$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd22def7-9d41-38f8-854f-6c6e8738ef35.roa File: cd22def7-9d41-38f8-854f-6c6e8738ef35.roa (raw, json) Hash identifier: kBDdiukawH/ZBXfn+VC4D423x7olzXIAOhqLJFAv9Kw= Subject key identifier: 17:4D:71:41:CD:17:E2:83:C7:83:6C:A3:4A:58:F2:1D:71:B3:D8:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AAC4B9D7EC3BB88D8EF640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd22def7-9d41-38f8-854f-6c6e8738ef35.roa Signing time: Thu 20 Feb 2025 18:16:35 +0000 ROA not before: Thu 20 Feb 2025 18:16:35 +0000 ROA not after: Wed 21 May 2025 17:16:35 +0000 asID: 7029 IP address blocks: 75.117.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:c4:b9:d7:ec:3b:b8:8d:8e:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:16:35 2025 GMT Not After : May 21 17:16:35 2025 GMT Subject: CN=d21b58e9-ee97-4f4b-9609-7155b8ab321f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:47:9c:8a:fe:ca:5d:07:18:52:d4:d3:27:c1: 2c:c8:91:fc:4b:61:12:15:a3:74:5e:c2:85:2b:4b: 82:8c:7f:6d:3e:0c:7e:b1:1e:69:93:2d:64:20:a5: 03:0c:c9:70:e2:cc:d5:c0:37:bf:a2:f3:62:33:8f: 42:df:5f:5d:55:33:52:d1:50:98:04:06:f3:76:77: 35:97:46:4a:2a:13:31:6d:fd:e4:02:a9:2f:84:54: 25:1a:2a:cb:79:ba:2d:9e:8c:c0:73:2b:2d:1f:39: e3:04:0e:51:cc:44:12:db:68:6e:c7:16:da:0f:88: 3d:8d:14:25:91:18:ab:bd:ff:cc:cf:40:d4:d7:9f: 3d:7f:48:38:52:3e:89:29:58:7f:6d:7a:9b:61:8a: 98:4a:8f:33:74:6d:00:e7:09:76:c6:34:62:3d:fe: 99:7d:51:4f:45:66:8d:c7:d0:e5:8e:31:6c:84:03: 69:3d:33:13:c3:79:51:66:6c:13:8a:c1:00:cb:cf: 94:3a:27:6f:08:6c:8f:1e:51:9f:51:29:0f:5b:04: 84:0f:0b:fc:af:52:08:68:b1:77:a9:a3:6a:6b:f7: 30:e8:12:a7:dd:71:cd:4a:e6:87:e7:d3:9a:75:4b: 82:61:11:14:03:c7:a6:57:c2:e0:ac:81:7c:0a:6d: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4D:71:41:CD:17:E2:83:C7:83:6C:A3:4A:58:F2:1D:71:B3:D8:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd22def7-9d41-38f8-854f-6c6e8738ef35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:cb:d7:b5:ef:4f:e9:c3:c1:a3:08:a1:93:54:e7:0b:c5:c2: a2:a2:49:ca:e3:15:73:8d:af:17:2e:03:35:05:3d:df:f0:8b: 9d:51:67:31:60:f0:59:3a:22:47:a4:09:0f:f7:d8:63:2c:72: 3b:dc:0a:67:7d:40:9c:33:92:6e:4d:23:fd:8e:1d:fe:9f:7a: 60:7b:58:c0:67:32:c2:21:4e:50:1a:9f:81:be:b8:65:e4:09: 7d:23:ef:49:3c:92:93:cc:40:6f:51:26:78:7d:b9:9c:ae:b1: 4b:d0:d1:18:e6:f0:ef:8a:0e:ba:2e:2b:9a:9c:c6:5f:19:32: 08:6c:3b:cd:3b:c5:78:b5:1b:81:be:a5:c1:fa:27:e5:18:84: 13:39:4a:14:46:2e:57:43:3d:47:d1:57:5e:fb:cc:66:f9:ee: 1d:32:c3:97:8a:9b:8a:b4:8b:34:8c:84:44:dd:38:cb:bd:6a: f8:35:32:7a:6d:fd:23:f2:db:ac:9c:fc:25:ca:22:d0:6f:17: 41:8b:5b:47:c1:b1:6f:37:d4:b7:1c:22:c4:34:e7:5a:d6:31: 6a:86:73:75:b3:4e:99:2b:a9:1c:9c:5a:9e:e6:07:bd:a0:16: 18:56:71:c5:5e:b9:c2:ae:ac:28:eb:93:29:03:5e:e7:9e:1c: dc:bd:eb:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqsS51+w7uI2O9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTYzNVoXDTI1MDUyMTE3MTYzNVowLzEtMCsGA1UEAxMk ZDIxYjU4ZTktZWU5Ny00ZjRiLTk2MDktNzE1NWI4YWIzMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUeciv7KXQcYUtTTJ8EsyJH8S2ESFaN0XsKF K0uCjH9tPgx+sR5pky1kIKUDDMlw4szVwDe/ovNiM49C319dVTNS0VCYBAbzdnc1 l0ZKKhMxbf3kAqkvhFQlGirLebotnozAcystHznjBA5RzEQS22huxxbaD4g9jRQl kRirvf/Mz0DU1589f0g4Uj6JKVh/bXqbYYqYSo8zdG0A5wl2xjRiPf6ZfVFPRWaN x9DljjFshANpPTMTw3lRZmwTisEAy8+UOidvCGyPHlGfUSkPWwSEDwv8r1IIaLF3 qaNqa/cw6BKn3XHNSuaH59OadUuCYREUA8emV8LgrIF8Cm0uBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdNcUHNF+KDx4Nso0pY8h1xs9g2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2QyMmRlZjctOWQ0MS0z OGY4LTg1NGYtNmM2ZTg3MzhlZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3VXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPL17XvT+nDwaMIoZNU5wvFwqKiScrjFXONrxcuAzUFPd/wi51RZzFg 8Fk6IkekCQ/32GMscjvcCmd9QJwzkm5NI/2OHf6femB7WMBnMsIhTlAan4G+uGXk CX0j70k8kpPMQG9RJnh9uZyusUvQ0Rjm8O+KDrouK5qcxl8ZMghsO807xXi1G4G+ pcH6J+UYhBM5ShRGLldDPUfRV177zGb57h0yw5eKm4q0izSMhETdOMu9avg1Mnpt /SPy26yc/CXKItBvF0GLW0fBsW831LccIsQ051rWMWqGc3WzTpkrqRycWp7mB72g FhhWccVeucKurCjrkykDXueeHNy96w0= -----END CERTIFICATE-----Generated at Sat Apr 5 18:28:36 2025 by rpki-client