$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/760495a1-f5f7-350d-9dcc-f22025c889e4.roa File: 760495a1-f5f7-350d-9dcc-f22025c889e4.roa (raw, json) Hash identifier: Pj7POVRg+Du9/P35Ksrg6unZadqGZJTSbHAswJjNXQA= Subject key identifier: D9:3C:C0:BC:EE:11:FC:CE:13:E7:20:F5:1E:6C:97:F2:29:16:86:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C196D74967ACCFDF10A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/760495a1-f5f7-350d-9dcc-f22025c889e4.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33667 IP address blocks: 50.200.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:19:6d:74:96:7a:cc:fd:f1:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b3ecd59f-bfc5-41ce-8b73-3749edba2c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:06:a3:23:89:c4:32:90:f2:e0:e0:50:8e:a1: c2:19:4b:ed:09:99:a7:f7:8f:d1:7e:57:e7:aa:57: a9:38:f0:96:30:5e:07:ee:bf:9f:72:31:91:76:d7: 68:7c:4e:53:3a:d2:c8:b6:41:fe:b6:03:9e:53:8c: 58:ed:b0:27:1b:0f:6b:1b:b1:14:97:ec:cd:b6:5e: d9:f3:90:42:0d:ae:da:96:26:cd:07:8c:ef:e0:ad: ba:07:50:78:6c:dc:d6:08:26:e7:e8:6b:7f:4c:83: 5b:4d:96:06:78:ba:30:21:0d:a2:18:7c:b1:0a:9c: 1c:28:40:e3:87:67:21:00:c0:9e:95:1f:e4:b8:00: ce:17:4d:b4:6e:4b:48:c5:18:a2:b0:19:47:a4:c8: 76:17:11:49:78:84:16:8f:cd:8a:ad:58:e7:f7:c5: 24:25:18:6a:2a:54:e9:b2:61:e7:50:0c:5c:9f:9e: c2:a4:62:1d:d7:af:86:29:8b:48:22:60:58:c6:79: 3d:b8:93:1d:15:5e:4d:1e:6d:54:c7:18:01:73:12: 2d:f0:83:30:1a:41:c9:6d:b1:02:bc:83:45:7a:8a: e1:8e:c9:57:08:ff:18:31:13:e6:ef:e1:d2:b0:fd: 7f:94:de:25:22:02:4b:a9:d8:0c:a4:2d:10:a6:fc: 23:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3C:C0:BC:EE:11:FC:CE:13:E7:20:F5:1E:6C:97:F2:29:16:86:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/760495a1-f5f7-350d-9dcc-f22025c889e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.200.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:fc:d2:88:04:db:99:1e:a0:e4:90:9b:6e:7a:55:ec:e0:cb: 59:5a:ed:8f:70:e4:23:66:a3:c2:8b:97:89:44:e7:71:09:c8: 8f:97:62:73:17:6c:3d:5a:87:48:b2:68:4a:17:8a:bd:4c:a0: cb:a9:68:1e:b9:00:2b:da:27:d6:74:ab:2c:69:51:43:6d:02: 2d:5f:ab:91:da:f4:f8:7c:51:24:79:da:42:6a:2d:0a:d7:32: 23:88:f6:ee:20:4d:b5:e3:b2:f5:68:4c:56:04:aa:2d:3a:10: 65:f0:d5:ff:02:0e:ad:1c:63:d9:a9:d0:c1:06:57:08:72:4a: 96:fa:71:bd:15:ac:70:f2:78:31:64:24:23:d7:13:c5:60:c1: 1b:98:e5:3e:68:7b:fb:dd:f2:b7:6c:56:34:8a:3f:99:2f:1f: cc:ea:bd:7c:27:52:15:cf:71:a6:78:18:ee:2d:63:83:de:7c: 4d:4e:30:a1:c6:99:62:c0:cd:10:3a:b0:64:37:2b:f9:1e:2c: 0f:87:68:18:0f:e5:19:fd:1e:47:05:b4:e4:4f:ff:cb:d6:a2: 1f:1f:83:75:5b:c5:ca:62:40:dc:78:29:4b:f1:76:b7:5a:ef: 7d:2d:14:c2:27:1b:37:a4:74:ea:08:df:41:f3:9d:f9:57:0d: c0:70:11:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebBltdJZ6zP3xCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YjNlY2Q1OWYtYmZjNS00MWNlLThiNzMtMzc0OWVkYmEyYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAajI4nEMpDy4OBQjqHCGUvtCZmn94/Rflfn qlepOPCWMF4H7r+fcjGRdtdofE5TOtLItkH+tgOeU4xY7bAnGw9rG7EUl+zNtl7Z 85BCDa7alibNB4zv4K26B1B4bNzWCCbn6Gt/TINbTZYGeLowIQ2iGHyxCpwcKEDj h2chAMCelR/kuADOF020bktIxRiisBlHpMh2FxFJeIQWj82KrVjn98UkJRhqKlTp smHnUAxcn57CpGId16+GKYtIImBYxnk9uJMdFV5NHm1UxxgBcxIt8IMwGkHJbbEC vINFeorhjslXCP8YMRPm7+HSsP1/lN4lIgJLqdgMpC0QpvwjMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk8wLzuEfzOE+cg9R5sl/IpFoY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzYwNDk1YTEtZjVmNy0z NTBkLTlkY2MtZjIyMDI1Yzg4OWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMsiqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj80ogE25keoOSQm256Vezgy1la7Y9w5CNmo8KLl4lE53EJyI+XYnMX bD1ah0iyaEoXir1MoMupaB65ACvaJ9Z0qyxpUUNtAi1fq5Ha9Ph8USR52kJqLQrX MiOI9u4gTbXjsvVoTFYEqi06EGXw1f8CDq0cY9mp0MEGVwhySpb6cb0VrHDyeDFk JCPXE8VgwRuY5T5oe/vd8rdsVjSKP5kvH8zqvXwnUhXPcaZ4GO4tY4PefE1OMKHG mWLAzRA6sGQ3K/keLA+HaBgP5Rn9HkcFtORP/8vWoh8fg3VbxcpiQNx4KUvxdrda 730tFMInGzekdOoI30HznflXDcBwEZM= -----END CERTIFICATE-----Generated at Mon Apr 7 09:47:21 2025 by rpki-client