$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9efeafc-b4a8-3103-8779-d21778f4fc6c.roa File: c9efeafc-b4a8-3103-8779-d21778f4fc6c.roa (raw, json) Hash identifier: 3AsN8SSS6AXSzhMjRkzLgSIlxz1MC4tCy4XzwlJQvB8= Subject key identifier: C1:51:6A:69:9B:07:99:02:E6:7E:68:D5:7F:7D:5A:91:01:BE:F7:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E21B3511E06253C6AC900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9efeafc-b4a8-3103-8779-d21778f4fc6c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 50.231.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:21:b3:51:1e:06:25:3c:6a:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5f4e92ce-dd0c-418d-aa07-d59054f790bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:fb:e3:64:80:d6:4f:b5:7b:a9:ea:88:34: da:ee:14:ec:8f:dd:fe:d6:27:76:06:58:ac:14:df: 50:f6:e7:e7:ab:16:a6:cb:6b:f9:c9:36:34:c7:e3: 16:dd:37:4d:f8:5e:98:d5:b5:cd:c3:01:ba:a5:bf: b1:44:a9:bb:b5:75:49:8b:0a:84:cb:77:77:03:c4: 38:46:a9:e2:7b:42:84:f7:3b:9c:28:70:6d:54:41: 06:34:28:37:75:ef:88:20:48:02:71:44:73:81:73: ca:f8:d8:b1:51:57:c3:ef:4b:18:09:6d:e8:4a:a6: 4a:b0:38:51:07:13:e6:66:82:f2:39:6e:fc:88:58: 6b:8e:59:d2:53:d6:2a:09:42:3e:f2:3b:2a:e2:78: cd:dc:75:8c:c3:e7:b4:a1:21:48:cd:3a:3c:b4:6d: 71:ff:5f:ac:83:19:a6:a5:ed:ee:f0:7e:5e:75:22: 3b:d3:e3:56:17:3d:46:fd:e7:53:63:fe:47:2d:44: 5f:1e:05:6b:d3:a8:23:9b:08:f6:d8:d9:71:c1:41: 24:8a:5d:38:ab:a5:06:72:22:1a:56:b9:43:6d:3f: 8b:20:46:74:be:ad:c3:95:87:c3:6f:43:8d:db:7e: 42:30:4d:f1:36:27:13:f2:30:d8:ac:c4:d4:e2:a9: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:51:6A:69:9B:07:99:02:E6:7E:68:D5:7F:7D:5A:91:01:BE:F7:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9efeafc-b4a8-3103-8779-d21778f4fc6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.231.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:d7:ee:1d:fc:29:b7:fd:b3:6c:ed:9a:93:61:0a:13:43:d8: 99:0a:ae:23:88:75:bc:f5:69:63:43:b3:df:c6:54:cc:33:68: 0c:78:65:5b:7f:bd:2b:0f:49:d2:dc:36:b9:06:2d:ac:9d:f9: 58:0f:32:ed:9d:1c:95:e7:74:33:24:4b:43:f8:77:32:33:ff: 90:89:77:46:78:7f:d2:f0:08:41:e3:e5:1e:e6:b6:60:eb:6e: e1:cd:12:e0:fa:7a:6f:45:12:e3:b0:4e:bc:d6:0b:60:05:a4: 86:f4:90:f0:fb:16:e7:43:2b:a3:61:59:cd:bf:a9:81:20:9e: 66:66:da:f7:e1:bb:64:a3:ac:49:28:ef:b2:d1:0e:61:34:13: c0:59:b1:29:c2:e2:b5:7a:2f:06:72:e7:34:97:a1:06:45:31: 25:25:c6:be:b4:f0:f2:89:a6:ea:23:a0:e2:8f:57:a0:16:c3: 8c:f1:c8:cd:38:55:c4:7a:bc:30:2b:eb:6c:f0:c7:5c:6f:e7: 63:bf:05:b7:4a:54:39:90:42:bf:86:39:99:93:a2:b8:7d:25: dd:02:fc:e3:11:05:9c:3d:73:8d:a1:4e:d4:b6:6b:12:c9:b2: 14:d7:ad:1b:e3:7a:e4:0a:82:39:49:22:3d:15:97:98:e1:89: 73:03:c9:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebiGzUR4GJTxqyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NWY0ZTkyY2UtZGQwYy00MThkLWFhMDctZDU5MDU0Zjc5MGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmH742SA1k+1e6nqiDTa7hTsj93+1id2Blis FN9Q9ufnqxamy2v5yTY0x+MW3TdN+F6Y1bXNwwG6pb+xRKm7tXVJiwqEy3d3A8Q4 Rqnie0KE9zucKHBtVEEGNCg3de+IIEgCcURzgXPK+NixUVfD70sYCW3oSqZKsDhR BxPmZoLyOW78iFhrjlnSU9YqCUI+8jsq4njN3HWMw+e0oSFIzTo8tG1x/1+sgxmm pe3u8H5edSI70+NWFz1G/edTY/5HLURfHgVr06gjmwj22NlxwUEkil04q6UGciIa VrlDbT+LIEZ0vq3DlYfDb0ON235CME3xNicT8jDYrMTU4qmeOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFRammbB5kC5n5o1X99WpEBvvdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzllZmVhZmMtYjRhOC0z MTAzLTg3NzktZDIxNzc4ZjRmYzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMueaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMPX7h38Kbf9s2ztmpNhChND2JkKriOIdbz1aWNDs9/GVMwzaAx4ZVt/ vSsPSdLcNrkGLayd+VgPMu2dHJXndDMkS0P4dzIz/5CJd0Z4f9LwCEHj5R7mtmDr buHNEuD6em9FEuOwTrzWC2AFpIb0kPD7FudDK6NhWc2/qYEgnmZm2vfhu2SjrEko 77LRDmE0E8BZsSnC4rV6LwZy5zSXoQZFMSUlxr608PKJpuojoOKPV6AWw4zxyM04 VcR6vDAr62zwx1xv52O/BbdKVDmQQr+GOZmTorh9Jd0C/OMRBZw9c42hTtS2axLJ shTXrRvjeuQKgjlJIj0Vl5jhiXMDyXM= -----END CERTIFICATE-----Generated at Sun Apr 6 22:45:02 2025 by rpki-client