$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa924e5a-beba-37c7-8a39-e60c8ad629e1.roa File: aa924e5a-beba-37c7-8a39-e60c8ad629e1.roa (raw, json) Hash identifier: sRLjwd/fTtMdmJVW51tqEhCRxV5OsQ8ZS89r7A5Hv0Y= Subject key identifier: 06:48:D3:AB:D0:AA:36:0F:17:93:A5:EE:C4:D2:50:19:03:C8:4F:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D2C2178D50EEF43AD4030 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa924e5a-beba-37c7-8a39-e60c8ad629e1.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7725 IP address blocks: 50.204.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:2c:21:78:d5:0e:ef:43:ad:40:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=fcf6eed9-a6fd-4730-b327-d8441bc97466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:12:23:48:28:f1:54:1b:93:e8:58:c3:ac: 07:09:fb:2a:52:1a:4f:ef:49:95:39:ba:a4:4d:c4: fe:8f:a7:f6:48:9e:f6:7c:d7:ac:e7:af:af:85:84: 1b:0a:e3:20:7f:d8:e2:fb:9b:9c:2b:ca:13:ac:25: 62:fb:cc:dd:39:cc:2a:a2:56:5f:c1:33:ca:21:fa: 63:1c:08:9a:99:4b:26:3d:60:d0:7a:ba:7e:9a:c0: f6:bc:4d:78:0b:45:15:f9:5d:ef:62:c0:54:bf:a2: e1:85:d9:4d:46:a3:6b:1c:c6:13:36:2c:61:6e:c2: df:a4:2f:e2:55:d9:ba:23:60:45:4e:eb:2b:09:1c: 09:67:db:c6:02:3f:da:9a:c6:07:50:93:fe:16:7d: a0:be:1e:31:f2:30:94:78:66:23:bf:7b:e4:cb:54: ae:05:3c:d1:97:4a:af:00:53:11:97:31:6e:57:72: 62:0d:a3:ca:52:af:53:58:f2:d1:a0:54:e1:ec:42: e0:aa:7b:14:4b:70:49:3c:67:c5:9e:bb:ba:cd:5e: 1f:95:78:ee:ac:aa:dc:fb:40:be:78:fb:f6:7f:1c: ea:29:b9:a4:17:fa:ed:9b:bc:44:40:cd:7d:25:40: a5:00:5b:16:b9:7c:3d:b9:46:e3:c8:f6:13:7c:3b: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:48:D3:AB:D0:AA:36:0F:17:93:A5:EE:C4:D2:50:19:03:C8:4F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa924e5a-beba-37c7-8a39-e60c8ad629e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.204.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:58:1c:3b:c5:71:06:bf:00:ed:ec:b7:c2:89:e9:37:e0:c5: d9:98:ad:d6:68:bc:f5:11:1d:43:8e:a8:f4:b6:52:37:77:3e: 29:cc:1c:72:fd:13:89:63:48:9d:fd:8a:e7:6d:be:83:fc:e0: d5:c4:cd:89:a4:bd:ef:52:fc:f4:23:39:75:15:e2:51:06:4e: 21:73:03:3f:29:97:53:47:95:aa:5a:89:26:8e:5b:58:dd:46: 3d:17:01:df:29:21:01:87:bf:34:89:f1:b8:66:d5:85:c7:2f: 64:14:14:6a:14:bd:f8:04:a2:9f:69:fa:98:d2:a6:2e:00:ae: 8e:f3:68:22:90:2c:37:e1:16:ba:d2:7b:bb:77:13:65:b0:f2: 0f:c3:e3:e3:eb:aa:cb:15:7e:bd:0c:cf:93:ef:04:62:28:66: 06:b2:2e:64:ec:4c:31:e5:17:fb:31:c4:27:4d:d0:a7:05:6a: fa:4a:c5:4f:61:41:ae:85:cb:79:df:fc:bb:ee:6b:24:c4:c9: 14:f5:7f:33:5b:a8:94:62:8c:81:06:45:2d:5a:10:50:d6:5d: 1e:4b:dc:51:7b:fd:10:65:49:1e:f2:c8:7f:92:9b:12:c9:86: 49:7a:58:14:01:10:fe:2a:c4:8b:96:8c:ee:b9:f4:be:c5:c7: 94:4b:58:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebSwheNUO70OtQDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmNmNmVlZDktYTZmZC00NzMwLWIzMjctZDg0NDFiYzk3NDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw78SI0go8VQbk+hYw6wHCfsqUhpP70mVObqk TcT+j6f2SJ72fNes56+vhYQbCuMgf9ji+5ucK8oTrCVi+8zdOcwqolZfwTPKIfpj HAiamUsmPWDQerp+msD2vE14C0UV+V3vYsBUv6LhhdlNRqNrHMYTNixhbsLfpC/i Vdm6I2BFTusrCRwJZ9vGAj/amsYHUJP+Fn2gvh4x8jCUeGYjv3vky1SuBTzRl0qv AFMRlzFuV3JiDaPKUq9TWPLRoFTh7ELgqnsUS3BJPGfFnru6zV4flXjurKrc+0C+ ePv2fxzqKbmkF/rtm7xEQM19JUClAFsWuXw9uUbjyPYTfDu0RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZI06vQqjYPF5Ol7sTSUBkDyE+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE5MjRlNWEtYmViYS0z N2M3LThhMzktZTYwYzhhZDYyOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMsz5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJYHDvFcQa/AO3st8KJ6TfgxdmYrdZovPURHUOOqPS2Ujd3PinMHHL9 E4ljSJ39iudtvoP84NXEzYmkve9S/PQjOXUV4lEGTiFzAz8pl1NHlapaiSaOW1jd Rj0XAd8pIQGHvzSJ8bhm1YXHL2QUFGoUvfgEop9p+pjSpi4Aro7zaCKQLDfhFrrS e7t3E2Ww8g/D4+PrqssVfr0Mz5PvBGIoZgayLmTsTDHlF/sxxCdN0KcFavpKxU9h Qa6Fy3nf/LvuayTEyRT1fzNbqJRijIEGRS1aEFDWXR5L3FF7/RBlSR7yyH+SmxLJ hkl6WBQBEP4qxIuWjO659L7Fx5RLWJM= -----END CERTIFICATE-----Generated at Mon Apr 7 06:09:07 2025 by rpki-client