$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d047ed57-33e3-38ed-9cd4-b77b88be5e14.roa File: d047ed57-33e3-38ed-9cd4-b77b88be5e14.roa (raw, json) Hash identifier: 2n5oZTkH2qx50eAoinCtA8u74eknSZ+9wBdBpN5w3uQ= Subject key identifier: 6C:8A:6E:6B:91:03:01:4D:23:A0:FF:B0:BC:2E:B6:97:B8:20:B6:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D74F8AFA6FAE67127E380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d047ed57-33e3-38ed-9cd4-b77b88be5e14.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33652 IP address blocks: 50.206.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:74:f8:af:a6:fa:e6:71:27:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e99a580a-1ad5-425a-8e22-84c5eff5bb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:7c:6f:ba:01:69:7e:c1:49:66:72:d2:90: 52:f9:e8:19:bd:6d:5c:1a:1b:b1:14:d6:1c:1a:db: f9:a3:c1:9b:f8:38:04:cb:4c:94:6c:8a:20:74:c3: 90:ef:ab:01:e3:01:40:60:94:72:64:22:ac:a2:77: 34:af:1c:65:1e:f8:7e:07:f9:3f:2e:c7:70:45:05: 62:f2:bb:92:0b:44:93:63:5f:e8:75:77:6c:29:10: 8a:d5:59:af:6c:f6:a0:bc:0f:84:51:0b:63:56:6f: 99:1e:dc:1e:d8:d9:5d:b8:b8:52:88:c4:e4:ec:15: 2b:fc:b1:99:ef:56:a4:97:82:4e:36:32:eb:80:00: ba:9f:e1:67:4a:49:5f:bf:97:23:cd:f4:95:9d:8a: 96:53:f6:9d:32:92:d0:d2:38:ea:90:9c:dc:d7:fd: 5c:52:08:23:3a:6d:1a:51:d8:ab:89:b1:d4:f4:06: ce:b6:19:ae:70:68:66:57:dd:9f:db:a2:6d:8c:29: 54:5f:54:3d:22:03:b4:a9:f0:5f:45:7d:81:87:2b: 86:33:b6:ce:53:9a:d6:91:16:e8:a1:93:23:b5:50: c5:8e:27:8d:70:a4:cd:93:fe:2e:c6:d2:9d:5d:ba: 74:98:97:f5:12:2b:69:da:04:94:81:3d:0c:df:cf: 23:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8A:6E:6B:91:03:01:4D:23:A0:FF:B0:BC:2E:B6:97:B8:20:B6:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d047ed57-33e3-38ed-9cd4-b77b88be5e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.206.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:60:75:93:09:33:83:52:fc:5d:59:16:2b:9c:92:0c:91:13: c2:85:92:67:4a:03:b4:f1:74:c3:d0:78:62:7c:6d:c0:34:22: 5e:a7:84:2b:64:ba:8a:68:38:7f:54:86:a2:20:da:a8:83:9d: 62:34:d4:f0:67:04:ce:92:91:2b:15:17:6c:96:1f:fa:ba:fe: f3:d4:d5:a3:92:9e:a4:f9:67:a8:38:71:80:cc:8e:2f:d0:33: ce:41:eb:52:13:7b:5a:ef:1d:12:1a:9d:6d:1b:20:39:fd:ea: cd:f0:47:23:2a:64:18:15:56:cf:de:cc:8d:af:5b:05:ae:87: bc:bf:9b:29:1c:da:e9:9b:e2:3f:04:0c:a5:37:20:58:94:9b: 44:3f:33:26:85:c5:4f:cd:48:c6:f3:24:e6:f0:bb:3c:6e:a5: 74:63:c1:82:eb:78:15:78:0d:c6:e2:70:77:9a:05:bc:80:6d: ec:0f:4a:a5:f0:12:0c:2b:56:29:57:68:e6:18:8f:70:5a:7f: 20:e3:bd:cc:ba:c3:e3:ab:00:30:65:f2:70:02:04:48:af:67: 56:9f:80:8a:91:3c:e4:d1:08:2c:11:1e:02:ba:fe:ff:90:b1: 49:92:5a:1a:a0:e7:bf:73:59:fb:0a:42:b5:7a:f9:b3:0b:c3: 7b:26:e5:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebXT4r6b65nEn44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZTk5YTU4MGEtMWFkNS00MjVhLThlMjItODRjNWVmZjViYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgd8b7oBaX7BSWZy0pBS+egZvW1cGhuxFNYc Gtv5o8Gb+DgEy0yUbIogdMOQ76sB4wFAYJRyZCKsonc0rxxlHvh+B/k/LsdwRQVi 8ruSC0STY1/odXdsKRCK1VmvbPagvA+EUQtjVm+ZHtwe2NlduLhSiMTk7BUr/LGZ 71akl4JONjLrgAC6n+FnSklfv5cjzfSVnYqWU/adMpLQ0jjqkJzc1/1cUggjOm0a UdiribHU9AbOthmucGhmV92f26JtjClUX1Q9IgO0qfBfRX2BhyuGM7bOU5rWkRbo oZMjtVDFjieNcKTNk/4uxtKdXbp0mJf1Eitp2gSUgT0M388jdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyKbmuRAwFNI6D/sLwutpe4ILbVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA0N2VkNTctMzNlMy0z OGVkLTljZDQtYjc3Yjg4YmU1ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMs7TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANFgdZMJM4NS/F1ZFiuckgyRE8KFkmdKA7TxdMPQeGJ8bcA0Il6nhCtk uopoOH9UhqIg2qiDnWI01PBnBM6SkSsVF2yWH/q6/vPU1aOSnqT5Z6g4cYDMji/Q M85B61ITe1rvHRIanW0bIDn96s3wRyMqZBgVVs/ezI2vWwWuh7y/mykc2umb4j8E DKU3IFiUm0Q/MyaFxU/NSMbzJObwuzxupXRjwYLreBV4DcbicHeaBbyAbewPSqXw EgwrVilXaOYYj3BafyDjvcy6w+OrADBl8nACBEivZ1afgIqRPOTRCCwRHgK6/v+Q sUmSWhqg579zWfsKQrV6+bMLw3sm5aE= -----END CERTIFICATE-----Generated at Mon Apr 7 06:36:16 2025 by rpki-client