$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1da7196b-b29e-360e-a309-9f1b2da3949e.roa File: 1da7196b-b29e-360e-a309-9f1b2da3949e.roa (raw, json) Hash identifier: iXz5Ba6NH9q3gS+kMUGEoK+tuS75S8nEvRMuaqAwi2o= Subject key identifier: FF:AF:94:1D:74:68:52:5B:E2:CD:AC:E7:EF:69:EC:0B:54:BB:23:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CB8D86F2B254DAFA90280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1da7196b-b29e-360e-a309-9f1b2da3949e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 50.232.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:b8:d8:6f:2b:25:4d:af:a9:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c3d373da-6b8d-46a2-95cd-0badce9be976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7d:a3:53:4c:38:7e:cc:58:05:3c:7b:92:ed: 80:bf:3b:8a:fb:a4:22:32:56:52:4d:d3:08:af:f0: f9:00:b9:d4:42:93:db:56:24:01:01:6c:73:80:02: fd:a9:7c:54:53:d4:85:35:d7:01:10:ea:f9:d1:64: bc:35:a4:e3:cf:1d:2f:83:00:70:ea:1b:a2:94:0d: ad:b7:24:cf:64:54:b5:10:63:b0:c7:fc:1c:25:d7: a3:b2:b5:a8:80:62:e6:b8:15:1d:fd:74:68:d6:a7: 6c:75:42:66:ac:e0:54:06:02:cd:b1:11:3d:8e:14: da:cd:92:58:b9:cb:3a:07:7c:97:44:f4:7f:7c:65: 9d:58:82:a7:ba:94:e8:b7:0f:4f:0c:3c:40:05:cd: 69:2c:ce:92:7a:69:b4:9d:bb:36:af:f3:95:f4:b9: a3:4f:52:cf:22:0e:8b:d6:cb:9a:dc:e0:86:5f:ef: cb:3a:eb:a8:a0:d2:9c:21:ba:97:c2:a5:01:ea:cd: 25:c3:56:e3:f6:5d:e4:ed:a0:2c:0d:58:cd:70:2a: e6:d5:cd:9e:e3:0b:ff:0c:a1:de:5f:cb:0b:0c:56: 06:fb:dd:da:ac:6c:24:89:d4:b3:3d:9b:3c:16:a4: ba:e6:31:8b:1b:f8:22:db:9b:67:d1:dd:91:8c:63: 09:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AF:94:1D:74:68:52:5B:E2:CD:AC:E7:EF:69:EC:0B:54:BB:23:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1da7196b-b29e-360e-a309-9f1b2da3949e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.232.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:08:88:03:1f:90:56:b2:5b:5c:df:3a:3d:37:0b:55:bb:a3: 31:43:aa:90:35:2b:53:52:1a:2d:7e:f3:51:33:b9:d8:86:e3: a6:1a:0b:28:2e:78:8b:ea:ba:fe:f2:ef:34:4c:26:fc:3e:21: c3:64:4e:df:ce:c6:bb:31:6a:7e:36:de:a1:aa:0f:bc:8f:49: 56:a1:da:2c:a8:4d:1e:6b:0a:0c:3f:12:12:ff:7b:d8:35:92: dc:bc:a4:db:e9:f9:df:87:80:3a:76:43:13:79:54:be:a7:b5: 9b:b5:26:1a:bc:5c:95:3d:90:a3:5c:fe:24:b7:e4:fa:82:cc: 03:19:c2:58:a6:a3:a7:7a:e8:97:09:f4:3b:24:75:aa:04:c4: c6:06:49:eb:b9:9d:82:95:86:28:c6:eb:f9:f7:6d:ef:a1:b8: a7:94:13:a8:22:cc:a6:40:22:b7:55:49:6b:e1:e0:37:ad:cc: 0c:7f:73:55:26:a9:ea:e1:1e:5c:d2:ba:e8:7f:ea:f3:1e:2c: 77:67:66:7b:f6:17:4d:ff:8c:a1:71:77:fb:d0:7f:9b:9e:80: 04:50:ac:af:0e:e3:e7:e9:2e:fd:23:40:25:a0:a2:bf:bb:70: da:6f:2b:70:c0:6e:00:b5:e4:08:aa:4e:90:1c:2f:1b:43:55: 9d:7a:b0:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebLjYbyslTa+pAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzNkMzczZGEtNmI4ZC00NmEyLTk1Y2QtMGJhZGNlOWJlOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX2jU0w4fsxYBTx7ku2AvzuK+6QiMlZSTdMI r/D5ALnUQpPbViQBAWxzgAL9qXxUU9SFNdcBEOr50WS8NaTjzx0vgwBw6huilA2t tyTPZFS1EGOwx/wcJdejsrWogGLmuBUd/XRo1qdsdUJmrOBUBgLNsRE9jhTazZJY ucs6B3yXRPR/fGWdWIKnupTotw9PDDxABc1pLM6Semm0nbs2r/OV9LmjT1LPIg6L 1sua3OCGX+/LOuuooNKcIbqXwqUB6s0lw1bj9l3k7aAsDVjNcCrm1c2e4wv/DKHe X8sLDFYG+93arGwkidSzPZs8FqS65jGLG/gi25tn0d2RjGMJ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+vlB10aFJb4s2s5+9p7AtUuyNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWRhNzE5NmItYjI5ZS0z NjBlLWEzMDktOWYxYjJkYTM5NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMug7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoIiAMfkFayW1zfOj03C1W7ozFDqpA1K1NSGi1+81EzudiG46YaCygu eIvquv7y7zRMJvw+IcNkTt/Oxrsxan423qGqD7yPSVah2iyoTR5rCgw/EhL/e9g1 kty8pNvp+d+HgDp2QxN5VL6ntZu1Jhq8XJU9kKNc/iS35PqCzAMZwlimo6d66JcJ 9DskdaoExMYGSeu5nYKVhijG6/n3be+huKeUE6gizKZAIrdVSWvh4DetzAx/c1Um qerhHlzSuuh/6vMeLHdnZnv2F03/jKFxd/vQf5uegARQrK8O4+fpLv0jQCWgor+7 cNpvK3DAbgC15AiqTpAcLxtDVZ16sBM= -----END CERTIFICATE-----Generated at Sun Apr 6 20:17:18 2025 by rpki-client