$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b16d70e9-d31c-385d-a20e-14dbc1a8613c.roa File: b16d70e9-d31c-385d-a20e-14dbc1a8613c.roa (raw, json) Hash identifier: z163LRYqWZ9DXOdc35pxTKPu7joeV58+e0V4CTNZflg= Subject key identifier: 83:D3:68:A1:A7:EF:C8:BE:19:45:69:A8:FB:5C:0B:41:F1:28:8C:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C6E9EADDB88A9C353F2E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b16d70e9-d31c-385d-a20e-14dbc1a8613c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 50.222.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:6e:9e:ad:db:88:a9:c3:53:f2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=d0a23ff9-0b35-4f8e-84c7-7d3f13d8e2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fc:c8:c8:ab:ce:55:7b:61:12:91:7f:1a:5a: f0:31:b4:1c:fe:c5:c0:7e:92:e2:ba:c7:49:81:93: 78:23:65:8f:8f:08:3c:07:c4:9f:75:d2:51:01:71: fe:78:97:83:19:59:a5:ae:d2:7d:ce:4c:f7:a8:7e: 20:56:68:6e:17:ba:2a:e1:29:4b:85:87:f5:5a:7b: 59:14:17:39:f0:33:ee:ce:73:fd:9f:b9:a2:5c:d2: eb:c6:54:2f:7b:26:ff:05:c5:12:d8:fe:de:f5:61: b2:e2:53:f2:5c:76:aa:8a:4d:e4:04:a6:d7:67:16: 41:42:c1:0a:18:61:c4:e7:1a:ff:a0:b7:29:a0:da: 68:3c:77:5c:d6:dd:c5:ec:18:49:f9:1a:dc:f2:2a: 64:13:96:6e:7c:f3:e9:eb:71:0b:c6:07:06:ab:44: c6:2c:37:20:0f:4e:e5:67:5b:d1:b3:fb:4a:60:c0: 59:ad:5e:56:a5:81:d2:c2:be:bd:ea:f1:69:24:cd: c0:e9:43:cd:2d:6e:1b:92:12:76:99:af:ab:39:e6: 99:44:34:b3:44:38:ad:36:2a:8a:7a:2a:02:36:67: 50:e6:d4:3d:35:dc:2c:34:07:28:8b:9b:d0:a6:79: 6f:ed:df:8e:7c:1d:16:6a:09:d5:34:ad:a9:04:87: 38:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D3:68:A1:A7:EF:C8:BE:19:45:69:A8:FB:5C:0B:41:F1:28:8C:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b16d70e9-d31c-385d-a20e-14dbc1a8613c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.222.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b3:17:cc:89:e5:84:88:db:45:b8:7f:15:63:6b:aa:99:b6: de:c8:98:7b:4d:94:fc:97:28:45:f9:2d:7e:8d:c2:c8:d0:69: 4d:96:cc:23:d7:d2:b5:4e:f5:d6:aa:49:84:91:f2:ea:c1:ef: 97:cd:c4:17:5d:03:c2:7f:bf:bf:e3:27:98:b5:20:ad:46:ae: 68:a4:c4:b8:9d:c6:bc:d4:24:6e:47:f8:68:6c:a0:3a:90:46: 7e:6f:42:d1:17:0a:e6:db:09:e8:f6:60:4b:88:a5:63:2f:a5: b9:f8:29:f9:52:c1:ab:44:64:bf:d0:fc:eb:d4:52:b7:fe:10: f2:0e:a3:09:02:c4:c8:05:52:c7:76:9b:4f:54:09:e6:df:1f: 35:4e:2d:c2:0c:c9:10:d2:79:36:97:c8:f4:5a:24:f2:14:96: 43:99:a8:1a:c9:52:57:cc:f0:7c:47:83:74:f8:47:6a:3d:64: 4a:73:5f:2c:fa:f2:e8:3d:ea:13:a3:e2:8a:e8:0c:ed:78:c2: b3:24:e1:1f:7c:bb:25:10:05:9d:26:f7:63:c2:69:91:2d:8d: 86:a1:e2:5c:c1:20:81:8d:7c:fd:34:96:4c:6d:ba:44:89:97: 2e:da:22:35:06:1a:64:34:a1:25:b0:67:40:ac:ed:47:52:1e: 5a:21:1b:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebG6erduIqcNT8uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDBhMjNmZjktMGIzNS00ZjhlLTg0YzctN2QzZjEzZDhlMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvzIyKvOVXthEpF/GlrwMbQc/sXAfpLiusdJ gZN4I2WPjwg8B8SfddJRAXH+eJeDGVmlrtJ9zkz3qH4gVmhuF7oq4SlLhYf1WntZ FBc58DPuznP9n7miXNLrxlQveyb/BcUS2P7e9WGy4lPyXHaqik3kBKbXZxZBQsEK GGHE5xr/oLcpoNpoPHdc1t3F7BhJ+Rrc8ipkE5ZufPPp63ELxgcGq0TGLDcgD07l Z1vRs/tKYMBZrV5WpYHSwr696vFpJM3A6UPNLW4bkhJ2ma+rOeaZRDSzRDitNiqK eioCNmdQ5tQ9NdwsNAcoi5vQpnlv7d+OfB0WagnVNK2pBIc42QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPTaKGn78i+GUVpqPtcC0HxKIyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjE2ZDcwZTktZDMxYy0z ODVkLWEyMGUtMTRkYmMxYTg2MTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMt53MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCzF8yJ5YSI20W4fxVja6qZtt7ImHtNlPyXKEX5LX6NwsjQaU2WzCPX 0rVO9daqSYSR8urB75fNxBddA8J/v7/jJ5i1IK1GrmikxLidxrzUJG5H+GhsoDqQ Rn5vQtEXCubbCej2YEuIpWMvpbn4KflSwatEZL/Q/OvUUrf+EPIOowkCxMgFUsd2 m09UCebfHzVOLcIMyRDSeTaXyPRaJPIUlkOZqBrJUlfM8HxHg3T4R2o9ZEpzXyz6 8ug96hOj4oroDO14wrMk4R98uyUQBZ0m92PCaZEtjYah4lzBIIGNfP00lkxtukSJ ly7aIjUGGmQ0oSWwZ0Cs7UdSHlohGxc= -----END CERTIFICATE-----Generated at Sun Apr 6 22:40:28 2025 by rpki-client