$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a96851a4-7472-3b88-acd3-ca0735351b67.roa File: a96851a4-7472-3b88-acd3-ca0735351b67.roa (raw, json) Hash identifier: i7DhkBecoku3qP8h445reEWhAAcjDquHA7g9iDxZIVY= Subject key identifier: 50:6D:2B:B5:BB:12:E0:9F:2D:AE:83:DA:72:A8:95:77:14:A0:E1:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB94369BDD3E564EA0F9EB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a96851a4-7472-3b88-acd3-ca0735351b67.roa Signing time: Thu 06 Feb 2025 18:14:37 +0000 ROA not before: Thu 06 Feb 2025 18:14:37 +0000 ROA not after: Wed 07 May 2025 17:14:37 +0000 asID: 7029 IP address blocks: 75.117.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:94:36:9b:dd:3e:56:4e:a0:f9:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:14:37 2025 GMT Not After : May 7 17:14:37 2025 GMT Subject: CN=ae45ed8a-61f8-4455-9b87-75dd474fd1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:60:7d:07:56:4f:f2:22:2e:c9:24:c9:ef:03: 6a:3e:09:62:6c:7a:f0:0c:71:9b:d4:d8:9b:eb:df: c1:ae:5d:3e:54:9b:61:8e:fe:2c:1a:83:3e:17:a8: f2:37:dd:24:57:47:be:f0:85:c3:bb:8a:d5:e2:82: 9e:ca:9b:94:b4:2f:9a:19:94:28:16:64:96:f2:aa: b3:ef:f8:b6:31:2b:c6:80:b5:41:44:fe:5d:85:56: 78:7d:33:ee:5a:9c:47:17:9d:90:5f:07:e9:0c:4f: 18:72:9a:51:0a:24:2c:84:37:b5:71:83:86:8c:77: 9b:76:fc:68:eb:8f:ba:bf:f1:43:d2:af:39:5f:5f: bd:6e:ea:83:ec:8d:42:e6:d0:bf:e0:e9:6f:13:1b: 0e:0c:f5:7c:40:85:f1:f6:9d:dc:ff:c4:f1:95:dd: 38:16:44:fd:72:cf:db:e1:1c:f7:d5:2a:22:6e:0f: 6b:75:0c:59:b9:a4:76:5c:af:2e:64:53:62:71:c5: ed:86:aa:0b:f8:0a:69:8a:2f:48:0e:b0:59:96:5b: cf:c1:8d:56:c2:31:a5:1d:27:ac:9a:75:60:79:b5: 9b:ad:94:fe:9b:75:f1:87:31:8d:18:81:38:78:55: b2:a5:11:d1:b8:be:55:74:0e:a5:8f:c0:57:b4:60: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6D:2B:B5:BB:12:E0:9F:2D:AE:83:DA:72:A8:95:77:14:A0:E1:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a96851a4-7472-3b88-acd3-ca0735351b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2e:d1:0c:8d:b7:62:fa:d0:02:a2:e2:09:6b:ac:04:42:29: d9:b4:ba:4f:6e:d8:a0:07:cb:58:1a:39:53:19:83:1d:31:95: 2e:be:25:d4:a7:99:a7:fb:2d:57:33:ad:03:73:7b:4f:a5:fa: 7f:59:3c:df:b1:23:97:37:0e:04:f9:d5:29:99:d5:44:f1:a7: 7e:52:78:6f:c8:dc:b4:7c:57:69:6c:0c:d6:bf:80:4d:00:ec: 5d:ea:6b:8b:9b:c7:41:ca:55:cd:f0:e1:89:36:d2:e2:9c:88: 89:a1:7d:80:d8:47:61:60:a4:2b:86:90:38:bb:53:8a:3c:39: f6:fd:65:f1:c7:3c:cb:71:4c:40:ec:ea:e8:11:ba:bf:20:d2: cd:ac:c6:27:3b:6a:7f:75:1f:c2:d0:dd:78:79:05:df:aa:39: 81:eb:09:70:47:33:d2:c2:f2:bc:2e:6c:86:77:b3:79:8f:06: db:c5:09:47:7f:10:82:50:af:75:f0:20:15:bc:c0:f5:ed:a9: be:30:cd:36:c4:15:c7:06:d0:1c:0a:17:42:39:4a:c5:22:54: fd:c0:91:04:d7:69:77:5d:31:6c:71:de:de:29:37:74:29:29: d3:01:ac:9e:73:09:6d:a4:ff:b3:65:54:10:93:f2:29:e2:dc: d8:12:0f:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLlDab3T5WTqD56wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTQzN1oXDTI1MDUwNzE3MTQzN1owLzEtMCsGA1UEAxMk YWU0NWVkOGEtNjFmOC00NDU1LTliODctNzVkZDQ3NGZkMWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2B9B1ZP8iIuySTJ7wNqPglibHrwDHGb1Nib 69/Brl0+VJthjv4sGoM+F6jyN90kV0e+8IXDu4rV4oKeypuUtC+aGZQoFmSW8qqz 7/i2MSvGgLVBRP5dhVZ4fTPuWpxHF52QXwfpDE8YcppRCiQshDe1cYOGjHebdvxo 64+6v/FD0q85X1+9buqD7I1C5tC/4OlvExsODPV8QIXx9p3c/8Txld04FkT9cs/b 4Rz31Soibg9rdQxZuaR2XK8uZFNiccXthqoL+Appii9IDrBZllvPwY1WwjGlHSes mnVgebWbrZT+m3XxhzGNGIE4eFWypRHRuL5VdA6lj8BXtGCFPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBtK7W7EuCfLa6D2nKolXcUoOHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTk2ODUxYTQtNzQ3Mi0z Yjg4LWFjZDMtY2EwNzM1MzUxYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3VAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMu0QyNt2L60AKi4glrrARCKdm0uk9u2KAHy1gaOVMZgx0xlS6+JdSn maf7LVczrQNze0+l+n9ZPN+xI5c3DgT51SmZ1UTxp35SeG/I3LR8V2lsDNa/gE0A 7F3qa4ubx0HKVc3w4Yk20uKciImhfYDYR2FgpCuGkDi7U4o8Ofb9ZfHHPMtxTEDs 6ugRur8g0s2sxic7an91H8LQ3Xh5Bd+qOYHrCXBHM9LC8rwubIZ3s3mPBtvFCUd/ EIJQr3XwIBW8wPXtqb4wzTbEFccG0BwKF0I5SsUiVP3AkQTXaXddMWxx3t4pN3Qp KdMBrJ5zCW2k/7NlVBCT8ini3NgSD64= -----END CERTIFICATE-----Generated at Sat Apr 5 18:28:34 2025 by rpki-client