$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d6e0a93-95dc-3b02-b5e9-b6e5f5afeff6.roa File: 6d6e0a93-95dc-3b02-b5e9-b6e5f5afeff6.roa (raw, json) Hash identifier: EeyjgOWmHMREYJXaO2LTJ/akgba5BeId1S/w+qfQEOk= Subject key identifier: 10:12:56:AB:D2:F2:B8:D5:42:9F:7E:C4:B8:10:01:C5:0D:7E:09:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11E119ADDC0AE78C4A780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d6e0a93-95dc-3b02-b5e9-b6e5f5afeff6.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 75.117.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1e:11:9a:dd:c0:ae:78:c4:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=f8898e5f-d36c-4ed3-aeb1-d8087de1a5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9c:b2:ff:41:19:5e:b9:50:27:ae:fa:13:c3: 3d:6d:f1:27:ba:1a:92:7f:4d:f1:e7:42:60:d1:2a: 69:f6:a0:bc:1c:8a:9e:8e:41:e1:40:4b:20:ce:72: d1:31:02:bd:71:35:61:7c:3f:04:75:ea:89:d6:87: 3e:48:9f:f3:da:06:25:d4:8d:76:9e:58:86:f5:35: 41:db:7a:7c:5e:c5:d3:82:d4:28:83:2d:52:69:c7: 50:7a:47:ed:5a:8d:a3:c0:6e:49:ef:75:13:01:ed: 48:89:d6:51:74:cd:f2:2c:7e:7e:9d:d4:2a:9b:cb: 75:2d:24:ed:42:ad:81:5a:45:27:69:75:d4:39:ea: a3:39:56:63:17:37:35:f4:b8:64:81:fc:05:4e:2e: d1:63:fe:45:7a:a5:19:35:5d:68:80:03:bf:7d:9f: 3f:62:37:9f:7e:e2:7f:de:71:b7:24:02:4d:a1:3b: 82:28:40:76:1e:bd:b0:da:1a:74:6d:4c:3f:64:d7: 69:44:35:5c:16:d0:df:d8:2e:25:f8:f2:65:54:21: 1a:c6:74:1c:eb:81:55:83:b3:e1:41:b1:58:b5:18: 58:ac:03:b2:a7:6f:04:65:e8:2f:74:dd:07:bb:55: e5:3c:da:1b:22:28:da:20:92:02:2e:d2:c8:e9:b9: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:12:56:AB:D2:F2:B8:D5:42:9F:7E:C4:B8:10:01:C5:0D:7E:09:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d6e0a93-95dc-3b02-b5e9-b6e5f5afeff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:aa:02:dc:51:bc:e0:75:95:7a:71:ff:b8:45:db:3c:29:3a: a2:76:85:32:41:77:42:d4:06:30:36:04:13:f9:49:e1:7a:fe: be:04:c0:85:27:0f:24:f8:94:2a:36:d6:3d:71:7d:8a:f4:93: 3c:e3:fd:cd:83:b6:46:06:04:ff:98:4a:20:50:b7:06:52:b3: f7:49:48:ec:f9:fe:cc:64:2e:74:a1:45:75:f5:aa:7d:30:ae: 8a:84:da:05:af:81:34:2d:33:fa:ec:98:0c:0b:09:e8:74:98: 7b:27:32:77:60:09:2b:86:f5:92:1a:a6:ae:b1:e8:0d:01:d6: 9f:30:8b:70:5f:ef:a3:a3:e8:7e:66:f8:a2:53:3d:30:55:f7: 3a:d8:26:29:98:5f:fe:e0:c1:fa:e3:28:43:bd:a0:2b:ba:dd: 94:06:3d:cd:98:e8:b2:7d:6f:3e:74:ce:c2:86:6c:ed:a5:5d: 30:13:79:df:37:28:7b:af:e3:89:b7:6c:1c:3e:01:5f:1b:fd: fa:64:f9:b7:7e:d8:7d:73:ac:dd:7d:35:5b:42:e1:c0:16:e5: 78:78:6e:4f:81:bf:d7:05:38:98:b6:77:12:88:6d:10:4b:85: 5e:16:f0:d9:1c:f9:6a:09:b6:f7:e9:b1:39:02:0d:ab:14:c3: 38:f5:b9:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R4Rmt3ArnjEp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk Zjg4OThlNWYtZDM2Yy00ZWQzLWFlYjEtZDgwODdkZTFhNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZyy/0EZXrlQJ676E8M9bfEnuhqSf03x50Jg 0Spp9qC8HIqejkHhQEsgznLRMQK9cTVhfD8EdeqJ1oc+SJ/z2gYl1I12nliG9TVB 23p8XsXTgtQogy1SacdQekftWo2jwG5J73UTAe1IidZRdM3yLH5+ndQqm8t1LSTt Qq2BWkUnaXXUOeqjOVZjFzc19LhkgfwFTi7RY/5FeqUZNV1ogAO/fZ8/YjeffuJ/ 3nG3JAJNoTuCKEB2Hr2w2hp0bUw/ZNdpRDVcFtDf2C4l+PJlVCEaxnQc64FVg7Ph QbFYtRhYrAOyp28EZegvdN0Hu1XlPNobIijaIJICLtLI6bk6ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBASVqvS8rjVQp9+xLgQAcUNfgnNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmQ2ZTBhOTMtOTVkYy0z YjAyLWI1ZTktYjZlNWY1YWZlZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3UgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeqAtxRvOB1lXpx/7hF2zwpOqJ2hTJBd0LUBjA2BBP5SeF6/r4EwIUn DyT4lCo21j1xfYr0kzzj/c2DtkYGBP+YSiBQtwZSs/dJSOz5/sxkLnShRXX1qn0w roqE2gWvgTQtM/rsmAwLCeh0mHsnMndgCSuG9ZIapq6x6A0B1p8wi3Bf76Oj6H5m +KJTPTBV9zrYJimYX/7gwfrjKEO9oCu63ZQGPc2Y6LJ9bz50zsKGbO2lXTATed83 KHuv44m3bBw+AV8b/fpk+bd+2H1zrN19NVtC4cAW5Xh4bk+Bv9cFOJi2dxKIbRBL hV4W8Nkc+WoJtvfpsTkCDasUwzj1uUQ= -----END CERTIFICATE-----Generated at Sat Apr 5 20:48:25 2025 by rpki-client