$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/85470bfa-76db-3d08-a23e-d494b75d74a3.roa File: 85470bfa-76db-3d08-a23e-d494b75d74a3.roa (raw, json) Hash identifier: VNHfv2A3Iyddh42UVtIOvCIRRIjxY29g1l9deSe5uK8= Subject key identifier: D8:55:70:A3:11:05:F9:BE:0C:F4:C7:7A:F4:8B:BA:B5:2C:8C:B6:C8 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285849115E1B2D4ABF235B5A581240 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/85470bfa-76db-3d08-a23e-d494b75d74a3.roa Signing time: Mon 03 Mar 2025 18:12:11 +0000 ROA not before: Mon 03 Mar 2025 18:12:11 +0000 ROA not after: Sun 01 Jun 2025 17:12:11 +0000 asID: 401152 IP address blocks: 50.114.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:11:5e:1b:2d:4a:bf:23:5b:5a:58:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 3 18:12:11 2025 GMT Not After : Jun 1 17:12:11 2025 GMT Subject: CN=a969220c-2fe5-4c19-9624-98876733b59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:20:fe:35:72:1c:f9:10:2f:97:fa:e4:89:99: 5d:ae:3b:af:b4:44:6e:65:f3:a8:05:b4:5c:b3:3c: d5:ef:27:0b:50:ea:67:d0:4f:ab:77:e8:bf:76:bc: 41:0d:1b:6c:77:9e:f4:95:4e:63:2b:67:d2:70:74: 3d:7d:86:eb:14:27:7b:12:3d:8d:93:0d:86:2f:94: 0e:92:07:d0:8a:90:ab:b9:61:b6:8b:99:7f:1a:c6: 1b:aa:15:8a:4e:75:d1:da:11:0f:07:48:58:33:fd: 07:ce:3b:f8:41:88:67:b6:e5:05:5c:dd:43:ce:19: b7:03:14:91:d9:16:b8:e4:06:51:cd:2c:85:83:f4: 0d:d3:a3:43:59:8c:d1:13:4d:d1:e2:30:7b:21:22: 7f:aa:de:29:d6:8b:f3:4d:0b:90:3f:96:b6:b8:6a: 31:7c:56:09:94:35:22:72:96:27:c0:f2:49:8e:66: 3e:81:4b:02:b5:b4:17:59:bb:48:2c:e5:94:d5:c8: f6:78:69:fb:33:10:ac:0b:62:80:f3:e5:1d:06:71: bc:ff:2f:29:09:d3:be:a3:56:26:ef:9e:f8:b5:07: 89:a9:5d:74:bd:e3:e2:ab:7c:09:92:de:7e:7d:6f: 71:8b:4c:1b:d7:0b:2d:91:62:79:48:44:99:a4:33: 41:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:55:70:A3:11:05:F9:BE:0C:F4:C7:7A:F4:8B:BA:B5:2C:8C:B6:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/85470bfa-76db-3d08-a23e-d494b75d74a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 50.114.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:07:22:64:30:0c:e9:7c:7e:95:00:df:d3:e2:84:42:39:1f: 8c:25:74:7c:ac:53:24:8f:a3:e6:a0:21:3c:a0:34:0b:17:6c: 10:d4:9d:0d:28:c1:50:c4:46:47:1a:27:0d:bf:75:c6:5b:6a: 00:5c:c7:5d:b8:32:76:2d:22:ea:04:55:dd:e6:18:a2:43:0e: 7c:17:0c:69:cf:42:07:6d:da:52:58:7d:61:12:22:06:84:99: 57:8b:6c:7f:3f:2f:84:69:9e:54:9c:cb:b6:08:10:48:21:14: c4:ba:5a:0a:7e:60:5b:7b:78:6b:ea:8d:63:68:7f:4d:db:26: bd:73:8d:21:6c:c7:02:24:7c:dc:6e:8a:2b:4c:96:11:81:5f: 40:f3:9f:6c:18:d4:07:26:b9:d8:14:91:5b:31:1a:a4:a6:db: 65:20:d0:05:59:a3:8b:73:0e:45:db:8a:f6:20:b6:aa:e4:ec: 77:39:4b:bb:af:43:b1:0f:2e:f2:8f:09:0f:3a:98:2d:5b:83: be:28:72:74:2f:a1:bc:d1:19:01:87:ca:aa:70:d7:48:14:fc: 02:d0:c4:ab:de:a7:11:40:01:b3:b5:27:7e:07:3f:1a:ee:04: ef:61:cf:b1:f4:9d:16:a7:45:cd:f0:08:a5:32:a4:99:7e:13: 74:8a:f4:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRXhstSr8jW1pYEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDMwMzE4MTIxMVoXDTI1MDYwMTE3MTIxMVowLzEtMCsGA1UEAxMk YTk2OTIyMGMtMmZlNS00YzE5LTk2MjQtOTg4NzY3MzNiNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SD+NXIc+RAvl/rkiZldrjuvtERuZfOoBbRc szzV7ycLUOpn0E+rd+i/drxBDRtsd570lU5jK2fScHQ9fYbrFCd7Ej2Nkw2GL5QO kgfQipCruWG2i5l/GsYbqhWKTnXR2hEPB0hYM/0Hzjv4QYhntuUFXN1Dzhm3AxSR 2Ra45AZRzSyFg/QN06NDWYzRE03R4jB7ISJ/qt4p1ovzTQuQP5a2uGoxfFYJlDUi cpYnwPJJjmY+gUsCtbQXWbtILOWU1cj2eGn7MxCsC2KA8+UdBnG8/y8pCdO+o1Ym 7574tQeJqV10vePiq3wJkt5+fW9xi0wb1wstkWJ5SESZpDNBewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhVcKMRBfm+DPTHevSLurUsjLbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvODU0NzBiZmEtNzZkYi0z ZDA4LWEyM2UtZDQ5NGI3NWQ3NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnJ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0HImQwDOl8fpUA39PihEI5H4wldHysUySPo+agITygNAsXbBDUnQ0o wVDERkcaJw2/dcZbagBcx124MnYtIuoEVd3mGKJDDnwXDGnPQgdt2lJYfWESIgaE mVeLbH8/L4RpnlScy7YIEEghFMS6Wgp+YFt7eGvqjWNof03bJr1zjSFsxwIkfNxu iitMlhGBX0Dzn2wY1AcmudgUkVsxGqSm22Ug0AVZo4tzDkXbivYgtqrk7Hc5S7uv Q7EPLvKPCQ86mC1bg74ocnQvobzRGQGHyqpw10gU/ALQxKvepxFAAbO1J34HPxru BO9hz7H0nRanRc3wCKUypJl+E3SK9O8= -----END CERTIFICATE-----Generated at Sat Apr 5 09:37:08 2025 by rpki-client