$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a651d65-3ce5-3fe3-b8f8-c5225f017c81.roa File: 7a651d65-3ce5-3fe3-b8f8-c5225f017c81.roa (raw, json) Hash identifier: xFCMc/ImP8Ob3ZK2OyeXhCsuM2jcLNivDgtoJG1yq9w= Subject key identifier: 2D:0A:03:77:5D:DC:7E:30:6F:35:9C:F0:15:B7:02:67:96:BF:DD:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D9E4323729226B6D7CD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a651d65-3ce5-3fe3-b8f8-c5225f017c81.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 50.220.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:9e:43:23:72:92:26:b6:d7:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5ebe6453-32b5-43a7-8117-306e664fb9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:73:96:e1:10:b4:e4:1d:76:a5:fb:e5:9b: 29:f0:a2:78:b1:0b:77:51:5c:62:ff:10:2d:38:1d: 9c:87:da:c9:a5:d1:24:cb:c8:db:db:9c:e8:a7:79: 42:11:e7:32:a1:41:c7:63:43:b2:0a:b6:e7:9c:6c: fe:32:c8:80:bf:aa:81:84:b1:71:98:67:fc:28:7d: bd:36:68:d7:92:a2:a7:92:a5:62:f4:4a:fc:b7:0b: c5:81:cc:2d:e5:69:0a:8c:4b:ff:59:f2:4e:b9:87: f2:b3:54:19:7d:5c:c5:69:4e:67:c8:d7:cf:3c:d1: 8d:76:43:83:80:69:8c:4b:4d:47:1a:c4:f6:76:b1: c9:93:8c:74:8b:08:b5:2f:6f:91:80:95:46:01:a7: f3:23:0b:6c:91:c2:ad:c1:d0:70:91:1f:98:35:db: ea:d8:cf:dd:e8:06:95:7f:bf:84:70:dd:3e:3e:ac: 40:55:89:24:53:c5:37:07:61:c2:e8:9f:20:a2:b5: b7:a4:45:c6:16:7f:e9:fe:fb:db:c0:45:e9:5a:38: b0:22:62:e2:95:62:14:d8:6d:16:90:32:b5:be:03: ca:2c:b1:2c:7a:89:d5:2f:fb:77:b3:2e:d1:71:41: 64:64:f2:0e:51:b6:ae:d7:dc:2b:f2:b3:5c:4a:00: 3e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0A:03:77:5D:DC:7E:30:6F:35:9C:F0:15:B7:02:67:96:BF:DD:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a651d65-3ce5-3fe3-b8f8-c5225f017c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.220.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:90:62:9b:03:a8:8f:aa:1d:9e:83:fb:83:e1:ad:fd:19:cb: 23:85:fc:ac:01:1b:98:9d:09:8b:ae:4d:3c:24:89:49:8e:61: d0:88:93:e9:23:54:17:a0:83:db:4d:69:5c:a9:91:96:41:21: 1b:2a:02:ad:6c:63:b9:bf:a3:39:27:86:f1:4c:d6:33:e5:3f: 45:eb:d6:32:4b:bf:57:d6:d6:cf:fd:60:c7:48:e0:a2:95:34: 2e:ee:96:0b:0b:b5:ec:80:d8:14:16:7c:3f:da:e3:e6:96:e1: 3b:14:cb:20:4a:42:fc:0d:d1:46:e7:98:ac:35:11:54:96:3a: 0f:a2:54:b5:4e:23:c2:b8:85:b1:d6:1a:51:63:23:63:56:1a: 0e:fc:47:69:87:1c:88:dd:1c:3d:bd:b1:dd:4c:28:90:39:fc: 5d:15:a6:bd:c0:53:81:cb:ef:7d:9a:ae:ab:54:35:18:60:8c: 93:ed:8d:ec:71:22:c7:e7:ff:a4:1d:d2:b9:c1:67:d4:60:c5: 3c:b3:01:d0:ef:30:35:a2:ba:0e:ee:4e:01:87:16:14:26:83: 12:fb:fd:94:e6:a6:d8:34:5b:2e:77:b1:fe:e1:a0:2e:d3:7a: 56:08:bf:e8:22:1e:7d:26:a7:c8:f6:0c:6b:99:52:32:5f:b5: 5e:02:47:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebZ5DI3KSJrbXzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NWViZTY0NTMtMzJiNS00M2E3LTgxMTctMzA2ZTY2NGZiOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8FzluEQtOQddqX75Zsp8KJ4sQt3UVxi/xAt OB2ch9rJpdEky8jb25zop3lCEecyoUHHY0OyCrbnnGz+MsiAv6qBhLFxmGf8KH29 NmjXkqKnkqVi9Er8twvFgcwt5WkKjEv/WfJOuYfys1QZfVzFaU5nyNfPPNGNdkOD gGmMS01HGsT2drHJk4x0iwi1L2+RgJVGAafzIwtskcKtwdBwkR+YNdvq2M/d6AaV f7+EcN0+PqxAVYkkU8U3B2HC6J8gorW3pEXGFn/p/vvbwEXpWjiwImLilWIU2G0W kDK1vgPKLLEseonVL/t3sy7RcUFkZPIOUbau19wr8rNcSgA+jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0KA3dd3H4wbzWc8BW3AmeWv91FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2E2NTFkNjUtM2NlNS0z ZmUzLWI4ZjgtYzUyMjVmMDE3YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMtzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaQYpsDqI+qHZ6D+4Phrf0ZyyOF/KwBG5idCYuuTTwkiUmOYdCIk+kj VBegg9tNaVypkZZBIRsqAq1sY7m/ozknhvFM1jPlP0Xr1jJLv1fW1s/9YMdI4KKV NC7ulgsLteyA2BQWfD/a4+aW4TsUyyBKQvwN0UbnmKw1EVSWOg+iVLVOI8K4hbHW GlFjI2NWGg78R2mHHIjdHD29sd1MKJA5/F0Vpr3AU4HL732arqtUNRhgjJPtjexx Isfn/6Qd0rnBZ9RgxTyzAdDvMDWiug7uTgGHFhQmgxL7/ZTmptg0Wy53sf7hoC7T elYIv+giHn0mp8j2DGuZUjJftV4CRw0= -----END CERTIFICATE-----Generated at Sun Apr 6 11:49:17 2025 by rpki-client