$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/904c49d9-848d-3129-8c34-7565956f50f0.roa File: 904c49d9-848d-3129-8c34-7565956f50f0.roa (raw, json) Hash identifier: YVPB+6Qwh9P8FZgOyF+Q1yMdhn2MxKsvAfv3kMTVvUs= Subject key identifier: 16:41:B0:A9:87:20:43:2A:A3:86:01:C4:D4:F9:3B:C0:52:C5:DF:18 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C2A2DF89272E1530EF300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/904c49d9-848d-3129-8c34-7565956f50f0.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 50.255.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:2a:2d:f8:92:72:e1:53:0e:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=3fa38793-59a5-4368-8e40-00783014d6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:fd:b6:61:e6:2c:fc:91:19:0b:d4:ee:92: e1:a9:fc:5e:ad:80:95:ce:97:a7:85:11:d5:56:a9: b6:d9:ae:0d:1e:cc:1f:21:12:a3:68:97:0d:f6:df: b5:65:04:17:8d:44:9b:4b:82:0a:bd:1d:1c:22:9d: 23:37:2f:87:0f:3d:3c:02:6b:83:ec:26:27:0d:7d: b4:55:b1:78:34:c3:13:a5:b2:2b:62:46:b2:8d:58: 97:cc:33:27:17:1d:83:18:3b:c9:c3:a5:55:25:38: 09:b0:a0:37:5e:27:a3:ed:24:72:18:a3:54:88:2e: 33:01:6b:f3:a9:a7:66:06:98:db:0a:e7:77:67:96: 4c:20:e6:79:84:09:85:b8:73:43:2d:7f:01:6d:9f: 91:f4:9a:f2:af:2b:8f:dd:d2:ee:e9:2c:15:ac:d0: e2:02:c8:c4:ed:72:29:4a:c2:0e:25:de:07:f6:9c: 35:f1:0b:4f:c0:d1:74:6a:7f:f3:76:55:2a:35:4a: f2:f3:7f:11:72:29:cb:72:15:3e:ad:26:9c:a8:c5: 7d:1a:5a:dc:e9:50:b9:47:a9:43:05:0a:dc:b6:b4: eb:e1:44:3d:0c:c6:5d:cb:63:32:b4:41:0f:e9:48: 8b:43:b2:c4:b4:5e:7a:52:e0:80:b7:4b:8b:5b:ea: e4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:41:B0:A9:87:20:43:2A:A3:86:01:C4:D4:F9:3B:C0:52:C5:DF:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/904c49d9-848d-3129-8c34-7565956f50f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.255.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:fc:44:2e:c2:93:ba:17:03:b3:77:e7:fb:5d:86:53:17:11: 73:e8:52:c3:0c:40:0e:56:4d:80:f4:63:1f:b1:19:bc:f6:c8: c6:71:55:49:5e:5b:03:a8:56:c5:b2:75:0e:a8:e4:11:33:81: bc:61:78:c0:25:67:2f:2c:25:80:98:72:01:9c:26:07:39:3f: e8:7b:40:7e:6c:c6:0b:73:8e:ea:04:b4:d9:3f:22:ee:70:d0: e3:90:b5:12:ee:ad:91:78:7d:00:17:e9:8b:e8:6b:7e:c1:d6: a1:1c:66:ee:3b:b7:da:53:9f:f0:10:c4:92:94:4c:df:65:45: 37:be:37:d8:2a:00:84:0e:ea:2a:d2:65:8f:b0:cc:72:03:26: 22:85:3f:d6:b6:c3:f8:38:86:7c:94:0d:73:87:e1:69:50:21: f5:ef:be:83:19:54:86:9f:d5:14:db:e9:83:9a:62:d3:23:5c: 75:42:3b:92:26:f9:a9:57:66:66:eb:e8:19:88:7e:34:dd:bc: 23:78:18:1b:42:e0:7c:d3:15:be:2c:9a:26:a3:84:27:37:09: 07:a5:8b:12:fc:1a:9b:e1:76:fc:4b:a1:20:f6:2b:ad:f0:69: 6d:8d:f4:6f:71:41:04:92:0c:84:0e:cc:26:12:69:25:08:f2: 5a:a8:2b:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebCot+JJy4VMO8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk M2ZhMzg3OTMtNTlhNS00MzY4LThlNDAtMDA3ODMwMTRkNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/T9tmHmLPyRGQvU7pLhqfxerYCVzpenhRHV Vqm22a4NHswfIRKjaJcN9t+1ZQQXjUSbS4IKvR0cIp0jNy+HDz08AmuD7CYnDX20 VbF4NMMTpbIrYkayjViXzDMnFx2DGDvJw6VVJTgJsKA3Xiej7SRyGKNUiC4zAWvz qadmBpjbCud3Z5ZMIOZ5hAmFuHNDLX8BbZ+R9JryryuP3dLu6SwVrNDiAsjE7XIp SsIOJd4H9pw18QtPwNF0an/zdlUqNUry838RcinLchU+rSacqMV9Glrc6VC5R6lD BQrctrTr4UQ9DMZdy2MytEEP6UiLQ7LEtF56UuCAt0uLW+rkqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZBsKmHIEMqo4YBxNT5O8BSxd8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTA0YzQ5ZDktODQ4ZC0z MTI5LThjMzQtNzU2NTk1NmY1MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGMv+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALr8RC7Ck7oXA7N35/tdhlMXEXPoUsMMQA5WTYD0Yx+xGbz2yMZxVUle WwOoVsWydQ6o5BEzgbxheMAlZy8sJYCYcgGcJgc5P+h7QH5sxgtzjuoEtNk/Iu5w 0OOQtRLurZF4fQAX6Yvoa37B1qEcZu47t9pTn/AQxJKUTN9lRTe+N9gqAIQO6irS ZY+wzHIDJiKFP9a2w/g4hnyUDXOH4WlQIfXvvoMZVIaf1RTb6YOaYtMjXHVCO5Im +alXZmbr6BmIfjTdvCN4GBtC4HzTFb4smiajhCc3CQelixL8GpvhdvxLoSD2K63w aW2N9G9xQQSSDIQOzCYSaSUI8lqoK0Y= -----END CERTIFICATE-----Generated at Sun Apr 6 12:03:58 2025 by rpki-client