$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6ff6d20-53db-3e7c-9876-4387d2386e03.roa File: c6ff6d20-53db-3e7c-9876-4387d2386e03.roa (raw, json) Hash identifier: kt0OKNm2n+Gcr5K9fifRgyVQoaHvSDHmCkKwFLCOOhM= Subject key identifier: CC:05:47:F1:EC:13:10:EE:3C:C0:2B:03:DB:31:65:6A:21:F5:B8:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A197C5FFDF0A5009A35C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6ff6d20-53db-3e7c-9876-4387d2386e03.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 75.117.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:19:7c:5f:fd:f0:a5:00:9a:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=b54bedc7-6312-4f09-8e6a-a53d9e0554b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4f:8a:a4:10:db:9e:6c:a9:4c:b5:0b:fe:a2: 3b:26:45:4e:cd:f4:eb:4e:01:d0:6c:32:ed:0a:af: 77:f8:56:91:d5:f5:84:21:31:b0:f4:e3:ef:56:7e: 63:aa:e8:55:b8:68:6a:a0:38:0e:02:63:ab:47:78: 90:e3:c9:6b:78:cd:24:3a:cb:76:21:aa:4b:d3:59: a5:fa:9b:76:e2:45:63:71:6a:03:37:e3:b2:e2:b1: e6:32:d1:62:9c:b6:a3:9a:c1:d8:53:8c:f6:f3:94: 2f:7c:94:14:8e:4e:c0:67:70:70:b9:52:be:29:1d: 55:92:17:3c:a0:74:32:34:b6:b7:e9:b1:8f:96:d0: 5a:65:67:71:a0:e3:b0:ee:ec:63:8f:21:4e:2f:a6: e4:54:a5:eb:3d:8d:64:38:0b:3f:f7:18:8d:07:ef: 5e:a9:0a:26:d9:d7:5a:5a:ef:87:71:a5:81:22:5e: 70:ab:94:cc:b0:4a:32:e7:43:76:93:08:36:d1:86: ee:20:c5:74:af:e3:00:e0:65:db:df:28:0d:b2:2d: c1:a6:a0:7e:97:54:40:a5:72:76:bd:da:92:68:71: 37:60:e0:b2:20:6a:11:fd:83:8c:8d:0f:93:9c:5d: 33:e5:f4:14:d6:63:6c:d1:58:3e:b6:6b:b7:ec:65: 15:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:05:47:F1:EC:13:10:EE:3C:C0:2B:03:DB:31:65:6A:21:F5:B8:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6ff6d20-53db-3e7c-9876-4387d2386e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:3c:65:e5:5b:e6:b1:02:a6:8c:82:9a:50:58:95:d2:92:b2: 92:6f:78:f4:6c:c8:b8:1e:05:17:fb:42:45:6e:e7:fa:93:49: 5d:37:fd:7f:b6:49:34:02:f7:bd:47:f6:db:65:49:83:65:a4: ae:fe:45:25:65:a3:65:76:0e:cb:e8:c6:b0:c9:89:01:80:7c: fa:a0:9b:9f:cf:b8:ed:e4:90:a5:d1:6f:cf:78:43:5f:7b:6a: cf:3a:04:28:eb:f9:f6:6e:2d:eb:6a:fa:ff:ee:23:43:e0:54: 09:bd:1e:b1:08:65:05:24:79:14:69:39:45:ec:1f:19:27:12: db:e9:7b:d1:7d:f6:a1:a9:ef:87:ef:9b:63:d4:38:5e:dd:3c: bc:6a:da:31:14:f9:ae:cc:5c:e4:65:5b:8b:cf:df:d2:87:b3: 1b:0b:dd:bc:1c:c0:6b:51:ca:a7:9a:b0:ee:f8:d9:84:bc:e1: c1:a6:5f:7f:25:e4:58:3a:bd:4e:a9:80:46:58:ce:a7:ec:92: a0:ee:98:00:34:f7:09:80:38:fc:aa:21:a0:b1:8b:b9:e4:27: 20:76:f4:ea:d6:0f:03:ff:3a:a9:e0:a9:3c:52:1d:b8:d5:07: 24:bf:68:dd:37:95:8c:69:ad:10:28:43:a9:12:2f:6d:bd:ad: 2c:04:8d:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhl8X/3wpQCaNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YjU0YmVkYzctNjMxMi00ZjA5LThlNmEtYTUzZDllMDU1NGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0+KpBDbnmypTLUL/qI7JkVOzfTrTgHQbDLt Cq93+FaR1fWEITGw9OPvVn5jquhVuGhqoDgOAmOrR3iQ48lreM0kOst2IapL01ml +pt24kVjcWoDN+Oy4rHmMtFinLajmsHYU4z285QvfJQUjk7AZ3BwuVK+KR1Vkhc8 oHQyNLa36bGPltBaZWdxoOOw7uxjjyFOL6bkVKXrPY1kOAs/9xiNB+9eqQom2dda Wu+HcaWBIl5wq5TMsEoy50N2kwg20YbuIMV0r+MA4GXb3ygNsi3BpqB+l1RApXJ2 vdqSaHE3YOCyIGoR/YOMjQ+TnF0z5fQU1mNs0Vg+tmu37GUVlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwFR/HsExDuPMArA9sxZWoh9biyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzZmZjZkMjAtNTNkYi0z ZTdjLTk4NzYtNDM4N2QyMzg2ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS3U8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACE8ZeVb5rECpoyCmlBYldKSspJvePRsyLgeBRf7QkVu5/qTSV03/X+2 STQC971H9ttlSYNlpK7+RSVlo2V2DsvoxrDJiQGAfPqgm5/PuO3kkKXRb894Q197 as86BCjr+fZuLetq+v/uI0PgVAm9HrEIZQUkeRRpOUXsHxknEtvpe9F99qGp74fv m2PUOF7dPLxq2jEU+a7MXORlW4vP39KHsxsL3bwcwGtRyqeasO742YS84cGmX38l 5Fg6vU6pgEZYzqfskqDumAA09wmAOPyqIaCxi7nkJyB29OrWDwP/OqngqTxSHbjV ByS/aN03lYxprRAoQ6kSL229rSwEjfU= -----END CERTIFICATE-----Generated at Wed May 7 10:23:33 2025 by rpki-client