$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb269971-5b47-37e9-9183-7eed2d8e4522.roa File: cb269971-5b47-37e9-9183-7eed2d8e4522.roa (raw, json) Hash identifier: FfXE8b+AwrNlSgAk53MClrySaWp+Mk40rfUihPbu4ag= Subject key identifier: C6:FB:C7:70:DB:1B:3C:18:37:E5:07:8F:30:EF:B5:61:68:F2:5F:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CCCC36EF4CB23548C7E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb269971-5b47-37e9-9183-7eed2d8e4522.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 20458 IP address blocks: 50.236.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:cc:c3:6e:f4:cb:23:54:8c:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=1f0f815d-fdff-44be-be40-9efa2630125a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:95:32:59:a0:5b:f7:56:90:35:77:24:2d: 73:be:ad:68:27:99:9b:19:f5:f8:43:cb:b7:11:fc: 9b:41:9f:6c:dd:68:c1:66:0f:0f:29:12:d5:cf:7e: 52:21:8f:16:16:8d:52:b9:a2:7f:f3:55:8c:12:1d: 6d:0d:82:ad:5e:1d:70:e3:ae:23:37:fc:ee:37:51: 14:ad:4b:9f:d4:af:cf:bf:7e:ec:83:f0:13:8d:c2: 00:3d:9d:c8:1c:9c:cf:e8:c4:52:1a:c7:85:48:3a: 8f:4b:34:d3:f6:8c:f4:a1:18:33:8e:4d:a3:8e:22: 64:35:47:86:77:a4:bd:15:7c:e4:ed:69:b1:41:0a: fa:9d:a0:23:60:7c:4b:01:c5:90:be:6c:6b:1c:23: 96:fb:57:3b:29:1b:87:13:24:0e:65:e0:de:7c:44: 6f:da:f1:03:10:6d:d5:11:15:8f:20:6d:5a:0e:a8: 91:27:10:6f:fb:72:1f:19:e1:b2:e7:2c:4c:86:9b: 5d:23:9b:60:0e:9c:d4:70:6b:21:95:6f:15:45:46: 67:b9:e6:c4:3e:fd:a6:c5:13:53:e0:d8:74:3e:f7: 49:65:71:d8:59:46:3c:0c:ec:7a:af:15:24:ba:25: 23:5f:98:ec:39:e4:a1:28:d1:71:6a:d6:2e:42:ff: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FB:C7:70:DB:1B:3C:18:37:E5:07:8F:30:EF:B5:61:68:F2:5F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb269971-5b47-37e9-9183-7eed2d8e4522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.236.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:38:bc:00:8c:20:58:fb:e0:ea:10:89:8d:11:3e:ad:bf:65: 1a:95:36:0d:cb:01:29:c6:c9:07:c1:09:f6:c3:ed:3b:e4:22: ae:51:e8:70:02:20:f5:19:b7:e5:05:a5:b5:d6:cf:9d:b9:66: fc:b8:47:61:d6:ca:ad:f8:dd:14:ff:cb:b3:6c:1a:4a:59:24: c4:15:1c:c6:09:ca:6c:9b:aa:46:f3:29:61:3c:7c:a1:02:55: 44:d1:06:32:7f:a4:d9:bd:15:14:e6:37:6f:8c:f5:6d:4c:84: 0c:a9:a3:6d:24:a1:8b:28:25:c4:95:46:57:61:fc:15:5b:47: 18:16:df:e6:1e:aa:eb:1d:c1:17:fb:3b:73:d4:85:e7:9e:32: 6d:8b:ea:0d:02:a7:66:31:4d:c0:69:c7:89:d5:0a:79:46:99: a4:27:23:16:bd:6b:61:9f:b1:31:1f:e1:6e:e7:34:db:93:88: 2e:2f:5b:0e:e2:67:7d:6f:cc:d1:ab:84:51:14:99:52:a7:28: 22:10:81:cb:d2:f7:17:3d:db:e2:8b:56:77:bf:5d:48:58:db: e7:c8:6e:b1:92:48:c9:18:66:13:77:20:bd:27:b2:93:4a:ee: 69:e6:09:f2:fa:cb:f3:58:6c:45:b6:72:a3:d6:b2:a8:ca:c4: 24:6c:50:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebMzDbvTLI1SMfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MWYwZjgxNWQtZmRmZi00NGJlLWJlNDAtOWVmYTI2MzAxMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi2VMlmgW/dWkDV3JC1zvq1oJ5mbGfX4Q8u3 EfybQZ9s3WjBZg8PKRLVz35SIY8WFo1SuaJ/81WMEh1tDYKtXh1w464jN/zuN1EU rUuf1K/Pv37sg/ATjcIAPZ3IHJzP6MRSGseFSDqPSzTT9oz0oRgzjk2jjiJkNUeG d6S9FXzk7WmxQQr6naAjYHxLAcWQvmxrHCOW+1c7KRuHEyQOZeDefERv2vEDEG3V ERWPIG1aDqiRJxBv+3IfGeGy5yxMhptdI5tgDpzUcGshlW8VRUZnuebEPv2mxRNT 4Nh0PvdJZXHYWUY8DOx6rxUkuiUjX5jsOeShKNFxatYuQv+qwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb7x3DbGzwYN+UHjzDvtWFo8l9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2IyNjk5NzEtNWI0Ny0z N2U5LTkxODMtN2VlZDJkOGU0NTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuzqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU4vACMIFj74OoQiY0RPq2/ZRqVNg3LASnGyQfBCfbD7TvkIq5R6HAC IPUZt+UFpbXWz525Zvy4R2HWyq343RT/y7NsGkpZJMQVHMYJymybqkbzKWE8fKEC VUTRBjJ/pNm9FRTmN2+M9W1MhAypo20koYsoJcSVRldh/BVbRxgW3+YequsdwRf7 O3PUheeeMm2L6g0Cp2YxTcBpx4nVCnlGmaQnIxa9a2GfsTEf4W7nNNuTiC4vWw7i Z31vzNGrhFEUmVKnKCIQgcvS9xc92+KLVne/XUhY2+fIbrGSSMkYZhN3IL0nspNK 7mnmCfL6y/NYbEW2cqPWsqjKxCRsUJw= -----END CERTIFICATE-----Generated at Mon Apr 7 06:36:11 2025 by rpki-client