:07:5d: f0:70:18:cf:f8:14:3d:81:f3:ad:65:85:22:2b:31: 08:66:a2:04:2c:b0:90:67:26:c5:bc:a5:04:49:0a: d4:c3:f6:3f:91:8e:76:46:f0:46:cb:a0:58:63:20: 05:66:95:e3:91:66:3e:fc:f7:09:48:ba:de:1e:27: be:f2:60:7d:2a:83:10:d2:3c:aa:28:f3:3a:50:7c: 3a:aa:ec:c9:6a:a2:e9:83:5e:bf:96:9d:bc:51:69: 88:12:d7:41:5b:6b:0f:fb:c4:77:7e:8e:d1:d6:bb: aa:da:ba:88:25:99:04:02:4a:b8:db:a0:33:f8:a1: 9a:b9:8a:a6:a1:a9:30:0e:26:05:21:23:9f:d5:7d: 2a:91:94:5e:7d:c4:de:ca:da:59:a4:05:4f:64:7e: 6b:ce:a2:10:da:db:59:db:14:cc:a3:6b:ab:ed:bc: ad:80:2f:6d:2f:7b:c4:b7:69:38:eb:0a:38:07:35: 8e:ca:91:0d:78:4b:78:be:03:54:34:c1:3e:08:a9: e8:31:ba:90:4d:cc:2d:89:40:f1:12:64:7e:d2:14: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:10:B2:F3:57:84:06:79:B9:89:6A:D3:34:FA:FD:F6:D3:B8:4B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d0a1101-0a6f-3fea-aad2-0637eeb6638c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:19:c0:e4:76:ec:23:41:96:15:21:f9:d6:ab:24:0f:71:b9: f2:fe:f7:21:c1:fc:9f:7c:73:37:bb:81:be:94:1a:eb:0f:0c: fb:90:ec:4d:f4:cc:6a:d9:2d:be:78:a3:7d:48:40:8a:70:41: 7c:d4:5d:3b:2c:9c:fa:0b:9f:f2:e2:2d:37:c4:e2:e0:e1:1f: f5:fd:db:03:95:ca:7d:09:49:a3:19:0a:82:ab:6c:a9:ab:83: b2:7d:62:05:a0:0f:f2:33:d8:24:e9:66:d8:ac:ea:96:44:d7: 2f:1e:e2:95:14:df:f2:1e:6f:1c:f6:34:03:f4:c9:73:ab:5b: 7d:e6:30:1f:8b:96:f2:31:23:ed:fb:24:1f:e4:a1:dc:15:4d: 34:40:d6:e4:38:e4:fd:06:36:81:2b:96:55:1e:94:c2:d7:a3: a7:92:c0:cc:b7:fa:5a:23:8f:f3:59:9b:4a:ff:ad:a8:9d:c0: 1b:fd:58:47:53:68:93:dd:2b:a8:9d:17:9a:16:fe:f0:49:ab: c9:db:37:1c:37:3f:40:40:2a:97:e9:c8:f8:85:07:20:34:2e: 92:e3:0c:f1:32:dc:12:14:6a:8f:bc:fb:1d:85:82:66:28:3d: 15:fc:c5:05:12:c7:e4:2f:d1:9b:35:f3:22:d9:5a:a2:36:0f: e5:82:af:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm0FJoeE5B9xZbZmuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk YWM2YWQ4MGItMDdjYi00YTcyLTlkMDctNDlkOTE0M2ExMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8VJNqJ9k6RXrxvSB7WY405rUaJG+U+1IQa6 UqbEHwIo8KILKhxLlkP5B13wcBjP+BQ9gfOtZYUiKzEIZqIELLCQZybFvKUESQrU w/Y/kY52RvBGy6BYYyAFZpXjkWY+/PcJSLreHie+8mB9KoMQ0jyqKPM6UHw6quzJ aqLpg16/lp28UWmIEtdBW2sP+8R3fo7R1ruq2rqIJZkEAkq426Az+KGauYqmoakw DiYFISOf1X0qkZRefcTeytpZpAVPZH5rzqIQ2ttZ2xTMo2ur7bytgC9tL3vEt2k4 6wo4BzWOypENeEt4vgNUNME+CKnoMbqQTcwtiUDxEmR+0hQYZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcQsvNXhAZ5uYlq0zT6/fbTuEsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGQwYTExMDEtMGE2Zi0z ZmVhLWFhZDItMDYzN2VlYjY2MzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3U7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAZwOR27CNBlhUh+darJA9xufL+9yHB/J98cze7gb6UGusPDPuQ7E30 zGrZLb54o31IQIpwQXzUXTssnPoLn/LiLTfE4uDhH/X92wOVyn0JSaMZCoKrbKmr g7J9YgWgD/Iz2CTpZtis6pZE1y8e4pUU3/Iebxz2NAP0yXOrW33mMB+LlvIxI+37 JB/kodwVTTRA1uQ45P0GNoErllUelMLXo6eSwMy3+lojj/NZm0r/raidwBv9WEdT aJPdK6idF5oW/vBJq8nbNxw3P0BAKpfpyPiFByA0LpLjDPEy3BIUao+8+x2FgmYo PRX8xQUSx+Qv0Zs18yLZWqI2D+WCr+s= -----END CERTIFICATE-----Generated at Wed May 7 11:46:40 2025 by rpki-client