$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd7fc393-6727-3dca-8abe-f4ac24fde917.roa File: cd7fc393-6727-3dca-8abe-f4ac24fde917.roa (raw, json) Hash identifier: BBQM6hePInzF3n0xAAqXOukzpOHdhhQoVtg4mpDw2Ac= Subject key identifier: F0:8E:D8:4D:10:C1:FA:F6:C9:7A:DE:F9:95:DD:13:F5:AF:32:BE:A9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CA7742ADD977DC2A44C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd7fc393-6727-3dca-8abe-f4ac24fde917.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 50.232.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:a7:74:2a:dd:97:7d:c2:a4:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=7a241c25-4cef-4294-b90d-f5f3f58941cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:94:39:b5:fb:ce:ae:85:92:54:1c:35:49:72: 32:39:2f:3f:80:ea:65:48:6b:bb:a3:0a:e5:30:38: cc:b3:73:b4:a5:b4:82:49:d9:e1:81:e2:99:3b:61: 35:85:97:5f:88:ae:26:2d:06:87:f2:77:0e:0d:1f: 76:1a:bc:47:9a:24:9f:ee:d0:02:0d:6e:08:fd:da: c0:4b:e2:42:c7:99:42:47:05:98:3d:05:e4:c3:97: 3b:8b:df:5f:e9:b0:43:f3:72:10:73:db:de:a7:8a: 70:81:51:43:d9:ff:b6:b7:6e:2e:eb:b8:9e:bd:e7: 20:91:20:6a:b3:53:5c:f1:99:72:09:2f:fd:8d:ee: 35:57:6f:ee:77:6a:b2:b9:4c:79:17:14:c6:fe:a7: 11:36:23:b5:8f:34:ec:f6:3b:aa:8a:38:42:bd:19: 65:18:d0:a8:9c:ff:5e:22:2f:6e:75:22:ed:d4:8f: 09:bf:42:b8:93:e3:29:ec:5d:f1:1a:37:54:c9:3a: da:34:4f:ce:04:8c:7d:3a:d2:71:97:0b:3a:05:1f: ec:7e:96:2b:89:45:b8:2c:a4:7e:a3:59:96:83:87: 6e:ec:c8:1d:44:91:81:47:80:1a:5c:fc:d4:23:0b: bc:8b:71:fd:11:eb:7c:36:85:08:13:43:2d:04:d2: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8E:D8:4D:10:C1:FA:F6:C9:7A:DE:F9:95:DD:13:F5:AF:32:BE:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd7fc393-6727-3dca-8abe-f4ac24fde917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.232.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0a:48:8e:1d:1a:08:02:5e:1c:41:a0:f2:b9:9c:fe:63:b7: c3:72:01:7f:3d:84:ea:c1:87:26:d3:fe:33:70:0b:44:f9:73: 6a:bc:3c:ea:87:6a:c0:ee:f4:d1:22:e2:6a:68:b9:4e:0f:fe: d2:5d:60:bb:51:b9:83:3e:c9:fc:33:fd:d5:98:2e:1d:71:bf: ed:f8:29:79:2b:79:60:6e:a5:e9:2d:2b:31:f7:44:13:ca:bd: 91:0a:f4:f8:1b:35:11:c2:b6:b3:42:18:5d:d5:e3:fa:e1:41: 50:e5:31:59:57:ae:1e:9f:9a:03:a9:ed:0c:93:83:be:94:d5: b8:ab:c4:ab:5a:b7:67:81:12:e2:a6:44:8a:39:a0:5a:83:bf: 5a:d7:fe:7f:65:1d:fc:e4:1d:cb:0a:71:1d:aa:86:69:77:29: 49:22:92:76:4d:a9:17:6f:8c:32:52:74:65:0d:f7:6e:96:55: 5b:e0:c1:1c:64:58:a3:94:37:92:5c:bb:4d:b7:95:6e:2a:34: 63:dd:9d:73:71:09:c3:e7:b7:e7:5e:b7:07:8c:3f:5e:dd:d9: 9d:1d:3a:8f:23:5c:97:ee:05:75:fc:6b:a3:9f:af:1d:ab:a6: ca:4f:46:a4:9b:77:f3:50:60:02:6d:45:a8:90:ba:39:30:0b: 83:ab:55:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebKd0Kt2XfcKkTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk N2EyNDFjMjUtNGNlZi00Mjk0LWI5MGQtZjVmM2Y1ODk0MWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZQ5tfvOroWSVBw1SXIyOS8/gOplSGu7owrl MDjMs3O0pbSCSdnhgeKZO2E1hZdfiK4mLQaH8ncODR92GrxHmiSf7tACDW4I/drA S+JCx5lCRwWYPQXkw5c7i99f6bBD83IQc9vep4pwgVFD2f+2t24u67ievecgkSBq s1Nc8ZlyCS/9je41V2/ud2qyuUx5FxTG/qcRNiO1jzTs9juqijhCvRllGNConP9e Ii9udSLt1I8Jv0K4k+Mp7F3xGjdUyTraNE/OBIx9OtJxlws6BR/sfpYriUW4LKR+ o1mWg4du7MgdRJGBR4AaXPzUIwu8i3H9Eet8NoUIE0MtBNIviwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCO2E0Qwfr2yXre+ZXdE/WvMr6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Q3ZmMzOTMtNjcyNy0z ZGNhLThhYmUtZjRhYzI0ZmRlOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIKSI4dGggCXhxBoPK5nP5jt8NyAX89hOrBhybT/jNwC0T5c2q8POqH asDu9NEi4mpouU4P/tJdYLtRuYM+yfwz/dWYLh1xv+34KXkreWBupektKzH3RBPK vZEK9PgbNRHCtrNCGF3V4/rhQVDlMVlXrh6fmgOp7QyTg76U1birxKtat2eBEuKm RIo5oFqDv1rX/n9lHfzkHcsKcR2qhml3KUkiknZNqRdvjDJSdGUN926WVVvgwRxk WKOUN5Jcu023lW4qNGPdnXNxCcPnt+detweMP17d2Z0dOo8jXJfuBXX8a6Ofrx2r pspPRqSbd/NQYAJtRaiQujkwC4OrVVw= -----END CERTIFICATE-----Generated at Mon Apr 7 06:22:50 2025 by rpki-client