$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cefb0653-afad-32dd-8324-06a1ef0c7a4a.roa File: cefb0653-afad-32dd-8324-06a1ef0c7a4a.roa (raw, json) Hash identifier: GUAGeaNjd95CQ3YQ+yjDrQttxA0RnVb/Qudwkyx1I3s= Subject key identifier: 4F:77:C0:A0:99:AA:1B:0F:52:74:BB:FF:DB:8C:1E:6E:9F:B6:D4:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C29A4DA900043970FFD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cefb0653-afad-32dd-8324-06a1ef0c7a4a.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 50.170.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:29:a4:da:90:00:43:97:0f:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e342ca47-0d00-45a9-bf8d-0df7da3dedf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bd:37:25:ff:00:43:75:69:5b:5f:00:5d:cd: 65:2d:76:32:1b:8a:f5:9f:9c:75:e1:97:66:bd:d3: bd:40:8e:67:65:81:d8:e0:b4:df:0a:b2:36:a3:d6: c7:81:e2:03:68:3e:1f:d3:d3:61:09:ac:ec:5f:97: 76:c9:c7:9a:88:84:e9:d0:51:b7:8d:ac:cf:04:0b: 6b:9d:0c:be:67:4c:04:7f:76:35:d1:af:88:31:4e: c6:e5:ec:d2:2b:2d:26:d7:2f:a0:f4:6f:e4:1e:36: 7f:4b:19:a4:73:ae:7f:fe:78:a1:b4:42:08:e2:15: 73:51:a6:44:a2:67:dd:a6:3c:1c:68:c6:dc:d0:02: 95:06:cc:3e:75:9e:8f:f0:99:1c:eb:2e:3b:b3:65: a9:d7:83:5e:3b:ce:8e:31:91:62:29:aa:ba:7a:de: 20:82:33:9b:8e:03:a4:9e:db:1f:22:4c:e6:c1:d9: 80:d2:93:11:ab:2d:df:52:b4:a2:9c:62:fc:36:4d: 53:9b:f1:ad:97:1f:26:ca:a4:7d:2b:44:db:01:d5: 07:8c:02:e4:97:43:58:95:91:09:fe:9b:b7:03:5e: de:77:d9:d8:53:79:f9:f2:39:01:bf:37:d7:96:ed: f1:6d:bb:ed:ca:50:31:f0:21:64:8c:2e:a4:6b:5d: b1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:77:C0:A0:99:AA:1B:0F:52:74:BB:FF:DB:8C:1E:6E:9F:B6:D4:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cefb0653-afad-32dd-8324-06a1ef0c7a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.170.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:8a:bd:13:c6:ff:76:75:18:37:d5:4c:97:49:6b:c4:8c:f7: 0a:a2:12:ab:74:8f:11:7f:02:7e:d3:03:12:85:8a:10:36:1e: ab:a4:dc:86:91:91:f5:f8:06:35:26:d1:7c:63:c0:b3:bc:d0: 18:cf:33:31:1f:63:74:8f:ef:75:68:e8:e5:95:a7:7f:99:13: 1a:54:9d:c0:65:cd:3d:85:aa:b6:4a:bb:7b:43:34:de:99:5c: 74:3d:aa:94:f4:c0:82:2d:f2:f3:06:ba:4f:e3:22:c6:e1:59: ec:a3:03:8e:e0:63:8d:ec:07:28:7f:33:eb:b3:35:5c:47:21: d5:f5:2a:8e:10:61:c6:39:1c:ad:99:84:1a:57:08:9b:7a:b8: 91:99:df:e0:5b:7a:63:3f:9d:be:eb:c8:5d:8a:0b:30:91:15: aa:6a:74:d3:ec:3f:ff:70:86:58:d4:bb:b7:bc:da:28:8d:e0: 9e:fb:04:42:76:da:09:a6:1d:6a:de:6c:94:90:b5:fa:73:44: 0b:f1:ad:45:e9:65:74:6b:21:f6:36:c4:62:3d:53:a2:94:38: 3a:3f:7d:db:9d:6a:20:9c:9a:4c:3d:05:a5:d2:0a:5e:6e:bb: c6:ac:08:41:d3:2e:0a:fd:19:d9:a8:16:6d:6d:39:4c:48:4e: da:ef:f9:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebCmk2pAAQ5cP/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZTM0MmNhNDctMGQwMC00NWE5LWJmOGQtMGRmN2RhM2RlZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr03Jf8AQ3VpW18AXc1lLXYyG4r1n5x14Zdm vdO9QI5nZYHY4LTfCrI2o9bHgeIDaD4f09NhCazsX5d2yceaiITp0FG3jazPBAtr nQy+Z0wEf3Y10a+IMU7G5ezSKy0m1y+g9G/kHjZ/Sxmkc65//nihtEII4hVzUaZE omfdpjwcaMbc0AKVBsw+dZ6P8Jkc6y47s2Wp14NeO86OMZFiKaq6et4ggjObjgOk ntsfIkzmwdmA0pMRqy3fUrSinGL8Nk1Tm/Gtlx8myqR9K0TbAdUHjALkl0NYlZEJ /pu3A17ed9nYU3n58jkBvzfXlu3xbbvtylAx8CFkjC6ka12xUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE93wKCZqhsPUnS7/9uMHm6fttS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2VmYjA2NTMtYWZhZC0z MmRkLTgzMjQtMDZhMWVmMGM3YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMqpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2KvRPG/3Z1GDfVTJdJa8SM9wqiEqt0jxF/An7TAxKFihA2Hquk3IaR kfX4BjUm0XxjwLO80BjPMzEfY3SP73Vo6OWVp3+ZExpUncBlzT2FqrZKu3tDNN6Z XHQ9qpT0wIIt8vMGuk/jIsbhWeyjA47gY43sByh/M+uzNVxHIdX1Ko4QYcY5HK2Z hBpXCJt6uJGZ3+BbemM/nb7ryF2KCzCRFapqdNPsP/9whljUu7e82iiN4J77BEJ2 2gmmHWrebJSQtfpzRAvxrUXpZXRrIfY2xGI9U6KUODo/fdudaiCcmkw9BaXSCl5u u8asCEHTLgr9GdmoFm1tOUxITtrv+Vg= -----END CERTIFICATE-----Generated at Sun Apr 6 09:38:04 2025 by rpki-client