$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dadbc53-2a77-3ede-a48d-7193e6717962.roa File: 4dadbc53-2a77-3ede-a48d-7193e6717962.roa (raw, json) Hash identifier: 6pvgGvVWYL2tE+YxBYfMTNTjw29h3BcgDjQ8noWozSM= Subject key identifier: BF:6A:45:41:92:25:41:7B:AB:D0:F8:E4:8B:8A:C9:75:09:20:42:0C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D4D1B10C40C2652A81080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dadbc53-2a77-3ede-a48d-7193e6717962.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33489 IP address blocks: 50.252.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:4d:1b:10:c4:0c:26:52:a8:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=13172038-1556-442b-9c9a-acf1f8243665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:27:9c:aa:34:9c:1f:22:0b:67:a9:a5:86: 0b:eb:f6:b3:5c:a1:a9:da:9a:92:fd:08:3b:1b:ed: ab:01:19:84:3f:91:bc:26:8c:23:be:6c:86:ea:d1: 6f:88:4b:91:1e:86:18:cc:a2:51:e2:73:6c:2e:1c: 4f:ae:ef:23:04:e6:9b:c8:0a:bb:23:97:2f:2d:66: 0e:a4:d6:30:26:66:be:38:b2:5c:1d:61:73:91:b7: fe:92:18:59:10:bb:84:93:17:3f:6f:f4:01:92:3c: 48:9f:2e:da:37:4d:95:77:87:13:5a:89:b2:4f:9d: 00:34:9d:fe:83:70:95:16:47:d9:b7:fb:0b:e7:46: 3f:e1:3e:a7:9d:fc:4a:22:8b:36:f0:33:2a:c5:a6: 79:6e:7f:b8:2b:3f:eb:ea:ba:17:b8:bf:46:3e:c0: a6:e7:0e:02:17:52:77:13:56:fb:f5:2e:c0:c1:f1: 91:b3:d5:04:cd:5a:8d:41:b4:60:86:3d:0c:eb:c2: cb:6a:1b:cc:97:dd:d9:1a:1c:8d:36:ba:ba:95:86: a2:76:e8:66:a3:ff:9b:fe:53:13:dc:60:30:73:e8: 21:d0:9f:a3:7e:ea:1a:a2:f4:53:ff:37:fb:d7:8b: 00:0a:d3:f5:d3:76:3e:3f:a2:03:b3:4f:8b:bf:11: f8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6A:45:41:92:25:41:7B:AB:D0:F8:E4:8B:8A:C9:75:09:20:42:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dadbc53-2a77-3ede-a48d-7193e6717962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.252.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b3:8b:5c:ff:57:23:72:b2:79:c2:4e:5f:3c:ea:f1:df:c5: dd:26:08:97:c7:5f:04:37:c5:f6:cb:97:4c:c6:84:1c:af:e8: 50:61:a9:cd:67:62:1b:1b:04:a3:4d:f2:5c:6a:96:2b:c4:a4: 72:f3:25:5b:c0:a8:33:26:64:ea:f6:cd:e6:78:fe:10:4a:3b: 52:29:d8:59:20:2d:72:d4:c6:1d:58:15:02:63:72:f0:66:f8: 3e:63:b3:8e:e6:65:8d:e8:72:ac:31:9b:fc:98:97:fd:8e:2f: fc:05:b7:b3:4d:11:ff:a9:2e:b9:ad:29:ab:7e:1b:b5:c6:9f: 2e:f2:0d:cc:f0:13:4d:0a:38:2a:27:83:47:2a:cf:71:70:48: da:90:dc:0e:f2:6c:0e:03:d8:57:68:6c:08:b7:d8:bd:2e:0f: 82:38:0a:91:b4:12:91:36:48:d5:b7:b8:59:f2:92:51:b7:f4: cd:15:2a:23:77:53:98:13:bd:59:e4:e1:03:0a:06:77:4f:fa: 33:0f:7d:b9:9d:6f:ce:1d:5e:4c:57:48:f1:9d:45:1c:f1:44: 59:0d:9d:13:d7:91:53:7d:9b:14:42:91:cf:81:78:b7:f0:7d: 3b:97:e4:76:68:2f:df:c2:8b:06:b9:b0:47:bd:71:74:08:d4: dd:75:61:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebU0bEMQMJlKoEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MTMxNzIwMzgtMTU1Ni00NDJiLTljOWEtYWNmMWY4MjQzNjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/MnnKo0nB8iC2eppYYL6/azXKGp2pqS/Qg7 G+2rARmEP5G8JowjvmyG6tFviEuRHoYYzKJR4nNsLhxPru8jBOabyAq7I5cvLWYO pNYwJma+OLJcHWFzkbf+khhZELuEkxc/b/QBkjxIny7aN02Vd4cTWomyT50ANJ3+ g3CVFkfZt/sL50Y/4T6nnfxKIos28DMqxaZ5bn+4Kz/r6roXuL9GPsCm5w4CF1J3 E1b79S7AwfGRs9UEzVqNQbRghj0M68LLahvMl93ZGhyNNrq6lYaiduhmo/+b/lMT 3GAwc+gh0J+jfuoaovRT/zf714sACtP103Y+P6IDs0+LvxH4nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9qRUGSJUF7q9D45IuKyXUJIEIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGRhZGJjNTMtMmE3Ny0z ZWRlLWE0OGQtNzE5M2U2NzE3OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMvyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6zi1z/VyNysnnCTl886vHfxd0mCJfHXwQ3xfbLl0zGhByv6FBhqc1n YhsbBKNN8lxqlivEpHLzJVvAqDMmZOr2zeZ4/hBKO1Ip2FkgLXLUxh1YFQJjcvBm +D5js47mZY3ocqwxm/yYl/2OL/wFt7NNEf+pLrmtKat+G7XGny7yDczwE00KOCon g0cqz3FwSNqQ3A7ybA4D2FdobAi32L0uD4I4CpG0EpE2SNW3uFnyklG39M0VKiN3 U5gTvVnk4QMKBndP+jMPfbmdb84dXkxXSPGdRRzxRFkNnRPXkVN9mxRCkc+BeLfw fTuX5HZoL9/Ciwa5sEe9cXQI1N11Yc8= -----END CERTIFICATE-----Generated at Mon Apr 7 06:36:14 2025 by rpki-client