$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2233a29f-9a9b-32a1-b1d6-e6f4b5c32fc4.roa File: 2233a29f-9a9b-32a1-b1d6-e6f4b5c32fc4.roa (raw, json) Hash identifier: ST8l6IQo9Fp5/06/ZfKs5Q9UFQYmqTHGP+pgXvn6sBs= Subject key identifier: 80:66:A0:5D:15:6C:D7:48:1F:49:A4:A4:B4:BC:60:0E:F7:8F:2A:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605EE257EBCEE1F33C6D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2233a29f-9a9b-32a1-b1d6-e6f4b5c32fc4.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 75.117.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5e:e2:57:eb:ce:e1:f3:3c:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=734e262f-d744-434a-b04f-5f9d75bb10cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:85:8a:49:bd:b2:dd:5a:64:03:5b:c9:2b: 92:94:59:77:9a:7a:a0:8b:cc:01:c9:ed:1b:1b:c0: e0:62:c6:d0:72:76:2a:98:df:07:d2:e3:3e:8d:9c: d7:2f:d5:cf:2f:b1:ed:e3:50:65:c1:0f:af:fd:83: 8e:87:f5:4f:4c:d2:2a:eb:59:81:9a:87:a0:85:8a: f1:f1:25:7f:80:f1:ba:c9:a3:61:1f:42:b0:7a:fd: f9:ff:a2:e1:e7:4a:1f:4b:14:f0:53:83:0a:56:e3: 98:e7:9a:fe:91:6e:ef:99:ad:0c:f2:e3:8d:71:f7: 8e:6a:f7:81:8e:fe:64:d7:82:7d:44:17:59:ee:b1: 00:b3:69:2a:0d:3a:b1:04:66:b0:a3:ed:82:78:ff: 2e:0b:31:6b:5d:94:f6:6e:33:63:06:40:a9:1c:ce: 2d:75:42:b9:3d:6b:cf:dd:25:e0:26:9b:47:0d:d9: b5:17:b5:91:05:cf:22:c7:b0:97:02:08:2c:83:2c: 42:56:55:aa:da:0d:e0:01:ed:7c:ca:c9:24:bc:18: 99:b2:aa:4c:4e:75:11:64:c4:f6:65:a3:33:dc:e1: bd:c7:68:7e:5d:fe:5b:46:b2:45:73:ae:51:97:35: 15:59:5c:85:07:ef:16:3b:8f:32:79:a7:cc:95:81: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:66:A0:5D:15:6C:D7:48:1F:49:A4:A4:B4:BC:60:0E:F7:8F:2A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2233a29f-9a9b-32a1-b1d6-e6f4b5c32fc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f4:e9:19:3f:99:7d:7b:17:b3:4b:bb:27:fc:34:72:e7:0d: bc:2d:e7:fb:23:4c:0b:ed:fb:91:7b:84:31:0a:54:2e:74:13: e3:0d:fe:14:c4:a5:5e:32:db:40:88:bf:60:47:38:f9:1c:29: b2:ed:81:70:c0:c3:dc:e8:c5:b6:8f:a0:4f:61:d7:81:27:51: 64:a9:66:a3:ed:b9:a9:65:a8:6f:eb:d0:78:2f:b7:72:3b:5c: 7d:76:99:52:e1:a5:9a:02:10:84:4f:21:04:a5:2b:8e:9a:b1: 0a:8d:bc:e4:18:37:f8:90:87:4d:14:02:49:2b:ba:42:b9:28: a2:fa:89:08:7a:3e:36:ce:b7:c4:71:6e:02:7e:8b:7d:76:07: a9:85:08:d6:bf:b5:92:91:bf:f5:e5:b9:40:2b:e2:27:3c:52: 5e:6a:bc:ad:a0:42:a0:19:7a:5b:97:af:fd:d8:4a:8f:fe:84: 7c:01:70:7c:61:97:d7:17:2b:74:4e:65:ec:6b:76:b1:7f:f3: 46:32:e1:c8:f3:bf:7f:b3:40:20:28:92:7c:a8:66:08:eb:6f: 32:32:c3:d4:cc:4c:fe:33:e9:a6:d0:e1:9a:35:9a:07:cf:3e: cb:44:0d:4e:e5:02:73:93:7c:09:99:67:b9:52:90:4b:9f:e7: 28:2e:e7:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF7iV+vO4fM8bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NzM0ZTI2MmYtZDc0NC00MzRhLWIwNGYtNWY5ZDc1YmIxMGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4uFikm9st1aZANbySuSlFl3mnqgi8wBye0b G8DgYsbQcnYqmN8H0uM+jZzXL9XPL7Ht41BlwQ+v/YOOh/VPTNIq61mBmoeghYrx 8SV/gPG6yaNhH0Kwev35/6Lh50ofSxTwU4MKVuOY55r+kW7vma0M8uONcfeOaveB jv5k14J9RBdZ7rEAs2kqDTqxBGawo+2CeP8uCzFrXZT2bjNjBkCpHM4tdUK5PWvP 3SXgJptHDdm1F7WRBc8ix7CXAggsgyxCVlWq2g3gAe18yskkvBiZsqpMTnURZMT2 ZaMz3OG9x2h+Xf5bRrJFc65RlzUVWVyFB+8WO48yeafMlYHRzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBmoF0VbNdIH0mkpLS8YA73jyqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjIzM2EyOWYtOWE5Yi0z MmExLWIxZDYtZTZmNGI1YzMyZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb06Rk/mX17F7NLuyf8NHLnDbwt5/sjTAvt+5F7hDEKVC50E+MN/hTE pV4y20CIv2BHOPkcKbLtgXDAw9zoxbaPoE9h14EnUWSpZqPtuallqG/r0Hgvt3I7 XH12mVLhpZoCEIRPIQSlK46asQqNvOQYN/iQh00UAkkrukK5KKL6iQh6PjbOt8Rx bgJ+i312B6mFCNa/tZKRv/XluUAr4ic8Ul5qvK2gQqAZeluXr/3YSo/+hHwBcHxh l9cXK3ROZexrdrF/80Yy4cjzv3+zQCAoknyoZgjrbzIyw9TMTP4z6abQ4Zo1mgfP PstEDU7lAnOTfAmZZ7lSkEuf5ygu55c= -----END CERTIFICATE-----Generated at Wed Jul 9 12:50:37 2025 by rpki-client