$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3bf3fd7d-9deb-3e68-833c-0a7a4a729b4c.roa File: 3bf3fd7d-9deb-3e68-833c-0a7a4a729b4c.roa (raw, json) Hash identifier: 8fTM7/ZOu9/Z5bkrXoUlRa2zPHI1aMq5UFOWjbIvbxM= Subject key identifier: AA:36:C4:B4:5E:4D:0F:33:37:D6:FF:2C:4D:63:12:B6:79:AA:2A:07 Certificate issuer: /CN=58eef8b8-39c9-495c-b889-44faff13a8aa Certificate serial: 010D0C9F432858490CB170F6ADBE51D383F46280 Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3bf3fd7d-9deb-3e68-833c-0a7a4a729b4c.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 397016 IP address blocks: 50.21.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:70:f6:ad:be:51:d3:83:f4:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=c7165cf3-246f-485f-bbcf-db446ee694fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:cb:1e:96:d0:de:d3:6e:95:5c:85:6b:68: a6:6e:9f:58:60:51:3d:0b:f4:5d:63:75:e5:5b:c3: 4d:c9:33:6b:60:0b:ff:f2:09:54:7b:d8:bc:5c:ca: 56:d9:c8:06:da:a8:08:ec:d2:16:01:8f:95:93:74: 13:a8:c5:ea:93:3a:5d:c1:9d:42:0e:23:e3:24:79: 1c:fd:bb:48:cd:79:4a:32:cc:3e:f2:a5:61:27:18: d4:60:d2:4c:66:17:2d:15:8d:68:98:a1:11:94:f2: a9:c5:f1:71:39:38:e4:a3:79:9a:c3:b6:88:bd:b5: 06:b0:30:b1:f4:71:f3:90:c5:91:61:af:d7:c7:8c: 1e:83:d0:a0:a0:84:c0:70:46:85:db:08:0d:d9:2d: 91:49:a9:c6:71:dc:2b:9d:92:1b:ac:6c:0a:79:57: 40:70:d6:39:47:6d:46:29:98:d9:20:dd:f4:eb:19: 67:1c:38:95:54:c0:0a:9b:88:05:2b:f0:03:07:e6: 53:28:71:93:61:f8:33:d8:10:66:9b:16:0f:b4:54: 28:68:8e:32:7f:34:d4:5a:f2:1a:51:59:70:c2:bb: 95:1c:88:6e:56:61:ea:04:11:7a:ee:a7:2b:ce:65: 69:b0:54:65:45:7b:ef:50:77:0e:b5:5f:e0:29:90: 95:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:36:C4:B4:5E:4D:0F:33:37:D6:FF:2C:4D:63:12:B6:79:AA:2A:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/3bf3fd7d-9deb-3e68-833c-0a7a4a729b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl X509v3 Authority Key Identifier: keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer sbgp-ipAddrBlock: critical IPv4: 50.21.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:9e:bf:8a:cc:2a:8c:7c:16:d9:f3:34:0d:33:4d:d1:c9:10: c7:46:7b:3e:bd:78:f6:00:b7:d7:15:2f:96:88:f5:3f:a2:78: 6c:44:0e:65:c1:7b:68:be:e2:1a:7f:d2:33:e5:bd:51:f7:bf: 75:98:08:ee:1c:f5:c6:f0:44:cf:35:2c:22:f3:a1:37:03:cc: 5c:a2:f4:25:5c:32:02:4a:b5:0b:ed:4a:a0:6f:46:8a:55:be: fb:76:1e:81:c0:10:54:0b:c2:a2:9a:0a:ca:2c:e9:e5:b1:05: e9:f4:b0:d2:3e:f2:cb:f5:3b:b6:9d:c5:9a:e1:04:85:e1:e2: 18:52:a4:90:8f:fe:9a:58:be:81:bb:c2:97:4e:ab:9e:d3:45: b0:27:bf:43:45:e9:13:c4:be:db:e9:05:7a:d0:93:f9:e8:7f: fa:b2:2a:c9:3d:43:0d:7e:1c:65:8b:19:2a:c3:ba:a3:a8:4d: 5b:5e:b1:5c:28:aa:3e:22:b5:d0:d7:87:44:ca:1b:80:24:22: 61:fe:ba:23:37:cf:a1:18:94:4d:a3:82:b7:bd:b2:c0:c8:73: 95:0d:ba:50:11:b9:d8:1f:37:70:6c:08:67:78:c0:a0:89:b1: 48:fb:70:89:a2:77:fe:f3:75:b3:be:42:1a:6d:b2:a0:fe:b1: 04:7b:36:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXD2rb5R04P0YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlZWY4YjgtMzljOS00OTVjLWI4ODktNDRmYWZmMTNh OGFhMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YzcxNjVjZjMtMjQ2Zi00ODVmLWJiY2YtZGI0NDZlZTY5NGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApznLHpbQ3tNulVyFa2imbp9YYFE9C/RdY3Xl W8NNyTNrYAv/8glUe9i8XMpW2cgG2qgI7NIWAY+Vk3QTqMXqkzpdwZ1CDiPjJHkc /btIzXlKMsw+8qVhJxjUYNJMZhctFY1omKERlPKpxfFxOTjko3maw7aIvbUGsDCx 9HHzkMWRYa/Xx4weg9CgoITAcEaF2wgN2S2RSanGcdwrnZIbrGwKeVdAcNY5R21G KZjZIN306xlnHDiVVMAKm4gFK/ADB+ZTKHGTYfgz2BBmmxYPtFQoaI4yfzTUWvIa UVlwwruVHIhuVmHqBBF67qcrzmVpsFRlRXvvUHcOtV/gKZCVlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo2xLReTQ8zN9b/LE1jErZ5qioHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OGVl ZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZhZmYxM2E4YWEvM2JmM2ZkN2QtOWRlYi0z ZTY4LTgzM2MtMGE3YTRhNzI5YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNThlZWY4YjgtMzljOS00OTVjLWI4 ODktNDRmYWZmMTNhOGFhLzU4ZWVmOGI4LTM5YzktNDk1Yy1iODg5LTQ0ZmFmZjEz YThhYS5jcmwwHwYDVR0jBBgwFoAU3r9s9ugxHnFt0lRmEzt4iRXpAS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81OGVlZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZh ZmYxM2E4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMhVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaev4rMKox8FtnzNA0zTdHJEMdGez69ePYAt9cVL5aI9T+ieGxEDmXB e2i+4hp/0jPlvVH3v3WYCO4c9cbwRM81LCLzoTcDzFyi9CVcMgJKtQvtSqBvRopV vvt2HoHAEFQLwqKaCsos6eWxBen0sNI+8sv1O7adxZrhBIXh4hhSpJCP/ppYvoG7 wpdOq57TRbAnv0NF6RPEvtvpBXrQk/nof/qyKsk9Qw1+HGWLGSrDuqOoTVtesVwo qj4itdDXh0TKG4AkImH+uiM3z6EYlE2jgre9ssDIc5UNulARudgfN3BsCGd4wKCJ sUj7cImid/7zdbO+QhptsqD+sQR7Nqg= -----END CERTIFICATE-----Generated at Sat Apr 12 14:53:04 2025 by rpki-client