$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7676cbc3-d703-364e-a7f5-e27c77e352f1.roa File: 7676cbc3-d703-364e-a7f5-e27c77e352f1.roa (raw, json) Hash identifier: kHLwTBk9NDxZp5OVwn/p3pX3+LYvHIjf1bUWAMKR8JU= Subject key identifier: 32:69:0F:E1:EC:74:06:F1:04:04:AC:9C:04:E5:AF:25:B1:85:92:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DF5BA95B8166654A6AD20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7676cbc3-d703-364e-a7f5-e27c77e352f1.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33491 IP address blocks: 50.233.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:f5:ba:95:b8:16:66:54:a6:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=772ea8c2-2d5c-4fe4-8038-0e94730cb6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:30:87:85:7f:6f:5b:fd:24:70:d2:f0:47:d7: 9e:fd:e2:0a:74:9f:c6:01:59:b1:f8:f8:eb:93:f0: b2:9b:8b:35:15:67:9a:80:cb:0b:36:bf:e0:61:36: 3b:d0:5f:17:83:ac:70:94:b6:cc:dc:5d:85:ac:9d: cc:59:2e:f9:c4:e7:37:fe:ee:b9:57:ab:8c:21:82: a5:98:a2:b0:cd:85:2b:15:6d:2e:0c:e0:42:b1:c1: 80:ed:dd:35:34:f3:65:0b:9f:61:2e:a7:0e:46:ee: ed:3a:32:fc:69:36:54:02:5a:5e:7a:d9:df:5c:ad: 22:fd:bb:fa:29:93:68:24:b6:a9:65:35:2c:34:71: 55:45:ac:6c:9d:91:d1:56:23:42:b7:c6:7c:a6:9d: bc:06:57:f1:cd:b4:83:0c:dd:cc:fd:b0:c9:e0:79: 21:f5:c1:61:55:35:25:3e:48:89:98:78:c6:8b:c9: 55:e3:54:cb:1a:34:4e:d0:f2:9b:01:a4:f5:30:2d: cb:db:37:58:61:ef:f0:c3:07:6a:0f:74:2e:77:51: e2:9a:de:b4:e0:21:77:1a:95:c5:dd:36:a6:5a:f0: 0e:35:f0:82:ba:41:1e:f6:87:58:15:d7:e3:6f:b1: f3:08:69:67:06:2e:26:2b:4d:91:4c:ab:2d:3d:27: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:69:0F:E1:EC:74:06:F1:04:04:AC:9C:04:E5:AF:25:B1:85:92:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7676cbc3-d703-364e-a7f5-e27c77e352f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.233.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:3c:4f:08:8f:a8:c0:00:97:65:f2:f3:7b:d1:cf:f4:31:17: 7a:b7:91:a8:29:82:bd:2d:7a:87:a1:b8:18:14:24:70:b5:d4: a2:1a:46:33:c5:5a:a3:d9:9a:d2:25:25:9b:dc:ba:8b:5b:a3: d8:59:0a:9f:2b:1d:3c:56:b0:21:ab:86:6e:8d:69:a5:36:0a: 4f:6c:bb:bf:38:b0:4c:a3:66:ec:44:c7:39:ed:6f:18:04:de: 28:d3:73:c4:44:e2:47:c8:3b:bf:a1:e7:e6:ec:bb:9d:45:20: 2b:fa:60:03:f2:dd:a1:4c:fa:87:3e:4b:e9:5d:d0:62:c2:92: 70:92:25:17:64:a0:1b:9a:c0:21:ea:29:ee:40:fd:24:28:aa: 8b:93:1b:7d:df:a4:72:e4:48:47:92:93:f5:16:2d:57:6c:99: dc:01:29:25:06:9c:24:b4:6b:f8:d0:2e:a8:49:9e:bf:52:23: ba:2e:ff:19:e8:7d:42:a0:0d:cf:ac:bc:84:b9:eb:71:99:54: d1:86:7d:68:4d:37:11:74:67:e8:b2:78:ef:49:57:2c:81:eb: 18:ab:76:7f:48:5a:1a:39:dc:80:18:15:52:49:d1:f3:81:dc: 90:27:88:98:f8:06:12:f6:7b:27:23:b7:a0:ff:84:13:ec:c5: 5c:7b:e5:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebfW6lbgWZlSmrSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NzcyZWE4YzItMmQ1Yy00ZmU0LTgwMzgtMGU5NDczMGNiNmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDCHhX9vW/0kcNLwR9ee/eIKdJ/GAVmx+Pjr k/Cym4s1FWeagMsLNr/gYTY70F8Xg6xwlLbM3F2FrJ3MWS75xOc3/u65V6uMIYKl mKKwzYUrFW0uDOBCscGA7d01NPNlC59hLqcORu7tOjL8aTZUAlpeetnfXK0i/bv6 KZNoJLapZTUsNHFVRaxsnZHRViNCt8Z8pp28BlfxzbSDDN3M/bDJ4Hkh9cFhVTUl PkiJmHjGi8lV41TLGjRO0PKbAaT1MC3L2zdYYe/wwwdqD3Qud1Himt604CF3GpXF 3TamWvAONfCCukEe9odYFdfjb7HzCGlnBi4mK02RTKstPSedNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJpD+HsdAbxBASsnATlryWxhZJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzY3NmNiYzMtZDcwMy0z NjRlLWE3ZjUtZTI3Yzc3ZTM1MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMun3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM8TwiPqMAAl2Xy83vRz/QxF3q3kagpgr0teoehuBgUJHC11KIaRjPF WqPZmtIlJZvcuotbo9hZCp8rHTxWsCGrhm6NaaU2Ck9su784sEyjZuxExzntbxgE 3ijTc8RE4kfIO7+h5+bsu51FICv6YAPy3aFM+oc+S+ld0GLCknCSJRdkoBuawCHq Ke5A/SQoqouTG33fpHLkSEeSk/UWLVdsmdwBKSUGnCS0a/jQLqhJnr9SI7ou/xno fUKgDc+svIS563GZVNGGfWhNNxF0Z+iyeO9JVyyB6xirdn9IWho53IAYFVJJ0fOB 3JAniJj4BhL2eycjt6D/hBPsxVx75c4= -----END CERTIFICATE-----Generated at Mon Apr 7 06:27:36 2025 by rpki-client