$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a958b3fc-03fa-3904-9b4d-f8ebe0608545.roa File: a958b3fc-03fa-3904-9b4d-f8ebe0608545.roa (raw, json) Hash identifier: +I/nBlJMXsYpVIedtakMmVBOfDPKu0Lh/v/zZOTEdvM= Subject key identifier: F8:F7:B3:91:77:0E:10:DA:35:EF:7D:AD:C5:3E:66:11:04:22:96:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F304A7AA137A7287247CE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a958b3fc-03fa-3904-9b4d-f8ebe0608545.roa Signing time: Tue 21 Jan 2025 20:37:43 +0000 ROA not before: Tue 21 Jan 2025 20:37:43 +0000 ROA not after: Mon 21 Apr 2025 19:37:43 +0000 asID: 7029 IP address blocks: 75.117.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:4a:7a:a1:37:a7:28:72:47:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:37:43 2025 GMT Not After : Apr 21 19:37:43 2025 GMT Subject: CN=19794630-b6b8-43c7-b62d-85ef3f27dedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:20:df:b3:61:49:98:45:5b:46:cb:d5:ec:8f: 4f:71:d9:a2:cf:c4:92:6f:d3:e8:f7:b4:4e:41:89: 62:ac:b3:b1:ab:93:98:d2:e6:ab:69:c9:12:ea:a2: d0:b5:de:14:ac:df:df:73:bc:97:04:3b:7d:44:29: 79:b8:28:32:b2:2b:53:85:92:ff:3b:22:2a:de:63: 24:b6:d5:a1:0c:1c:6d:ef:4e:98:7a:67:80:78:67: 20:c0:c3:32:16:7b:0d:bf:1f:d4:d0:52:12:35:47: e6:b7:53:12:5c:0b:ad:fa:32:35:20:e8:c6:aa:a2: 7c:9a:6f:81:01:c0:d5:64:7b:75:c4:7d:12:53:e2: 82:5e:c7:71:d0:f0:43:2d:67:d2:13:72:ca:57:f6: cf:19:61:86:0e:08:c0:39:8d:a6:e4:8b:23:d3:7b: 00:87:5b:3e:d9:ac:80:5b:74:7a:43:ac:c0:69:2d: ca:09:fc:7c:e9:df:2b:91:f9:45:cc:3b:33:1c:62: c0:ba:e6:88:bb:9b:64:31:ea:ed:9c:41:0b:82:c6: 26:f4:25:ea:f1:4d:c7:b3:62:e2:a6:6f:f3:18:c7: 1c:4b:37:c9:8a:48:06:ff:a2:72:3c:29:a6:35:35: cb:40:07:22:0b:0f:c2:68:7e:16:cf:a5:f5:47:5b: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F7:B3:91:77:0E:10:DA:35:EF:7D:AD:C5:3E:66:11:04:22:96:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a958b3fc-03fa-3904-9b4d-f8ebe0608545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:89:fe:53:2c:a1:4a:2b:5a:d2:8d:68:fd:ab:28:66:2c:b6: cd:b9:11:00:40:e0:3f:8f:34:e6:44:d1:1b:27:d0:88:0e:38: 34:c7:85:cd:4b:98:8f:b1:bc:4e:b3:7b:42:65:7d:dd:3f:c5: 0c:4f:a3:e8:8b:25:8b:24:f9:78:41:cc:06:b0:68:3e:0f:1a: f5:22:90:af:4e:3b:6e:5b:c8:0b:a7:8e:24:cd:84:4a:c0:49: 73:88:d9:59:f8:57:79:20:6b:2d:8a:7f:5e:aa:ad:d9:bb:89: 16:92:7e:2b:2f:6d:97:e2:da:2c:17:27:b1:c0:13:2e:ba:b9: 12:e3:1b:a8:a3:16:ce:f7:74:d7:48:7d:28:92:50:a5:6f:23: be:09:20:7d:6a:fb:5d:1c:14:44:29:18:de:e0:1e:2d:72:e1: 3d:46:1c:78:01:5d:dc:96:d1:4f:23:25:21:96:e2:fe:52:f3: 1d:44:02:47:4b:6c:6e:3f:f1:e4:01:0b:b1:9f:4d:ee:0b:26: 87:02:e5:f1:01:ba:4a:fc:4a:ae:b3:43:e7:1f:ce:01:23:09: cf:50:25:4a:10:e7:a7:57:12:67:57:d6:84:f7:ae:cd:88:4d: 72:a1:b0:4f:3e:5d:66:06:d6:0b:f7:8a:dc:a4:ef:0f:cb:d3: 1f:cc:03:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMEp6oTenKHJHzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzc0M1oXDTI1MDQyMTE5Mzc0M1owLzEtMCsGA1UEAxMk MTk3OTQ2MzAtYjZiOC00M2M3LWI2MmQtODVlZjNmMjdkZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCDfs2FJmEVbRsvV7I9Pcdmiz8SSb9Po97RO QYlirLOxq5OY0uarackS6qLQtd4UrN/fc7yXBDt9RCl5uCgysitThZL/OyIq3mMk ttWhDBxt706YemeAeGcgwMMyFnsNvx/U0FISNUfmt1MSXAut+jI1IOjGqqJ8mm+B AcDVZHt1xH0SU+KCXsdx0PBDLWfSE3LKV/bPGWGGDgjAOY2m5Isj03sAh1s+2ayA W3R6Q6zAaS3KCfx86d8rkflFzDszHGLAuuaIu5tkMertnEELgsYm9CXq8U3Hs2Li pm/zGMccSzfJikgG/6JyPCmmNTXLQAciCw/CaH4Wz6X1R1uJ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj3s5F3DhDaNe99rcU+ZhEEIpbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTk1OGIzZmMtMDNmYS0z OTA0LTliNGQtZjhlYmUwNjA4NTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3UwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKJ/lMsoUorWtKNaP2rKGYsts25EQBA4D+PNOZE0Rsn0IgOODTHhc1L mI+xvE6ze0Jlfd0/xQxPo+iLJYsk+XhBzAawaD4PGvUikK9OO25byAunjiTNhErA SXOI2Vn4V3kgay2Kf16qrdm7iRaSfisvbZfi2iwXJ7HAEy66uRLjG6ijFs73dNdI fSiSUKVvI74JIH1q+10cFEQpGN7gHi1y4T1GHHgBXdyW0U8jJSGW4v5S8x1EAkdL bG4/8eQBC7GfTe4LJocC5fEBukr8Sq6zQ+cfzgEjCc9QJUoQ56dXEmdX1oT3rs2I TXKhsE8+XWYG1gv3ityk7w/L0x/MA9Q= -----END CERTIFICATE-----Generated at Sat Apr 5 20:47:17 2025 by rpki-client