$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c033a1c5-fbd3-3cc1-bf5d-c639f8cbf81e.roa File: c033a1c5-fbd3-3cc1-bf5d-c639f8cbf81e.roa (raw, json) Hash identifier: wZRYxK4Nx5wIc7gTdhc3KIGpluQPXoC/sWl8sSTFoOs= Subject key identifier: 94:57:78:66:DA:0B:22:C7:A5:D3:22:BE:00:52:33:BC:9F:BC:3A:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E34D7EFBA0D6699C4F700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c033a1c5-fbd3-3cc1-bf5d-c639f8cbf81e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 30103 IP address blocks: 50.239.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:34:d7:ef:ba:0d:66:99:c4:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=d30a6d2e-74a0-4b0d-b6cf-033635f74550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:78:49:fd:d9:76:47:6a:6f:66:04:9c:1a:17: 8c:a6:72:61:27:39:cd:56:f7:d2:ed:e2:c3:85:36: ff:54:d6:c1:b8:61:ae:db:b2:d8:f0:80:90:c0:bf: 3a:36:11:6f:a4:12:0c:2d:02:26:3b:31:31:5b:d8: 7a:bc:8e:b0:12:08:27:0e:22:7e:30:7e:e6:e1:c9: 9c:b0:98:de:3a:45:ae:5d:32:cc:eb:89:fb:8a:f0: 6a:26:86:b4:7e:0c:7b:18:ba:e7:a4:65:2e:31:b1: c2:87:ed:81:7b:45:c9:82:09:16:f7:04:c6:94:c4: 0d:cc:e7:e7:36:8a:60:da:49:fc:36:a8:f8:db:cf: 0d:68:01:ed:c6:21:dd:cc:66:4c:9f:92:e7:d8:4a: d4:3c:d5:83:96:a2:e2:21:de:05:94:c6:20:bf:c5: 0c:c1:eb:49:33:92:7e:ab:a8:05:71:40:5f:92:d4: 70:c1:72:7e:ce:b2:94:56:be:e1:0f:0c:a5:67:be: 1d:46:11:13:15:b5:37:6a:05:d3:e4:f7:3c:1d:57: e6:ae:07:f8:c6:2d:6c:32:34:76:c3:19:13:71:89: 02:ae:6f:df:6a:89:93:2a:95:10:36:86:4a:43:73: 61:a9:63:dc:e7:cd:36:e8:43:e5:43:44:a4:d0:a2: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:78:66:DA:0B:22:C7:A5:D3:22:BE:00:52:33:BC:9F:BC:3A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c033a1c5-fbd3-3cc1-bf5d-c639f8cbf81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.239.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:93:46:65:cd:79:25:40:a0:67:2b:33:50:70:ca:33:2f:64: f0:ac:ce:2f:1f:9e:39:c8:bc:58:2b:9f:d2:ff:dc:61:9d:00: 59:1e:9d:47:27:a7:fa:5f:54:2f:3d:7d:4e:9f:d8:ae:da:e3: 74:5c:b4:4a:7b:18:a4:d8:bc:35:4f:f2:ea:24:30:be:8f:24: e5:91:9d:6c:f3:d0:6d:b6:05:2b:6a:38:92:c5:62:36:5b:0f: dc:af:b4:a6:5c:84:b8:45:d6:a5:e4:35:7b:f1:a2:21:2c:f5: 0b:90:c7:2d:a4:e8:a7:56:c2:de:84:43:a4:4b:ac:d4:23:a2: 2b:6b:ac:c1:9e:12:db:aa:16:d7:2f:d2:4f:53:dd:6c:74:a7: 32:79:9b:b2:6e:c7:48:a9:73:a4:c6:b2:8d:b4:ac:1f:b5:b6: 3d:3d:92:13:5f:88:78:ac:45:ee:5c:5c:ef:2e:7a:70:bc:2c: 96:99:ea:3a:82:49:e8:22:7f:e5:8d:2b:2e:57:21:fb:8f:9b: 2d:62:3b:7f:62:a1:df:a5:04:13:e9:8e:29:96:bd:92:64:bd: 02:9d:0e:1c:54:cc:fd:ba:fb:f2:65:59:b6:53:a5:56:22:34: c3:d1:f4:6f:02:9e:07:95:ee:f2:87:2d:b9:b8:03:45:8e:ba: 3b:35:80:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebjTX77oNZpnE9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDMwYTZkMmUtNzRhMC00YjBkLWI2Y2YtMDMzNjM1Zjc0NTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3hJ/dl2R2pvZgScGheMpnJhJznNVvfS7eLD hTb/VNbBuGGu27LY8ICQwL86NhFvpBIMLQImOzExW9h6vI6wEggnDiJ+MH7m4cmc sJjeOkWuXTLM64n7ivBqJoa0fgx7GLrnpGUuMbHCh+2Be0XJggkW9wTGlMQNzOfn Nopg2kn8Nqj4288NaAHtxiHdzGZMn5Ln2ErUPNWDlqLiId4FlMYgv8UMwetJM5J+ q6gFcUBfktRwwXJ+zrKUVr7hDwylZ74dRhETFbU3agXT5Pc8HVfmrgf4xi1sMjR2 wxkTcYkCrm/faomTKpUQNoZKQ3NhqWPc58026EPlQ0Sk0KI/LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRXeGbaCyLHpdMivgBSM7yfvDphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzAzM2ExYzUtZmJkMy0z Y2MxLWJmNWQtYzYzOWY4Y2JmODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMu/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKTRmXNeSVAoGcrM1BwyjMvZPCszi8fnjnIvFgrn9L/3GGdAFkenUcn p/pfVC89fU6f2K7a43RctEp7GKTYvDVP8uokML6PJOWRnWzz0G22BStqOJLFYjZb D9yvtKZchLhF1qXkNXvxoiEs9QuQxy2k6KdWwt6EQ6RLrNQjoitrrMGeEtuqFtcv 0k9T3Wx0pzJ5m7Jux0ipc6TGso20rB+1tj09khNfiHisRe5cXO8uenC8LJaZ6jqC Segif+WNKy5XIfuPmy1iO39iod+lBBPpjimWvZJkvQKdDhxUzP26+/JlWbZTpVYi NMPR9G8CngeV7vKHLbm4A0WOujs1gDE= -----END CERTIFICATE-----Generated at Sun Apr 6 19:05:07 2025 by rpki-client