$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/849d3684-9e62-38f3-8200-ca9d13a9d017.roa File: 849d3684-9e62-38f3-8200-ca9d13a9d017.roa (raw, json) Hash identifier: RwewM0OQo/yS1RzDVgDu71GLc3Iz0LLp5OaeL4QX7f4= Subject key identifier: C7:B1:55:4B:7E:D0:0F:99:2E:DE:E1:75:E5:8E:2C:A8:57:8D:B8:AF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C721F575539A904CF9480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/849d3684-9e62-38f3-8200-ca9d13a9d017.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 69.252.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:72:1f:57:55:39:a9:04:cf:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e5f4bbc1-a4ac-4491-8329-dd947289655a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:a1:39:8b:5f:78:4d:73:99:a9:e1:e3:60: 2b:2e:8d:1b:9c:76:8b:a3:a7:f2:42:f9:26:b8:ad: fb:b2:32:84:9c:3a:76:25:1a:fe:86:f7:82:4b:ca: 50:a5:3b:54:e9:4e:91:9d:48:e7:3e:8b:15:c7:c9: 0d:5b:e3:88:49:e5:13:9a:a8:81:e8:0b:d9:f9:ff: 04:c5:15:2f:95:16:fc:82:11:8a:94:be:f7:b7:18: d9:7f:62:c1:a9:71:1e:17:84:d8:7b:f0:57:aa:bc: 1d:5e:34:6c:be:86:26:29:04:7b:29:4f:24:b4:0e: 34:d2:49:ca:08:94:36:4d:14:ed:79:71:f4:7d:8b: 3c:3d:32:7a:45:f9:cd:3d:a6:11:3d:8c:f0:61:1d: b0:e5:11:16:bb:dd:40:57:d3:db:d9:2a:75:86:db: 07:06:f8:d2:f3:f5:82:0f:67:11:42:6d:f4:db:1f: 7b:48:8f:b1:07:69:af:9f:59:1b:61:76:20:50:94: cf:ae:07:53:76:43:f9:ed:d8:a7:a1:ff:94:88:9b: 5a:44:cd:67:91:3f:1f:29:8d:8b:59:e5:dd:95:cd: 50:d3:cc:52:4b:8e:e9:49:79:ae:52:da:ea:50:43: bc:3a:ac:a8:b8:f8:cd:46:70:ab:51:c1:10:03:09: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B1:55:4B:7E:D0:0F:99:2E:DE:E1:75:E5:8E:2C:A8:57:8D:B8:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/849d3684-9e62-38f3-8200-ca9d13a9d017.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.252.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:53:8f:d7:d6:10:98:6e:66:55:a9:77:24:c8:a7:b8:e1:33: a7:29:76:61:b3:9f:66:b2:78:46:d2:a0:42:a2:0c:5e:5f:0c: 2e:45:18:0d:e0:5b:0e:82:90:a8:c6:5e:69:a6:b6:d0:cb:19: 4d:50:ac:a6:67:31:77:cb:92:74:4d:95:33:a3:95:f9:77:17: de:c1:93:e6:fb:04:aa:ad:79:2c:00:66:01:ab:54:9a:c1:8d: d3:2f:ed:83:d9:b5:9e:80:f9:c0:96:db:21:53:25:ec:24:13: af:fb:85:02:71:6a:6c:f8:a3:d0:8b:f0:57:8e:7a:4f:cc:7d: f1:a4:a5:27:ca:40:05:78:58:67:93:bf:9d:aa:95:2d:76:60: 1b:18:b8:cc:39:20:ba:8e:28:a4:1d:41:b1:e9:05:f0:51:a7: 64:19:da:17:ac:ae:7e:e4:ba:cf:5a:26:e3:9f:e9:0a:a9:67: e5:34:90:a4:5f:ee:ce:df:5b:cd:dd:e1:59:99:17:95:80:91: c3:b0:bf:ee:d3:6f:dd:3d:67:65:37:11:98:29:90:0f:70:94: 7e:d5:b7:ec:f1:48:a4:22:78:33:3a:37:cf:fd:c9:55:32:2a: 92:3a:dc:17:45:0a:28:a8:92:39:c9:60:d2:e9:cf:ea:4d:42: 26:74:c5:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebHIfV1U5qQTPlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZTVmNGJiYzEtYTRhYy00NDkxLTgzMjktZGQ5NDcyODk2NTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNChOYtfeE1zmanh42ArLo0bnHaLo6fyQvkm uK37sjKEnDp2JRr+hveCS8pQpTtU6U6RnUjnPosVx8kNW+OISeUTmqiB6AvZ+f8E xRUvlRb8ghGKlL73txjZf2LBqXEeF4TYe/BXqrwdXjRsvoYmKQR7KU8ktA400knK CJQ2TRTteXH0fYs8PTJ6RfnNPaYRPYzwYR2w5REWu91AV9Pb2Sp1htsHBvjS8/WC D2cRQm302x97SI+xB2mvn1kbYXYgUJTPrgdTdkP57dinof+UiJtaRM1nkT8fKY2L WeXdlc1Q08xSS47pSXmuUtrqUEO8OqyouPjNRnCrUcEQAwlXxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMexVUt+0A+ZLt7hdeWOLKhXjbivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODQ5ZDM2ODQtOWU2Mi0z OGYzLTgyMDAtY2E5ZDEzYTlkMDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARfwyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALxTj9fWEJhuZlWpdyTIp7jhM6cpdmGzn2ayeEbSoEKiDF5fDC5FGA3g Ww6CkKjGXmmmttDLGU1QrKZnMXfLknRNlTOjlfl3F97Bk+b7BKqteSwAZgGrVJrB jdMv7YPZtZ6A+cCW2yFTJewkE6/7hQJxamz4o9CL8FeOek/MffGkpSfKQAV4WGeT v52qlS12YBsYuMw5ILqOKKQdQbHpBfBRp2QZ2hesrn7kus9aJuOf6QqpZ+U0kKRf 7s7fW83d4VmZF5WAkcOwv+7Tb909Z2U3EZgpkA9wlH7Vt+zxSKQieDM6N8/9yVUy KpI63BdFCiiokjnJYNLpz+pNQiZ0xcU= -----END CERTIFICATE-----Generated at Thu Apr 10 13:50:02 2025 by rpki-client