$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4553f32-a41e-3596-a6ae-b25b60228787.roa File: d4553f32-a41e-3596-a6ae-b25b60228787.roa (raw, json) Hash identifier: MyY6U9fiZGulEgDY5Zpgsje/un3AI1WdNB7826xTO2o= Subject key identifier: 9B:2E:E6:87:D2:00:BA:CF:8F:F7:A2:8C:ED:81:61:57:AF:8A:D2:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A497076B97D6824A0A8BF8980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4553f32-a41e-3596-a6ae-b25b60228787.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 75.117.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:76:b9:7d:68:24:a0:a8:bf:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=fae585dc-5bd3-426b-b727-8cc04597279e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:93:cb:5c:89:5f:c4:9e:ed:ff:fe:03:67:ee: b7:a0:7f:6f:76:8c:0a:54:3e:7e:48:81:af:f6:6a: 2d:5e:fd:1c:dc:e0:6b:86:0f:27:9d:4c:7e:d1:23: 47:c9:5b:4c:22:6b:93:5e:4f:64:f8:c1:29:00:75: 24:f1:1a:46:6c:24:ed:4b:cd:a9:c2:e5:8b:25:b5: 0a:81:65:db:cd:ae:d0:a4:2a:2d:e6:39:9b:77:ae: df:e0:f2:60:f1:2b:8d:ce:37:8d:6a:02:29:48:13: 1f:2e:07:20:ca:ef:00:d7:58:25:4d:e0:ab:63:cf: 21:f9:a0:2a:0d:2e:fb:03:81:8a:22:b3:f3:16:a7: 39:a0:f1:5d:f2:40:1c:6f:03:12:f0:35:4a:89:10: 96:e9:73:7a:39:7b:33:3d:c4:eb:3e:98:f0:cd:e8: b3:6e:9a:c5:72:2d:3a:b3:be:f0:16:1e:1b:86:11: 3b:a0:18:66:8e:57:f6:22:60:b3:ee:4f:84:ef:4d: d9:f7:77:67:25:88:b4:7f:bf:31:c1:fa:11:1d:fc: 8f:98:ee:ae:b7:44:1b:85:90:04:6a:7f:2a:e1:04: 59:df:b2:17:6a:76:2e:f7:b4:78:57:6a:90:3c:78: 77:f1:28:a1:7e:4e:f0:c5:49:e9:47:a5:53:c2:f8: 87:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2E:E6:87:D2:00:BA:CF:8F:F7:A2:8C:ED:81:61:57:AF:8A:D2:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4553f32-a41e-3596-a6ae-b25b60228787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6d:cf:a5:d0:c1:7c:ba:fb:a6:ee:ec:d7:27:6e:0e:94:f6: cc:9f:8b:56:68:0a:3a:98:e3:35:e6:96:7b:74:88:f0:e4:62: 64:d9:3b:36:f1:c4:93:db:db:62:b5:59:01:c4:3d:13:a1:e5: be:a4:3a:b9:42:f3:42:3f:f7:3c:dc:9e:8a:4c:58:f6:a9:e1: f6:ca:f4:55:d6:d8:4a:0d:de:58:0f:6a:9b:b8:68:a0:cd:0d: 2e:89:58:c4:16:16:67:3c:02:c0:5d:01:52:5f:f5:0d:d8:42: e8:c9:b5:aa:96:2b:48:ec:29:30:41:3d:b5:44:63:7b:d8:77: 0d:33:e6:5b:53:35:de:cb:74:9d:62:c4:76:d2:ca:8a:ba:25: e1:53:3d:d8:73:ce:17:84:43:ae:1a:a4:fc:68:05:6e:fa:61: 82:83:29:3f:27:cf:b1:17:4e:4e:c0:45:3d:06:59:bc:8c:21: 82:bf:91:98:f7:c1:f6:2d:78:53:f9:68:21:3c:2a:1f:eb:b5: 76:b8:e0:b2:58:e5:8c:44:07:ef:de:54:57:f7:37:24:aa:70: 2a:ae:cd:46:9e:23:fb:56:b1:c3:3d:87:fc:bc:77:51:39:e8: 36:7d:0e:4f:80:e2:f6:24:70:f8:cb:89:0a:67:e1:1f:4a:0d: 6e:20:52:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHa5fWgkoKi/iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZmFlNTg1ZGMtNWJkMy00MjZiLWI3MjctOGNjMDQ1OTcyNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJPLXIlfxJ7t//4DZ+63oH9vdowKVD5+SIGv 9motXv0c3OBrhg8nnUx+0SNHyVtMImuTXk9k+MEpAHUk8RpGbCTtS82pwuWLJbUK gWXbza7QpCot5jmbd67f4PJg8SuNzjeNagIpSBMfLgcgyu8A11glTeCrY88h+aAq DS77A4GKIrPzFqc5oPFd8kAcbwMS8DVKiRCW6XN6OXszPcTrPpjwzeizbprFci06 s77wFh4bhhE7oBhmjlf2ImCz7k+E703Z93dnJYi0f78xwfoRHfyPmO6ut0QbhZAE an8q4QRZ37IXanYu97R4V2qQPHh38Sihfk7wxUnpR6VTwviHYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsu5ofSALrPj/eijO2BYVevitJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDQ1NTNmMzItYTQxZS0z NTk2LWE2YWUtYjI1YjYwMjI4Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3XgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADltz6XQwXy6+6bu7Ncnbg6U9syfi1ZoCjqY4zXmlnt0iPDkYmTZOzbx xJPb22K1WQHEPROh5b6kOrlC80I/9zzcnopMWPap4fbK9FXW2EoN3lgPapu4aKDN DS6JWMQWFmc8AsBdAVJf9Q3YQujJtaqWK0jsKTBBPbVEY3vYdw0z5ltTNd7LdJ1i xHbSyoq6JeFTPdhzzheEQ64apPxoBW76YYKDKT8nz7EXTk7ART0GWbyMIYK/kZj3 wfYteFP5aCE8Kh/rtXa44LJY5YxEB+/eVFf3NySqcCquzUaeI/tWscM9h/y8d1E5 6DZ9Dk+A4vYkcPjLiQpn4R9KDW4gUvc= -----END CERTIFICATE-----Generated at Tue Jul 1 09:07:41 2025 by rpki-client