$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b2733e3-7b31-3b05-8eb8-048eb8d092b6.roa File: 5b2733e3-7b31-3b05-8eb8-048eb8d092b6.roa (raw, json) Hash identifier: 3wDn1V+868eus8gX1YT7P8UGMqVHPasskytKRwRQIxc= Subject key identifier: 01:3C:35:CE:93:F6:93:C1:DE:18:82:93:3B:52:01:95:4B:B3:49:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F304D41572D0363FD8F6B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b2733e3-7b31-3b05-8eb8-048eb8d092b6.roa Signing time: Tue 21 Jan 2025 20:37:44 +0000 ROA not before: Tue 21 Jan 2025 20:37:44 +0000 ROA not after: Mon 21 Apr 2025 19:37:44 +0000 asID: 7029 IP address blocks: 75.117.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:4d:41:57:2d:03:63:fd:8f:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:37:44 2025 GMT Not After : Apr 21 19:37:44 2025 GMT Subject: CN=bacc9a83-846b-4f88-b3b1-4d2b3a491cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:b8:fb:6d:07:77:b2:6a:a8:c1:41:06:13: 12:a1:d2:5a:4d:bf:4e:58:7c:a6:22:45:bf:2b:78: bc:d9:5b:3c:a7:90:ff:5b:36:f4:fd:aa:5a:cb:00: 75:64:ac:1f:8a:c2:92:cb:71:8a:d8:a0:78:2e:41: 12:5c:83:5a:ac:37:6f:c7:05:25:94:50:f8:95:8e: 3f:66:0f:3a:22:4d:87:8c:f9:82:a2:2c:94:c6:0c: 9c:8a:3c:59:5b:68:b2:98:9f:99:e1:9c:12:8d:f4: f7:c9:27:2b:a1:29:f9:ca:de:8b:4f:24:61:d6:e8: f9:1c:82:9d:7c:75:39:d2:2e:f4:2d:86:fa:61:87: e0:c9:6f:db:59:f7:50:29:53:21:ac:ce:a8:60:ca: e1:f1:aa:11:cf:f1:17:b1:81:61:40:f0:a1:bf:fd: eb:b4:4a:b6:86:b4:17:f8:f2:2a:42:c3:7d:e5:16: fd:33:7d:60:b5:74:b1:9d:24:81:84:11:7d:8b:0c: 47:3f:46:4c:d8:03:65:9b:36:a8:f1:ec:5d:47:08: b7:d4:ee:58:ab:cf:3d:49:f3:d3:b1:e7:25:2e:ca: 56:bf:2c:44:86:d8:af:62:83:51:ba:46:a3:da:7d: 00:76:42:b0:e3:b8:61:60:49:a7:3a:5d:de:14:a1: a0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3C:35:CE:93:F6:93:C1:DE:18:82:93:3B:52:01:95:4B:B3:49:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b2733e3-7b31-3b05-8eb8-048eb8d092b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c2:d4:2f:3c:8c:06:e1:8b:69:ab:a1:00:3a:98:97:64:87: a3:b0:cf:33:20:ab:12:3a:d8:4b:84:2b:27:ff:cb:46:df:40: 43:02:f8:07:75:19:fe:8a:dc:96:05:65:8e:73:ab:0c:96:2c: ed:be:b5:9f:ee:ea:ce:87:fa:79:45:c8:4e:5c:22:0f:3a:6a: ff:d7:8c:ae:ca:a5:f8:0a:2a:81:7a:46:77:eb:fa:a2:92:41: af:0f:1c:8a:bc:b6:de:f0:88:77:ab:ce:ba:5d:35:2f:f0:53: 65:be:84:b5:d0:5b:2f:7d:c6:de:ec:a5:3a:17:4e:8b:ce:da: 93:fc:5a:84:9e:5f:52:8a:48:f2:72:b1:2e:7a:3c:6d:af:19: 2c:18:76:a1:49:3b:85:2e:98:55:0e:fc:9f:2d:84:d3:fd:21: b1:c3:77:7f:87:38:06:f1:9f:e5:0c:78:76:f6:64:46:d9:92: f3:04:fa:b4:36:39:20:01:e2:51:29:16:e4:5f:d6:40:73:ce: c9:84:8b:8a:c6:2b:a0:da:26:f5:9c:1e:c5:b5:1a:e1:24:4b: 31:da:16:a9:40:7c:51:86:57:23:fb:e3:ba:b3:54:4d:03:55: 25:3a:c2:28:c5:6a:04:b7:b2:68:55:8e:5e:ba:c9:02:90:95: 15:6b:a3:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifME1BVy0DY/2Pa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzc0NFoXDTI1MDQyMTE5Mzc0NFowLzEtMCsGA1UEAxMk YmFjYzlhODMtODQ2Yi00Zjg4LWIzYjEtNGQyYjNhNDkxY2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5i4+20Hd7JqqMFBBhMSodJaTb9OWHymIkW/ K3i82Vs8p5D/Wzb0/apaywB1ZKwfisKSy3GK2KB4LkESXINarDdvxwUllFD4lY4/ Zg86Ik2HjPmCoiyUxgycijxZW2iymJ+Z4ZwSjfT3yScroSn5yt6LTyRh1uj5HIKd fHU50i70LYb6YYfgyW/bWfdQKVMhrM6oYMrh8aoRz/EXsYFhQPChv/3rtEq2hrQX +PIqQsN95Rb9M31gtXSxnSSBhBF9iwxHP0ZM2ANlmzao8exdRwi31O5Yq889SfPT seclLspWvyxEhtivYoNRukaj2n0AdkKw47hhYEmnOl3eFKGgSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAE8Nc6T9pPB3hiCkztSAZVLs0ldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWIyNzMzZTMtN2IzMS0z YjA1LThlYjgtMDQ4ZWI4ZDA5MmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3VYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADC1C88jAbhi2mroQA6mJdkh6OwzzMgqxI62EuEKyf/y0bfQEMC+Ad1 Gf6K3JYFZY5zqwyWLO2+tZ/u6s6H+nlFyE5cIg86av/XjK7KpfgKKoF6Rnfr+qKS Qa8PHIq8tt7wiHerzrpdNS/wU2W+hLXQWy99xt7spToXTovO2pP8WoSeX1KKSPJy sS56PG2vGSwYdqFJO4UumFUO/J8thNP9IbHDd3+HOAbxn+UMeHb2ZEbZkvME+rQ2 OSAB4lEpFuRf1kBzzsmEi4rGK6DaJvWcHsW1GuEkSzHaFqlAfFGGVyP747qzVE0D VSU6wijFagS3smhVjl66yQKQlRVroxU= -----END CERTIFICATE-----Generated at Sat Apr 5 18:07:33 2025 by rpki-client