$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa File: 8a4778b3-1fbe-3ce6-9849-f83537b13285.roa (raw, json) Hash identifier: cPSXKms/jTVyjbrmoN1RAFwBi79PIf9VvvZNOhK8GM0= Subject key identifier: 15:F7:EC:E9:96:FC:20:8A:C7:9E:E8:9F:42:66:70:A8:CC:67:C6:0C Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584902EC2E5879AC86B260021880 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 21949 IP address blocks: 50.21.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2e:58:79:ac:86:b2:60:02:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=b2e40d09-d14b-48fb-bd50-40a3c7b78535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5e:64:25:5d:4e:b2:a6:68:97:4e:c8:66:a4: 64:af:13:cf:64:b9:8f:a3:6e:80:1e:86:44:79:a2: 3d:32:2e:55:3a:62:e8:1e:d9:f1:04:d0:96:ce:64: 1b:13:c6:d2:26:7e:5b:35:c7:72:4c:1d:7f:da:00: 3e:61:35:7d:1c:eb:a7:b0:b0:f1:52:f5:1e:c3:2c: 65:df:ee:78:44:66:c8:bb:db:79:db:a3:d5:37:86: 18:db:fc:f7:4a:a1:24:46:29:27:ae:9c:2c:bc:17: 81:74:dd:19:53:8f:51:57:d7:2f:65:f0:72:02:25: 54:ff:6e:65:5e:e1:8b:36:96:5b:20:36:74:5f:37: ba:fd:c3:59:a5:be:d3:ed:fa:56:00:8f:6b:0f:07: a4:8e:0e:e1:c5:a4:d3:49:08:d3:ec:a7:28:66:26: 27:09:9e:aa:1a:61:3e:e3:5a:ab:16:42:05:47:d2: 6e:0a:80:38:53:d8:30:81:29:f7:b0:d8:6d:8d:56: 38:9f:42:1a:e7:0b:c7:b9:ed:cd:2a:67:77:a3:37: 87:3c:d2:a0:b0:ec:8f:8a:69:bc:5e:e4:bc:31:38: ec:77:5d:89:76:1d:92:64:27:73:10:54:a5:dd:c0: f8:94:18:d9:fd:71:f1:b2:b5:2d:84:3a:65:22:26: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F7:EC:E9:96:FC:20:8A:C7:9E:E8:9F:42:66:70:A8:CC:67:C6:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 50.21.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:be:9f:ea:85:80:93:8f:ca:90:ed:77:62:a3:8f:35:3b:c0: 9d:64:37:0a:3c:37:c2:29:27:d8:9c:97:96:38:73:3b:f5:69: 53:3f:d0:89:bd:28:1d:e5:97:bf:e0:af:ae:81:e7:43:d3:10: fb:b0:51:2a:8c:0e:5e:bd:68:ee:80:8e:5f:85:48:d0:7a:bf: a3:ae:84:00:47:28:a8:de:14:3e:e9:02:db:c6:7d:27:4c:bd: 0e:cc:a0:0d:6a:af:8f:66:26:20:27:b7:62:d8:e1:ed:f4:3d: b1:1f:d0:4d:e2:5f:fc:d3:35:f8:c4:a3:fd:5e:c2:0b:36:2d: b1:13:b5:cf:d7:72:db:97:67:f1:29:0e:30:6d:62:b4:1b:ff: ab:46:81:6a:84:36:1d:98:c9:ea:76:4a:1c:a1:a1:83:d0:28: 76:cf:96:c4:23:19:e0:07:36:15:73:01:f8:e4:4d:31:7b:6f: 01:5e:c8:4d:4a:c7:e7:ea:fc:5f:06:94:60:04:7f:03:03:cf: 51:1d:4b:46:4b:96:6c:02:90:0e:59:a4:67:4c:94:de:04:56: 8e:29:d1:27:2c:4f:63:38:1f:d3:d6:e6:f0:7a:26:38:c7:39: 49:be:74:a9:12:f2:ac:2f:04:66:56:3f:7a:10:68:2b:ba:67: 08:dc:d7:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7C5YeayGsmACGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YjJlNDBkMDktZDE0Yi00OGZiLWJkNTAtNDBhM2M3Yjc4NTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl5kJV1OsqZol07IZqRkrxPPZLmPo26AHoZE eaI9Mi5VOmLoHtnxBNCWzmQbE8bSJn5bNcdyTB1/2gA+YTV9HOunsLDxUvUewyxl 3+54RGbIu9t526PVN4YY2/z3SqEkRiknrpwsvBeBdN0ZU49RV9cvZfByAiVU/25l XuGLNpZbIDZ0Xze6/cNZpb7T7fpWAI9rDwekjg7hxaTTSQjT7KcoZiYnCZ6qGmE+ 41qrFkIFR9JuCoA4U9gwgSn3sNhtjVY4n0Ia5wvHue3NKmd3ozeHPNKgsOyPimm8 XuS8MTjsd12Jdh2SZCdzEFSl3cD4lBjZ/XHxsrUthDplIiapvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBX37OmW/CCKx57on0JmcKjMZ8YMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvOGE0Nzc4YjMtMWZiZS0z Y2U2LTk4NDktZjgzNTM3YjEzMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMhVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2+n+qFgJOPypDtd2KjjzU7wJ1kNwo8N8IpJ9icl5Y4czv1aVM/0Im9 KB3ll7/gr66B50PTEPuwUSqMDl69aO6Ajl+FSNB6v6OuhABHKKjeFD7pAtvGfSdM vQ7MoA1qr49mJiAnt2LY4e30PbEf0E3iX/zTNfjEo/1ewgs2LbETtc/XctuXZ/Ep DjBtYrQb/6tGgWqENh2Yyep2ShyhoYPQKHbPlsQjGeAHNhVzAfjkTTF7bwFeyE1K x+fq/F8GlGAEfwMDz1EdS0ZLlmwCkA5ZpGdMlN4EVo4p0ScsT2M4H9PW5vB6JjjH OUm+dKkS8qwvBGZWP3oQaCu6Zwjc11Q= -----END CERTIFICATE-----Generated at Tue Apr 8 10:12:46 2025 by rpki-client