$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aceb24a5-7e98-3508-aae2-7e015c6f1762.roa File: aceb24a5-7e98-3508-aae2-7e015c6f1762.roa (raw, json) Hash identifier: 2EAdhIESdZnHHdccT3BtXr2z6BTUAyDlGierS3i4MtU= Subject key identifier: C8:92:00:3C:E3:CF:44:3C:C1:C6:7C:04:C4:53:FB:D2:9E:CB:78:38 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848E59BB5DC8C0D707C63E7DF00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aceb24a5-7e98-3508-aae2-7e015c6f1762.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 135375 IP address blocks: 50.114.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b5:dc:8c:0d:70:7c:63:e7:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=977e43b0-474a-4b06-8591-d6949cb1a71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:74:ac:c1:95:e0:c9:15:ec:5b:24:a1:55:11: 06:24:2a:ad:e5:78:f9:e4:1d:84:ff:25:a0:c7:b4: f7:2d:28:5a:83:03:05:0c:bc:22:74:e4:a5:04:53: 17:fa:4b:33:e9:c7:ad:1f:0a:b9:da:f5:eb:af:89: 0a:f0:fd:19:ee:2c:d6:6a:f5:f2:03:96:0e:d6:e0: 15:11:1a:57:3e:6f:9d:10:f3:b0:e8:a4:0b:a9:85: 65:f7:d6:9a:33:ab:d7:2a:c6:5c:25:6a:47:9e:db: 12:d4:78:9d:5e:e0:d9:d2:d1:aa:7e:d8:f5:89:32: 4d:65:ee:7d:80:19:5d:cd:92:91:be:86:51:3a:5d: 8c:94:ef:91:00:30:2a:a5:23:1f:cd:31:d2:fe:91: 01:69:c7:7c:73:91:a4:97:35:7f:76:8d:8b:3d:9a: 6d:5e:4e:a4:4f:ca:22:2e:85:56:68:78:a6:73:83: 36:b0:fd:fe:81:aa:dd:98:5a:dd:a1:9e:16:97:a8: 2c:5d:69:04:a1:4b:3a:bd:0e:a3:5a:16:e0:ca:9c: be:d8:f4:f9:b8:3f:56:ca:fa:54:ba:79:b7:a7:b7: 71:0d:88:66:ab:be:b1:5e:4c:5a:f2:96:2c:74:73: a1:eb:71:f8:d9:33:ba:24:5f:9a:92:44:72:ea:a4: 10:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:92:00:3C:E3:CF:44:3C:C1:C6:7C:04:C4:53:FB:D2:9E:CB:78:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aceb24a5-7e98-3508-aae2-7e015c6f1762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 50.114.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a5:d4:6f:5d:2e:84:7f:32:aa:8d:c5:05:51:ac:e0:4d:29: b8:ec:7c:9d:12:c4:be:db:33:77:aa:b8:10:01:ce:45:0b:fe: 14:2b:fc:aa:3b:fa:af:ec:24:bd:47:f0:e7:bd:bd:78:d3:8d: 63:e8:a0:62:30:ae:03:a6:72:78:20:8b:b1:a3:20:ed:e6:47: df:70:36:45:3c:03:33:7e:6f:30:00:6b:24:20:4b:f0:a9:18: e8:e6:a8:83:a5:11:cc:e0:da:35:41:d1:c8:db:b1:09:bd:c8: ac:0f:cb:de:30:35:23:5e:1d:9f:e4:a0:5a:f0:f4:e1:c6:db: 1e:fd:6f:49:0a:6a:8e:42:99:e9:88:87:34:d6:a7:f7:47:5c: f8:d9:f2:6f:13:7b:65:96:c2:59:e3:c4:7c:b8:09:c3:e6:8b: da:c5:25:8b:06:3c:72:d4:a3:84:ea:4b:bc:38:09:45:5f:75: 1c:77:3d:c7:46:5b:8f:26:eb:b3:14:43:f1:b4:09:2d:03:90: 2f:90:63:a4:78:a9:4c:2d:df:e4:3b:b4:e5:14:2e:3d:95:26: c2:ea:47:37:ae:59:68:b6:29:64:43:96:2c:a8:7a:77:ef:aa: ee:3a:e0:e3:81:9b:84:19:ba:3f:af:0c:2b:fd:3b:9d:94:13: 30:a6:f2:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7XcjA1wfGPn3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk OTc3ZTQzYjAtNDc0YS00YjA2LTg1OTEtZDY5NDljYjFhNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnSswZXgyRXsWyShVREGJCqt5Xj55B2E/yWg x7T3LShagwMFDLwidOSlBFMX+ksz6cetHwq52vXrr4kK8P0Z7izWavXyA5YO1uAV ERpXPm+dEPOw6KQLqYVl99aaM6vXKsZcJWpHntsS1HidXuDZ0tGqftj1iTJNZe59 gBldzZKRvoZROl2MlO+RADAqpSMfzTHS/pEBacd8c5GklzV/do2LPZptXk6kT8oi LoVWaHimc4M2sP3+gardmFrdoZ4Wl6gsXWkEoUs6vQ6jWhbgypy+2PT5uD9WyvpU unm3p7dxDYhmq76xXkxa8pYsdHOh63H42TO6JF+akkRy6qQQ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiSADzjz0Q8wcZ8BMRT+9Key3g4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWNlYjI0YTUtN2U5OC0z NTA4LWFhZTItN2UwMTVjNmYxNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIql1G9dLoR/MqqNxQVRrOBNKbjsfJ0SxL7bM3equBABzkUL/hQr/Ko7 +q/sJL1H8Oe9vXjTjWPooGIwrgOmcnggi7GjIO3mR99wNkU8AzN+bzAAayQgS/Cp GOjmqIOlEczg2jVB0cjbsQm9yKwPy94wNSNeHZ/koFrw9OHG2x79b0kKao5CmemI hzTWp/dHXPjZ8m8Te2WWwlnjxHy4CcPmi9rFJYsGPHLUo4TqS7w4CUVfdRx3PcdG W48m67MUQ/G0CS0DkC+QY6R4qUwt3+Q7tOUULj2VJsLqRzeuWWi2KWRDliyoenfv qu464OOBm4QZuj+vDCv9O52UEzCm8p8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:15 2025 by rpki-client