$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cec08d31-df68-3707-8836-0a81fc4c5ff3.roa File: cec08d31-df68-3707-8836-0a81fc4c5ff3.roa (raw, json) Hash identifier: HABkD8goGCIjK04MI/DdBDXQmPtQUjBThZ4sXPfgdbg= Subject key identifier: 81:0C:E4:86:97:24:BE:59:1D:89:05:D9:5E:D8:07:C3:57:6C:FA:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA92B91291714BF7DB8480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cec08d31-df68-3707-8836-0a81fc4c5ff3.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 75.88.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:92:b9:12:91:71:4b:f7:db:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=a5b5a0c0-9172-4d54-9347-cf06fa040ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5f:f7:48:22:33:43:58:ca:dd:ac:07:e5:5b: 4a:1d:05:38:57:04:84:73:78:13:c1:ee:0b:9a:58: 05:ac:29:85:cb:5d:d2:e2:63:60:64:be:fb:f8:a0: 6f:e1:9b:5b:6f:a5:a4:eb:f5:63:07:18:e4:96:87: a4:17:b5:12:13:06:34:b9:e0:75:10:d9:44:46:17: c0:ee:48:19:7e:47:5f:4c:d2:03:d8:83:54:31:c3: b2:23:d0:e8:c5:2a:e2:5b:30:1b:fd:77:3f:fd:64: 6f:ba:54:31:f8:b3:2e:ed:8a:50:7e:de:f6:75:60: 42:47:25:4b:4b:1e:4f:7c:e8:6a:77:88:a8:2d:f7: 8f:b4:63:90:60:7e:1b:29:ac:29:1d:72:bb:4f:21: 1a:3e:c7:d2:5c:a2:0c:f3:73:05:05:f5:71:e1:39: a2:db:1c:30:84:90:33:44:f6:c3:92:54:3f:1b:3d: 7a:57:a8:c2:b4:17:79:a8:42:b5:ff:37:96:7e:c0: 11:a7:e5:12:8f:f1:3a:5d:01:56:a0:17:ba:f7:6e: 3e:92:b4:c6:7a:e0:9a:1e:69:2a:43:d6:ef:70:ab: d5:74:a3:2f:a6:b2:15:16:c2:07:d0:31:a1:47:78: b0:5f:19:d6:29:ab:9b:4a:7e:8a:d2:b5:3b:c9:17: bd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0C:E4:86:97:24:BE:59:1D:89:05:D9:5E:D8:07:C3:57:6C:FA:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cec08d31-df68-3707-8836-0a81fc4c5ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:19:92:4c:4e:fe:26:0f:9d:b8:99:d3:04:a3:e4:5b:4d:4d: d3:4e:64:f3:ba:f5:08:c5:a6:a0:a8:0a:6c:30:6f:29:d2:11: ae:c8:c1:c4:3a:ae:72:a5:81:bd:c0:dd:81:6c:89:b4:f5:de: a9:50:21:67:aa:6a:de:ec:e4:4c:43:19:8b:42:c0:a3:77:9b: 82:75:ca:8c:a5:cb:90:67:c9:93:6b:e8:e6:01:7d:54:f4:10: 0b:f7:97:51:b1:4e:ed:44:7a:a0:ad:c1:5d:b6:85:71:96:12: 46:11:32:51:16:7b:28:b0:7a:7b:61:a3:88:2f:62:35:f0:e4: ca:e4:94:51:c3:10:4c:08:5e:dc:97:eb:09:7c:74:78:9e:63: 40:30:ed:41:ad:07:6e:24:35:fd:a7:97:53:b7:b3:b8:f5:5b: 99:b8:bf:eb:eb:ba:bb:57:12:c2:9e:19:80:10:f1:2c:a9:16: 74:b8:4f:5a:54:cc:64:46:75:d4:b3:eb:8f:ec:67:e9:13:f7: 3a:88:60:3d:64:3f:a1:21:a5:e2:1b:06:10:a3:4b:7a:cd:13: 41:37:18:0a:57:c8:c0:07:76:38:88:73:54:0c:a9:8a:45:08: 32:80:a7:89:b4:aa:24:6c:43:8e:f1:69:fb:b4:1e:29:93:3d: c9:44:85:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpK5EpFxS/fbhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk YTViNWEwYzAtOTE3Mi00ZDU0LTkzNDctY2YwNmZhMDQwZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil/3SCIzQ1jK3awH5VtKHQU4VwSEc3gTwe4L mlgFrCmFy13S4mNgZL77+KBv4Ztbb6Wk6/VjBxjkloekF7USEwY0ueB1ENlERhfA 7kgZfkdfTNID2INUMcOyI9DoxSriWzAb/Xc//WRvulQx+LMu7YpQft72dWBCRyVL Sx5PfOhqd4ioLfePtGOQYH4bKawpHXK7TyEaPsfSXKIM83MFBfVx4Tmi2xwwhJAz RPbDklQ/Gz16V6jCtBd5qEK1/zeWfsARp+USj/E6XQFWoBe6924+krTGeuCaHmkq Q9bvcKvVdKMvprIVFsIH0DGhR3iwXxnWKaubSn6K0rU7yRe99QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEM5IaXJL5ZHYkF2V7YB8NXbPorMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2VjMDhkMzEtZGY2OC0z NzA3LTg4MzYtMGE4MWZjNGM1ZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1ggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgZkkxO/iYPnbiZ0wSj5FtNTdNOZPO69QjFpqCoCmwwbynSEa7IwcQ6 rnKlgb3A3YFsibT13qlQIWeqat7s5ExDGYtCwKN3m4J1yoyly5BnyZNr6OYBfVT0 EAv3l1GxTu1EeqCtwV22hXGWEkYRMlEWeyiwentho4gvYjXw5MrklFHDEEwIXtyX 6wl8dHieY0Aw7UGtB24kNf2nl1O3s7j1W5m4v+vrurtXEsKeGYAQ8SypFnS4T1pU zGRGddSz64/sZ+kT9zqIYD1kP6EhpeIbBhCjS3rNE0E3GApXyMAHdjiIc1QMqYpF CDKAp4m0qiRsQ47xafu0HimTPclEhcE= -----END CERTIFICATE-----Generated at Tue Jul 1 03:39:09 2025 by rpki-client