$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/544db689-ef4c-3775-b687-303766eda868.roa File: 544db689-ef4c-3775-b687-303766eda868.roa (raw, json) Hash identifier: Lz0Q22pNPiC7byLpK3lmVaZ1wVrK+5bqg6bAgiT/pQ4= Subject key identifier: 38:8D:66:27:49:F2:44:AF:C9:92:E1:B4:F2:CC:45:FD:49:73:E1:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D9DFB8EE305F696BA0F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/544db689-ef4c-3775-b687-303766eda868.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 50.217.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:9d:fb:8e:e3:05:f6:96:ba:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=286e3b9c-bed2-42e6-8ada-81f1a6540172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:63:4e:d0:68:49:15:31:c5:d3:c3:a2:0a: 07:f9:b7:41:a7:d5:2c:fd:ce:ea:6c:90:58:02:4e: 73:17:f9:57:4c:1f:b7:03:ad:4a:80:af:f5:aa:fe: 33:b8:25:16:17:ff:6f:47:7d:20:19:6a:e3:93:e8: c4:77:80:d8:24:d6:41:46:6c:3e:ce:bf:56:9e:cf: 4e:1e:89:fe:21:47:24:1e:21:92:f1:f7:bb:ab:8a: 09:1e:b0:21:cf:e8:9e:29:34:62:43:6e:94:db:07: 0f:e4:02:24:09:db:97:e7:79:01:b3:0c:27:53:69: c4:61:fd:03:8d:72:ab:45:07:95:91:77:61:5a:05: 91:19:87:e1:dd:9c:7f:57:d0:de:72:4a:f5:a2:d5: 69:79:a8:88:5e:ec:d6:1a:a1:ae:1c:9e:32:11:84: b5:fd:cb:a6:aa:56:4d:a5:ad:98:82:27:be:ed:a3: b5:c0:75:c7:0f:7d:7f:e5:39:48:53:89:44:3e:25: db:94:3d:a1:d7:f7:47:a7:58:dc:7c:00:40:05:5f: ad:fb:63:14:5c:1c:da:14:7d:3c:d9:6c:a7:0a:be: 19:09:e3:33:48:15:8d:02:a4:d0:76:0a:6e:a3:db: ed:2d:c7:e6:a7:55:78:01:48:04:9a:77:9e:b5:86: db:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8D:66:27:49:F2:44:AF:C9:92:E1:B4:F2:CC:45:FD:49:73:E1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/544db689-ef4c-3775-b687-303766eda868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.217.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:2b:8c:98:38:77:b1:8e:5a:d8:30:37:e7:f5:50:f9:7b:c2: e2:d3:9f:50:28:a2:2f:a5:63:bc:b6:bc:db:5f:a6:97:cc:05: fc:fb:7b:4b:ee:01:92:8a:d2:0d:57:7e:ff:09:31:97:05:7e: f1:f7:90:99:33:de:da:a3:50:33:de:0e:9e:86:6e:9a:a5:c3: 34:b2:bc:a4:97:90:78:cc:09:71:5f:d1:09:1b:8d:8e:7d:9a: 73:f8:36:82:2e:5c:5d:cb:36:92:b8:a9:9d:c6:8e:a7:5f:7d: 20:09:f7:bf:78:3b:6b:4a:a0:10:1f:85:83:72:c1:b5:d3:bc: 24:fa:bf:ec:34:30:cb:0e:57:55:04:b8:d8:fe:b4:b4:a3:12: 0f:bc:9b:92:27:67:d8:3e:f9:44:b8:9e:04:8b:f1:4e:af:75: 4f:c5:42:3b:71:66:12:36:0b:e9:1e:e0:6d:60:2c:52:9c:cf: 6d:be:9c:e8:f6:b2:0e:d2:3d:51:ac:c7:96:ce:3f:b2:fb:75: 01:94:3b:56:78:0f:92:d0:f8:4d:32:b8:72:23:ec:36:b4:f0: 3c:29:03:fc:99:25:10:79:b5:ab:6c:77:38:c6:34:ad:4d:20: f0:0c:af:5b:d9:ba:8e:b9:80:a5:f5:c3:42:c3:9d:ad:81:7a: 0c:76:fc:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebZ37juMF9pa6D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Mjg2ZTNiOWMtYmVkMi00MmU2LThhZGEtODFmMWE2NTQwMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QFjTtBoSRUxxdPDogoH+bdBp9Us/c7qbJBY Ak5zF/lXTB+3A61KgK/1qv4zuCUWF/9vR30gGWrjk+jEd4DYJNZBRmw+zr9Wns9O Hon+IUckHiGS8fe7q4oJHrAhz+ieKTRiQ26U2wcP5AIkCduX53kBswwnU2nEYf0D jXKrRQeVkXdhWgWRGYfh3Zx/V9Deckr1otVpeaiIXuzWGqGuHJ4yEYS1/cumqlZN pa2Ygie+7aO1wHXHD31/5TlIU4lEPiXblD2h1/dHp1jcfABABV+t+2MUXBzaFH08 2WynCr4ZCeMzSBWNAqTQdgpuo9vtLcfmp1V4AUgEmneetYbbKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiNZidJ8kSvyZLhtPLMRf1Jc+FXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQ0ZGI2ODktZWY0Yy0z Nzc1LWI2ODctMzAzNzY2ZWRhODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMtmdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcrjJg4d7GOWtgwN+f1UPl7wuLTn1Aooi+lY7y2vNtfppfMBfz7e0vu AZKK0g1Xfv8JMZcFfvH3kJkz3tqjUDPeDp6GbpqlwzSyvKSXkHjMCXFf0QkbjY59 mnP4NoIuXF3LNpK4qZ3GjqdffSAJ9794O2tKoBAfhYNywbXTvCT6v+w0MMsOV1UE uNj+tLSjEg+8m5InZ9g++US4ngSL8U6vdU/FQjtxZhI2C+ke4G1gLFKcz22+nOj2 sg7SPVGsx5bOP7L7dQGUO1Z4D5LQ+E0yuHIj7Da08DwpA/yZJRB5tatsdzjGNK1N IPAMr1vZuo65gKX1w0LDna2Begx2/BE= -----END CERTIFICATE-----Generated at Mon Apr 7 03:00:49 2025 by rpki-client