$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c81631be-9faf-37a2-a6e8-b31f82f29850.roa File: c81631be-9faf-37a2-a6e8-b31f82f29850.roa (raw, json) Hash identifier: cygksYV72qpQePz6J0AYrqC9S4NMtmO5j29ZyK1CF84= Subject key identifier: CD:EF:C0:81:92:4C:81:CF:29:84:71:D3:B2:70:15:B5:42:B8:B0:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F65BEDD1DC357C1F630ECB60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c81631be-9faf-37a2-a6e8-b31f82f29850.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 33491 IP address blocks: 50.171.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ed:d1:dc:35:7c:1f:63:0e:cb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=9f28daa0-cd56-41fe-b8ef-99f188c7543d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6b:a3:96:af:cf:9d:80:a3:29:00:77:c4:76: 71:fe:69:89:2b:bc:78:2e:bf:25:f2:24:7d:e4:1b: 0c:d2:98:cd:34:92:ec:65:a1:7a:39:e6:e4:48:d0: 72:ed:ec:75:e2:4f:6a:0e:7b:a7:13:55:86:07:e6: ce:03:61:06:0a:2e:99:5f:a3:f4:21:6a:f4:02:4a: d8:ca:1c:a5:81:5c:04:26:3e:1c:d6:9e:d1:ae:e8: 95:21:10:27:5e:11:f1:76:88:d2:e8:ab:ed:0a:b2: b1:de:4d:55:9a:3c:9d:3f:d5:39:26:e7:d2:bc:cd: 79:0c:b5:92:f3:47:d1:a5:6b:f8:69:1a:23:bb:c5: 82:03:a2:1c:ec:33:15:f7:be:8d:db:66:ec:8b:f6: 43:b5:19:91:94:55:60:6b:2b:05:fe:1e:08:6d:00: 78:c4:00:60:51:09:34:66:f1:2f:5f:c8:fb:57:aa: 9b:ea:df:d0:d2:81:2a:03:69:d3:29:a6:40:e6:95: 7b:b1:af:e6:fc:a1:f5:84:8c:98:a4:2f:a0:54:bf: 25:b8:fb:ce:4a:32:ef:bf:d2:09:e5:1b:b9:21:dd: c4:0f:d5:df:ba:c4:fe:d2:5c:35:d9:c2:9c:63:32: 33:e4:1a:09:d2:f9:36:41:f3:8b:7d:94:f4:b8:ad: 85:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EF:C0:81:92:4C:81:CF:29:84:71:D3:B2:70:15:B5:42:B8:B0:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c81631be-9faf-37a2-a6e8-b31f82f29850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.171.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:4d:2d:90:6e:1f:f0:ef:f0:ac:b0:31:60:29:fb:f4:c8:0b: 57:88:79:c9:ca:4f:87:9f:2d:1f:c0:35:17:ff:76:f8:d6:99: 79:59:78:27:89:7b:4d:fb:db:c3:05:c0:7d:4f:39:60:2f:78: 45:ea:fb:37:62:c9:38:bf:82:c6:80:72:ac:e5:99:eb:bd:fa: cd:34:27:03:f4:02:cc:d3:90:02:38:d0:4e:a5:50:fb:81:d2: 86:53:1e:b6:55:94:1d:3c:e5:f6:f0:47:5b:4b:a6:27:70:ea: d7:3d:f7:66:c5:b4:8d:9d:f1:a2:80:bc:91:c0:05:15:3b:97: de:1d:5a:24:99:8f:b2:5f:a3:df:59:66:fd:5d:4a:d8:92:10: 80:8f:ee:6c:02:c7:ac:22:3c:65:df:aa:66:76:5c:af:88:b0: 7c:82:18:bc:80:c8:05:60:60:d4:fc:b0:d4:95:a5:09:9f:74: 41:c3:68:79:df:3f:bc:4c:e8:27:a6:dd:0a:36:47:c4:e5:2a: 94:a9:f2:c3:ca:19:63:c1:c4:dc:eb:0d:99:c9:e1:9b:a6:5e: a3:f3:b2:cd:b7:12:99:94:11:db:e9:30:08:ef:e2:b2:2c:8a: f8:b7:ec:ef:26:8f:3b:5c:f1:b2:e5:13:0b:d6:8f:84:77:2c: d7:32:72:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+3R3DV8H2MOy2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk OWYyOGRhYTAtY2Q1Ni00MWZlLWI4ZWYtOTlmMTg4Yzc1NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWujlq/PnYCjKQB3xHZx/mmJK7x4Lr8l8iR9 5BsM0pjNNJLsZaF6OebkSNBy7ex14k9qDnunE1WGB+bOA2EGCi6ZX6P0IWr0AkrY yhylgVwEJj4c1p7RruiVIRAnXhHxdojS6KvtCrKx3k1VmjydP9U5JufSvM15DLWS 80fRpWv4aRoju8WCA6Ic7DMV976N22bsi/ZDtRmRlFVgaysF/h4IbQB4xABgUQk0 ZvEvX8j7V6qb6t/Q0oEqA2nTKaZA5pV7sa/m/KH1hIyYpC+gVL8luPvOSjLvv9IJ 5Ru5Id3ED9XfusT+0lw12cKcYzIz5BoJ0vk2QfOLfZT0uK2FcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3vwIGSTIHPKYRx07JwFbVCuLC1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzgxNjMxYmUtOWZhZi0z N2EyLWE2ZTgtYjMxZjgyZjI5ODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMqvHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVNLZBuH/Dv8KywMWAp+/TIC1eIecnKT4efLR/ANRf/dvjWmXlZeCeJ e03728MFwH1POWAveEXq+zdiyTi/gsaAcqzlmeu9+s00JwP0AszTkAI40E6lUPuB 0oZTHrZVlB085fbwR1tLpidw6tc992bFtI2d8aKAvJHABRU7l94dWiSZj7Jfo99Z Zv1dStiSEICP7mwCx6wiPGXfqmZ2XK+IsHyCGLyAyAVgYNT8sNSVpQmfdEHDaHnf P7xM6Cem3Qo2R8TlKpSp8sPKGWPBxNzrDZnJ4ZumXqPzss23EpmUEdvpMAjv4rIs ivi37O8mjztc8bLlEwvWj4R3LNcychk= -----END CERTIFICATE-----Generated at Mon Apr 7 06:09:53 2025 by rpki-client