$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a18a8a9-2030-3fdb-bc82-24d9446dcc5a.roa File: 1a18a8a9-2030-3fdb-bc82-24d9446dcc5a.roa (raw, json) Hash identifier: 4WmJlCB/Ouv8d4EFBYgKGHPxanA6hvxNUJwA2X3Xpsw= Subject key identifier: D5:3A:9D:1C:C7:87:F7:B0:6C:C1:E3:31:74:38:75:04:22:63:90:2B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C97962D7104050C09AD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a18a8a9-2030-3fdb-bc82-24d9446dcc5a.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33491 IP address blocks: 50.204.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:97:96:2d:71:04:05:0c:09:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e606a9a0-cd7f-4f56-803d-746d4edc0bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:86:01:bb:b3:07:e7:08:5f:7b:9a:d8:78:82: b5:22:55:4d:53:dd:27:30:6c:0b:59:8c:b3:20:b2: fa:ed:bf:fb:c5:cc:fd:7e:fe:aa:cb:be:e8:d4:9f: ad:3a:85:42:9a:a6:97:fc:8d:44:bb:18:db:f9:52: b2:eb:90:f9:8d:ec:68:fc:25:2d:03:32:5f:60:dc: ec:2a:5d:16:30:63:6b:68:18:e3:40:b0:57:70:43: 11:4a:8d:27:fc:c1:1b:3d:65:b6:7f:6b:c5:2e:27: 0d:3d:b1:d3:1a:d7:d3:07:c3:35:6f:4a:1a:d7:7b: 3f:7a:3b:70:8b:a0:54:bd:8c:9d:88:3a:41:76:65: 83:51:ff:e8:60:0b:c5:28:60:4c:29:84:ff:a9:b5: 4d:52:3a:ef:f1:5a:49:11:b0:de:00:c0:a4:ec:f9: 56:93:e3:07:36:d1:51:fa:b4:43:c3:9b:83:61:ce: f2:26:4b:38:c7:8f:c0:fa:cd:62:95:8b:2f:49:85: 30:7f:be:91:9d:64:4d:78:9b:d0:22:79:71:f5:3e: 9a:83:3b:5d:dd:54:43:bf:79:49:ec:e5:1e:0b:9e: 57:09:33:e9:aa:ee:8a:52:6e:cb:bc:d1:24:09:42: 76:68:e1:4f:58:1e:9c:c1:30:76:2c:ab:9d:a7:84: 9f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3A:9D:1C:C7:87:F7:B0:6C:C1:E3:31:74:38:75:04:22:63:90:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a18a8a9-2030-3fdb-bc82-24d9446dcc5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.204.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:43:a9:f3:e7:50:ca:9a:72:74:47:22:94:25:dd:94:94:62: 85:32:1a:6b:9c:b2:d3:29:77:f7:76:d8:dc:e6:05:7d:a8:b8: 0d:2a:a7:72:ba:a9:33:13:67:71:ed:fa:73:5c:4a:e4:a5:2b: 23:99:de:f6:fc:1c:10:49:d4:21:a1:a5:46:a3:f3:1a:fa:78: 9e:04:14:c4:ab:1a:61:21:e7:0d:11:a2:15:72:8d:f2:8d:b8: 14:cd:bc:2d:31:d3:28:a1:ad:20:69:20:1c:3b:27:2f:0d:a8: 1d:08:81:58:60:ec:f6:69:f3:e9:45:b0:b5:37:1f:92:da:64: ea:38:f1:ae:ee:d9:67:a6:c4:07:f3:9e:e1:9b:7c:a8:48:70: bf:0c:9a:01:11:fa:91:e8:c2:ef:b1:61:6c:22:90:07:65:ee: e2:75:72:5c:eb:11:cb:1c:d6:a0:33:d5:e0:d0:b4:55:aa:af: 35:c9:79:08:4d:0e:07:16:28:fb:cc:94:11:8d:98:4f:a8:bc: 00:1c:17:5a:40:5c:84:bf:aa:ea:41:64:1d:01:2b:1e:22:cc: a3:a5:35:e2:fd:b2:86:86:dd:72:f5:2e:43:d8:b5:7e:42:2b: d7:1e:94:5e:3e:bd:1e:49:5e:be:5b:2e:e1:98:45:b8:d1:fd: 87:f7:5e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebJeWLXEEBQwJrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZTYwNmE5YTAtY2Q3Zi00ZjU2LTgwM2QtNzQ2ZDRlZGMwYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oYBu7MH5whfe5rYeIK1IlVNU90nMGwLWYyz ILL67b/7xcz9fv6qy77o1J+tOoVCmqaX/I1Euxjb+VKy65D5jexo/CUtAzJfYNzs Kl0WMGNraBjjQLBXcEMRSo0n/MEbPWW2f2vFLicNPbHTGtfTB8M1b0oa13s/ejtw i6BUvYydiDpBdmWDUf/oYAvFKGBMKYT/qbVNUjrv8VpJEbDeAMCk7PlWk+MHNtFR +rRDw5uDYc7yJks4x4/A+s1ilYsvSYUwf76RnWRNeJvQInlx9T6agztd3VRDv3lJ 7OUeC55XCTPpqu6KUm7LvNEkCUJ2aOFPWB6cwTB2LKudp4SfmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU6nRzHh/ewbMHjMXQ4dQQiY5ArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWExOGE4YTktMjAzMC0z ZmRiLWJjODItMjRkOTQ0NmRjYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMsy9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFDqfPnUMqacnRHIpQl3ZSUYoUyGmucstMpd/d22NzmBX2ouA0qp3K6 qTMTZ3Ht+nNcSuSlKyOZ3vb8HBBJ1CGhpUaj8xr6eJ4EFMSrGmEh5w0RohVyjfKN uBTNvC0x0yihrSBpIBw7Jy8NqB0IgVhg7PZp8+lFsLU3H5LaZOo48a7u2WemxAfz nuGbfKhIcL8MmgER+pHowu+xYWwikAdl7uJ1clzrEcsc1qAz1eDQtFWqrzXJeQhN DgcWKPvMlBGNmE+ovAAcF1pAXIS/qupBZB0BKx4izKOlNeL9soaG3XL1LkPYtX5C K9celF4+vR5JXr5bLuGYRbjR/Yf3XsM= -----END CERTIFICATE-----Generated at Mon Apr 7 05:51:19 2025 by rpki-client