$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e843cf31-0b55-3696-bd9c-5ec39023f854.roa File: e843cf31-0b55-3696-bd9c-5ec39023f854.roa (raw, json) Hash identifier: pRPHompca4+rGRC4fru+F3h4dmTtxcEvwluAiOniwO4= Subject key identifier: E8:A6:D2:37:BF:FF:AA:47:AD:F1:DC:D7:18:01:DB:D3:EF:44:73:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D85C5B39B198E33F9B340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e843cf31-0b55-3696-bd9c-5ec39023f854.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33662 IP address blocks: 50.172.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:85:c5:b3:9b:19:8e:33:f9:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=de966cd8-c3a7-4cc8-9c91-961dfc9affc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:aa:a9:fd:38:c2:55:b9:82:56:50:f5:65:b5: 54:b6:1c:2d:c5:7a:55:bc:65:91:7a:84:ae:29:4d: d5:20:16:22:bb:db:42:f9:52:30:f9:77:fe:02:2b: 35:3e:30:37:3c:73:7d:8e:df:1b:b9:a7:17:8f:37: d5:38:0d:cd:f2:fd:f1:7a:e1:4e:0f:65:58:e8:ff: fd:b6:e8:1d:8c:d1:80:30:75:21:2d:7d:b3:1f:0a: 2b:9c:46:48:a0:9d:07:96:67:9c:5e:34:3f:1d:cb: c0:d5:ab:96:9e:5b:95:b8:cf:48:58:c0:61:10:63: b6:e9:78:b7:38:30:45:fa:1b:83:2a:ef:06:4b:83: 65:fb:87:87:52:d5:ed:cd:08:20:b9:b7:83:7c:32: 5b:c0:5e:af:29:c4:96:09:fc:48:d5:85:5f:2f:44: 8d:b3:72:c6:a5:91:6f:85:6a:eb:b4:79:c1:41:18: 36:f5:2a:4b:5b:dc:e8:d8:c1:63:33:8d:7d:a3:fe: 59:4c:d3:7a:97:c6:87:b6:f2:76:c3:50:bd:ae:71: 59:e3:87:d2:50:f0:f2:34:95:7a:f7:97:e6:b9:ed: c0:23:f6:49:11:bc:71:98:37:68:f9:0f:58:35:60: 9f:8b:3c:7f:b7:86:3b:ce:3b:94:f1:8b:bd:ad:c9: f1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A6:D2:37:BF:FF:AA:47:AD:F1:DC:D7:18:01:DB:D3:EF:44:73:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e843cf31-0b55-3696-bd9c-5ec39023f854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.172.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:89:08:9c:c4:c6:28:50:c2:c3:bf:25:0e:6b:d3:45:a3:d9: bb:b8:aa:75:eb:04:51:cb:5c:33:ea:38:ff:1f:93:56:4c:2b: a9:2d:34:31:ae:99:0c:53:bb:bc:df:b3:04:e0:43:ee:6f:45: 73:17:80:83:01:54:5e:59:1d:34:3f:b8:1f:44:1d:d1:25:ef: e1:b8:03:31:0b:53:1d:83:09:b6:c2:1c:04:3d:0e:30:36:42: f9:32:ac:f1:0c:0f:02:0d:bb:89:3f:e3:1f:89:fc:4c:54:d8: 6b:7a:26:bd:1b:13:a6:97:a1:78:8d:b5:ec:92:5d:b9:a2:8c: c1:79:53:8f:af:76:61:6d:c0:0e:fd:d7:ba:4c:54:f0:6e:17: e9:8a:fc:cd:00:b6:cf:6a:be:1d:0e:4d:a0:94:3d:c4:44:67: c3:8a:89:ac:e0:97:a2:55:ae:fe:e1:98:f8:7a:23:d9:ea:c2: c9:d3:19:1b:49:52:e3:be:b8:eb:ff:0b:61:65:46:35:60:a6: 30:e1:87:83:88:8a:58:d4:46:e4:ef:1f:ac:73:21:1a:23:d6: 0f:38:a6:fa:4b:88:79:f4:68:fd:a4:be:87:61:98:11:7f:d7: 10:d5:c0:4c:00:bb:94:84:df:04:f5:d9:8e:b6:93:77:8b:c2: 2d:e9:25:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebYXFs5sZjjP5s0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZGU5NjZjZDgtYzNhNy00Y2M4LTljOTEtOTYxZGZjOWFmZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aqp/TjCVbmCVlD1ZbVUthwtxXpVvGWReoSu KU3VIBYiu9tC+VIw+Xf+Ais1PjA3PHN9jt8buacXjzfVOA3N8v3xeuFOD2VY6P/9 tugdjNGAMHUhLX2zHwornEZIoJ0HlmecXjQ/HcvA1auWnluVuM9IWMBhEGO26Xi3 ODBF+huDKu8GS4Nl+4eHUtXtzQggubeDfDJbwF6vKcSWCfxI1YVfL0SNs3LGpZFv hWrrtHnBQRg29SpLW9zo2MFjM419o/5ZTNN6l8aHtvJ2w1C9rnFZ44fSUPDyNJV6 95fmue3AI/ZJEbxxmDdo+Q9YNWCfizx/t4Y7zjuU8Yu9rcnxUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOim0je//6pHrfHc1xgB29PvRHMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTg0M2NmMzEtMGI1NS0z Njk2LWJkOWMtNWVjMzkwMjNmODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMqyvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSJCJzExihQwsO/JQ5r00Wj2bu4qnXrBFHLXDPqOP8fk1ZMK6ktNDGu mQxTu7zfswTgQ+5vRXMXgIMBVF5ZHTQ/uB9EHdEl7+G4AzELUx2DCbbCHAQ9DjA2 QvkyrPEMDwINu4k/4x+J/ExU2Gt6Jr0bE6aXoXiNteySXbmijMF5U4+vdmFtwA79 17pMVPBuF+mK/M0Ats9qvh0OTaCUPcREZ8OKiazgl6JVrv7hmPh6I9nqwsnTGRtJ UuO+uOv/C2FlRjVgpjDhh4OIiljURuTvH6xzIRoj1g84pvpLiHn0aP2kvodhmBF/ 1xDVwEwAu5SE3wT12Y62k3eLwi3pJR4= -----END CERTIFICATE-----Generated at Mon Apr 7 09:34:03 2025 by rpki-client