$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45afb87d-e1f5-3166-989a-112a130c406e.roa File: 45afb87d-e1f5-3166-989a-112a130c406e.roa (raw, json) Hash identifier: Wr0dpNtPWXTgd+ok5L0qSCUFTanvKhGn0guVAujrvwc= Subject key identifier: D5:FB:F1:61:56:85:74:EB:F0:C5:76:4E:82:10:08:0C:08:6A:65:6B Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848F28CAF9901E15949AD2E2C00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45afb87d-e1f5-3166-989a-112a130c406e.roa Signing time: Thu 20 Feb 2025 17:15:58 +0000 ROA not before: Thu 20 Feb 2025 17:15:58 +0000 ROA not after: Wed 21 May 2025 16:15:58 +0000 asID: 401152 IP address blocks: 50.114.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:8c:af:99:01:e1:59:49:ad:2e:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 20 17:15:58 2025 GMT Not After : May 21 16:15:58 2025 GMT Subject: CN=3cd14d0d-4383-4c77-9f94-441c60056792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8e:3c:19:b3:b0:d1:dd:45:f8:b3:ae:fc:cd: 16:be:a4:65:e0:57:ec:7a:4c:49:bd:ed:ad:d1:92: 20:e2:5f:fb:70:f0:e6:ce:ca:e1:57:f4:08:0a:94: 54:96:5f:c6:10:75:3e:16:68:13:d8:a6:16:52:99: 5c:bf:3c:f5:c4:15:ed:ba:ac:51:e2:c5:2c:1c:90: 0e:c3:bd:0e:0e:93:58:ca:12:95:4e:8e:33:90:19: ca:be:fa:25:12:78:b5:4b:b4:c3:b3:df:a4:12:eb: 60:71:5d:3a:e7:05:d0:bc:63:95:81:0a:e1:47:96: cb:b1:7a:23:0f:09:80:39:44:d5:2b:c1:54:5c:c4: 6c:97:83:3f:f4:fc:a2:15:23:34:a8:7b:d3:20:a5: c0:f3:ad:e0:bd:24:49:10:88:37:bc:ae:8b:30:11: b6:0d:3a:45:b7:ce:d9:2e:3d:44:c0:ac:cb:58:a7: ba:ef:68:72:73:3f:d1:f3:41:81:75:ed:2c:56:c1: 99:be:a3:b7:75:cd:d6:db:12:2c:b0:bd:60:3e:e6: 01:0f:d6:ee:ff:52:85:cc:4d:e8:b6:1d:92:b5:12: 3f:9b:66:38:3c:33:d9:6e:8e:bb:a0:49:24:fa:29: bf:bb:00:b6:fe:34:eb:d0:5a:b5:a2:de:e2:3c:40: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FB:F1:61:56:85:74:EB:F0:C5:76:4E:82:10:08:0C:08:6A:65:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/45afb87d-e1f5-3166-989a-112a130c406e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 50.114.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:29:a2:f3:a9:65:8b:30:24:a5:cc:42:b9:5a:54:b4:f5:cd: b3:cd:18:c9:45:d1:2d:52:46:56:5b:4c:94:71:b8:87:45:fa: 06:d4:b4:b9:62:cd:a7:85:98:57:5c:ad:9e:34:c8:37:24:33: c9:38:c4:5b:eb:fe:45:65:57:11:eb:63:c8:04:bb:2f:04:c5: 6b:c2:96:03:82:a4:c2:29:96:f0:e2:22:2b:6c:8a:56:22:b3: 50:2b:e4:1a:4a:cb:85:a2:34:af:bc:e8:8b:2b:62:68:88:45: 33:1c:95:cf:c1:42:97:9a:fe:63:ef:0a:e9:c2:39:5a:df:22: 09:94:45:16:e7:07:ba:8b:74:c9:92:00:1a:cb:de:65:19:3a: 54:c8:6c:ac:72:6b:84:a2:53:1b:75:bd:a9:a2:f3:bc:25:41: c2:56:26:39:07:27:a0:bf:7b:1c:b4:0d:42:bd:da:60:e6:16: a6:53:d6:ea:18:83:d1:c3:a3:3b:ef:38:d7:b4:55:e2:ba:01: d5:80:ef:0f:5a:e1:3f:70:7d:b2:27:f0:a5:3b:d1:92:84:bf: 90:14:48:26:3c:ba:0b:49:72:da:77:b3:ea:8b:3d:13:23:69: 06:34:1b:4c:e2:4f:db:90:eb:e0:43:c3:a9:9e:61:3c:30:e8: 3d:f6:35:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyjK+ZAeFZSa0uLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIyMDE3MTU1OFoXDTI1MDUyMTE2MTU1OFowLzEtMCsGA1UEAxMk M2NkMTRkMGQtNDM4My00Yzc3LTlmOTQtNDQxYzYwMDU2NzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj448GbOw0d1F+LOu/M0WvqRl4FfsekxJve2t 0ZIg4l/7cPDmzsrhV/QICpRUll/GEHU+FmgT2KYWUplcvzz1xBXtuqxR4sUsHJAO w70ODpNYyhKVTo4zkBnKvvolEni1S7TDs9+kEutgcV065wXQvGOVgQrhR5bLsXoj DwmAOUTVK8FUXMRsl4M/9PyiFSM0qHvTIKXA863gvSRJEIg3vK6LMBG2DTpFt87Z Lj1EwKzLWKe672hycz/R80GBde0sVsGZvqO3dc3W2xIssL1gPuYBD9bu/1KFzE3o th2StRI/m2Y4PDPZbo67oEkk+im/uwC2/jTr0Fq1ot7iPEC3KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNX78WFWhXTr8MV2ToIQCAwIamVrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDVhZmI4N2QtZTFmNS0z MTY2LTk4OWEtMTEyYTEzMGM0MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABopovOpZYswJKXMQrlaVLT1zbPNGMlF0S1SRlZbTJRxuIdF+gbUtLli zaeFmFdcrZ40yDckM8k4xFvr/kVlVxHrY8gEuy8ExWvClgOCpMIplvDiIitsilYi s1Ar5BpKy4WiNK+86IsrYmiIRTMclc/BQpea/mPvCunCOVrfIgmURRbnB7qLdMmS ABrL3mUZOlTIbKxya4SiUxt1vami87wlQcJWJjkHJ6C/exy0DUK92mDmFqZT1uoY g9HDozvvONe0VeK6AdWA7w9a4T9wfbIn8KU70ZKEv5AUSCY8ugtJctp3s+qLPRMj aQY0G0ziT9uQ6+BDw6meYTww6D32NUo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:05:26 2025 by rpki-client