$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9689e509-b5c1-3243-8e78-eb5a9e760eed.roa File: 9689e509-b5c1-3243-8e78-eb5a9e760eed.roa (raw, json) Hash identifier: c3SK++e1TRG4ORwkbDPr7b976hpI81hfnOfphx/+D68= Subject key identifier: 4A:24:8B:E4:57:02:B6:79:B9:26:1A:B9:1E:84:F4:04:85:56:99:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E327DA04FBD9E31DFC4B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9689e509-b5c1-3243-8e78-eb5a9e760eed.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 20381 IP address blocks: 50.202.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:32:7d:a0:4f:bd:9e:31:df:c4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=8e8adf76-253c-41a0-87fc-822860982d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f6:13:90:10:4f:c4:b9:b9:0f:dc:1f:31:05: ff:6b:7d:31:2a:ce:6d:4e:b4:6e:8c:5a:83:c1:75: 86:1e:33:9d:32:0f:c2:fc:62:fc:04:64:92:fd:0d: 2c:a4:28:5e:e0:1d:e2:ff:59:72:b6:c9:27:86:a6: a7:04:5d:d2:33:35:fe:a5:c6:43:cd:07:64:4c:d7: d9:58:67:d7:ff:0e:10:b6:db:69:04:80:7f:0b:ee: e4:6a:96:10:5c:e3:6c:80:cf:10:cb:6c:e5:fa:04: 56:01:32:18:6d:82:1b:47:c0:26:6b:7b:35:1f:e4: 4d:c4:92:56:cd:18:a0:48:17:a6:4c:55:64:dd:c7: 21:1e:e5:37:e8:04:d1:d9:74:59:8b:05:09:50:c3: 3f:da:3d:f0:cc:0c:f3:de:ee:da:27:ae:38:f1:ab: 83:d3:f0:45:eb:0d:50:27:a8:03:2f:d6:01:9c:a5: 43:7a:8d:30:c8:24:b6:f5:a0:f7:fd:30:b4:9d:01: 5d:4b:6a:b4:ae:10:12:70:55:14:2d:de:44:fa:4a: 8e:ca:d9:2d:7b:f5:94:72:31:8f:9f:f2:b0:12:a5: 87:f9:10:a5:a9:52:34:8d:c3:22:59:9b:4b:4d:83: db:01:2b:b9:1d:d0:20:a1:16:9a:e7:da:c0:12:24: 87:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:24:8B:E4:57:02:B6:79:B9:26:1A:B9:1E:84:F4:04:85:56:99:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9689e509-b5c1-3243-8e78-eb5a9e760eed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.202.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c2:16:9d:ec:79:62:ff:58:b4:bf:fc:2c:64:60:99:62:25: b3:98:1d:fb:a2:5d:8a:55:25:c7:fb:0c:37:83:a8:44:cf:d6: 1c:31:2e:79:09:06:e4:9e:5e:bc:6e:d2:17:8b:9d:e2:63:7a: fe:a3:62:e7:0e:5b:8e:34:46:03:0c:93:12:1f:98:64:d4:57: a6:ed:e6:39:0b:9a:85:c0:00:18:61:89:e5:80:c7:33:8a:25: c0:95:1b:f3:a4:c5:9f:09:2d:b2:b1:3f:ee:80:06:3b:6d:3f: 33:70:9d:6c:52:76:d3:1b:25:58:a0:d5:8e:c4:61:15:c9:b7: ef:77:28:ff:db:56:da:a6:84:23:cd:cd:ac:da:5d:e4:f7:ec: f8:13:06:8f:12:7c:a5:3b:a9:cf:17:da:35:b0:4a:b0:8f:6f: 8f:e0:12:20:a9:1b:d2:16:85:6d:74:d6:b1:90:b6:cb:94:b3: 8c:38:a6:5c:54:68:ca:74:6e:06:6b:ae:82:57:53:fe:91:87: bd:78:7b:a9:8d:e7:11:f7:76:a9:79:dc:2e:6b:c1:87:a7:1b: fb:87:9f:68:ea:94:9f:a4:72:56:03:10:4b:8e:25:7b:ee:35: ac:d1:a0:cf:c8:49:3e:8f:99:1f:2a:1e:4d:82:11:23:4b:95: ff:96:97:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebjJ9oE+9njHfxLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OGU4YWRmNzYtMjUzYy00MWEwLTg3ZmMtODIyODYwOTgyZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvYTkBBPxLm5D9wfMQX/a30xKs5tTrRujFqD wXWGHjOdMg/C/GL8BGSS/Q0spChe4B3i/1lytsknhqanBF3SMzX+pcZDzQdkTNfZ WGfX/w4QtttpBIB/C+7kapYQXONsgM8Qy2zl+gRWATIYbYIbR8Ama3s1H+RNxJJW zRigSBemTFVk3cchHuU36ATR2XRZiwUJUMM/2j3wzAzz3u7aJ6448auD0/BF6w1Q J6gDL9YBnKVDeo0wyCS29aD3/TC0nQFdS2q0rhAScFUULd5E+kqOytkte/WUcjGP n/KwEqWH+RClqVI0jcMiWZtLTYPbASu5HdAgoRaa59rAEiSH8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoki+RXArZ5uSYauR6E9ASFVplEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTY4OWU1MDktYjVjMS0z MjQzLThlNzgtZWI1YTllNzYwZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMsraMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnCFp3seWL/WLS//CxkYJliJbOYHfuiXYpVJcf7DDeDqETP1hwxLnkJ BuSeXrxu0heLneJjev6jYucOW440RgMMkxIfmGTUV6bt5jkLmoXAABhhieWAxzOK JcCVG/OkxZ8JLbKxP+6ABjttPzNwnWxSdtMbJVig1Y7EYRXJt+93KP/bVtqmhCPN zazaXeT37PgTBo8SfKU7qc8X2jWwSrCPb4/gEiCpG9IWhW101rGQtsuUs4w4plxU aMp0bgZrroJXU/6Rh714e6mN5xH3dql53C5rwYenG/uHn2jqlJ+kclYDEEuOJXvu NazRoM/IST6PmR8qHk2CESNLlf+Wl0k= -----END CERTIFICATE-----Generated at Mon Apr 7 16:17:46 2025 by rpki-client