$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/43913e22-6d62-3fae-aa20-d6cdc5070066.roa File: 43913e22-6d62-3fae-aa20-d6cdc5070066.roa (raw, json) Hash identifier: kQvCBhYMvdmWd1PRqwWF9m3HralJpQufKNAUcwAil0g= Subject key identifier: D6:D5:53:ED:03:7A:A5:D9:28:D3:6F:3C:4F:49:50:C9:0B:1C:A2:4E Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F4328584A5FC5DAF171AF3021F995F4E0 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/43913e22-6d62-3fae-aa20-d6cdc5070066.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 398216 IP address blocks: 50.21.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:da:f1:71:af:30:21:f9:95:f4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=289e1b6b-3264-4276-8b3f-5964d5717234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:78:f7:e2:01:b2:f1:88:01:c3:9a:5e:b0:9e: 18:39:e4:52:54:bb:eb:19:f7:d8:4e:54:e4:c5:47: 53:d5:02:4d:4a:a5:1c:fd:c4:ae:48:d5:af:1e:50: 77:3a:4b:58:32:1f:11:08:d9:c8:cd:0f:bb:23:5b: 75:ac:62:64:81:08:c6:e7:51:d9:3d:1b:cf:41:ea: cf:36:dc:66:ef:c8:52:0e:e9:73:05:57:40:ed:a7: 26:27:c4:01:37:11:d8:51:3d:9b:f6:7b:35:a8:99: a1:8b:d2:be:4e:4c:50:4f:8e:ba:70:74:a9:14:b0: fc:5c:2c:7c:4f:99:35:9f:e3:a7:4b:de:b0:0a:0c: 40:51:f3:2d:dc:e3:4e:7e:a5:d7:12:af:7d:d6:af: 17:93:7a:ae:60:2c:71:7c:e1:ce:5c:b6:36:0b:ef: 22:1f:53:aa:16:be:fb:40:e5:62:08:f8:e0:46:2a: 8e:ae:4b:17:2a:58:32:81:a4:8a:cb:7c:69:51:72: e4:85:83:94:29:e6:57:4d:cd:12:5d:1a:0d:19:84: 53:61:b8:02:6b:2c:ac:be:38:f5:e2:e1:75:95:7b: 14:b7:26:7b:a6:71:0b:3a:63:03:4e:8b:9c:69:74: 6d:b9:41:8e:30:cb:3b:bb:80:82:24:c7:21:bc:ab: 44:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D5:53:ED:03:7A:A5:D9:28:D3:6F:3C:4F:49:50:C9:0B:1C:A2:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/43913e22-6d62-3fae-aa20-d6cdc5070066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 50.21.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c1:9d:6c:c4:54:81:0a:9a:2f:2e:86:6f:99:4f:9f:f8:b3: de:98:a5:d7:05:cc:b0:ff:2e:bb:3b:ef:02:12:41:27:5b:81: b4:28:71:03:d3:30:c9:c8:ac:21:d1:c5:fd:52:32:8c:1e:9b: df:78:b6:17:b8:24:9f:7a:da:d5:5f:4e:4b:03:2a:dc:77:85: 18:25:bc:12:5b:44:62:45:5e:ba:dd:cc:a8:f6:38:eb:b0:27: f1:da:32:7f:69:d0:15:45:5c:82:21:ef:89:62:01:5e:af:21: 85:30:20:1c:65:08:9d:63:79:d3:2a:91:2d:22:f9:1e:5f:00: 74:48:42:04:97:5e:6a:46:55:91:88:29:25:ef:83:57:c9:ba: ec:ca:b2:fd:21:c0:e8:23:7f:d4:87:8e:85:9c:bd:4a:23:f4: 72:39:9e:1b:91:ed:30:80:0f:01:9e:db:d1:14:c6:fd:42:c8: 30:f5:69:14:2d:e0:4f:6b:3f:88:c7:01:77:17:ef:14:06:f8: e6:f4:02:7f:fd:f5:58:e7:2c:76:b9:f2:99:7a:80:48:bb:c0: fe:96:bf:e3:55:39:30:36:c3:0e:4a:5b:07:a7:79:42:75:9e: 2a:1b:b8:17:02:0e:c0:e4:b8:bb:83:90:1b:e5:fc:7a:d2:de: 08:60:11:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdrxca8wIfmV9OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk Mjg5ZTFiNmItMzI2NC00Mjc2LThiM2YtNTk2NGQ1NzE3MjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXj34gGy8YgBw5pesJ4YOeRSVLvrGffYTlTk xUdT1QJNSqUc/cSuSNWvHlB3OktYMh8RCNnIzQ+7I1t1rGJkgQjG51HZPRvPQerP Ntxm78hSDulzBVdA7acmJ8QBNxHYUT2b9ns1qJmhi9K+TkxQT466cHSpFLD8XCx8 T5k1n+OnS96wCgxAUfMt3ONOfqXXEq991q8Xk3quYCxxfOHOXLY2C+8iH1OqFr77 QOViCPjgRiqOrksXKlgygaSKy3xpUXLkhYOUKeZXTc0SXRoNGYRTYbgCayysvjj1 4uF1lXsUtyZ7pnELOmMDToucaXRtuUGOMMs7u4CCJMchvKtEpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbVU+0DeqXZKNNvPE9JUMkLHKJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvNDM5MTNlMjItNmQ2Mi0z ZmFlLWFhMjAtZDZjZGM1MDcwMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMhWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELBnWzEVIEKmi8uhm+ZT5/4s96YpdcFzLD/Lrs77wISQSdbgbQocQPT MMnIrCHRxf1SMowem994the4JJ962tVfTksDKtx3hRglvBJbRGJFXrrdzKj2OOuw J/HaMn9p0BVFXIIh74liAV6vIYUwIBxlCJ1jedMqkS0i+R5fAHRIQgSXXmpGVZGI KSXvg1fJuuzKsv0hwOgjf9SHjoWcvUoj9HI5nhuR7TCADwGe29EUxv1CyDD1aRQt 4E9rP4jHAXcX7xQG+Ob0An/99VjnLHa58pl6gEi7wP6Wv+NVOTA2ww5KWweneUJ1 niobuBcCDsDkuLuDkBvl/HrS3ghgEYw= -----END CERTIFICATE-----Generated at Mon Jul 28 17:32:13 2025 by rpki-client