$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb23ad91-e243-392a-b642-2c6479395a1e.roa File: fb23ad91-e243-392a-b642-2c6479395a1e.roa (raw, json) Hash identifier: RcDNvTCScFJ12l6UDFLqJs1xp36oNVLmu1ZOZDB9jFI= Subject key identifier: 3B:15:F3:9E:CA:CF:50:57:E1:D5:9D:D9:D5:92:2F:F3:BC:F2:AB:77 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285848DEA131D65D88FF8A12B4326C Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb23ad91-e243-392a-b642-2c6479395a1e.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 26548 IP address blocks: 50.114.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:31:d6:5d:88:ff:8a:12:b4:32:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=87a78b3c-4361-430b-ad09-734419efc3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0e:ec:a5:44:f7:b2:94:f6:88:fc:18:1f:1d: 0f:e3:5c:a9:57:2a:a3:f3:52:17:d5:c5:9d:8d:3a: 3e:ec:12:7b:62:69:09:e7:ac:f1:b3:f2:e7:a1:ac: 9f:34:ab:74:c0:2e:86:58:7f:cf:a5:4d:c1:71:fe: 9c:65:69:f2:88:04:84:9a:de:fa:7d:47:7f:64:b9: b4:7e:03:4b:6c:ed:df:b5:8d:38:60:4e:9f:69:19: e4:70:35:7c:c0:84:6f:c5:3d:d6:c3:95:d2:a9:ad: cf:f6:e4:80:f0:df:71:a9:bf:17:74:9c:82:c7:d1: 3d:c5:c1:1c:c7:7a:09:3e:29:f6:aa:4f:79:e1:79: 36:4e:53:dd:8c:29:03:56:a3:72:51:b5:f4:2c:bc: a9:11:f7:bc:8a:a9:be:88:7c:6c:3a:b4:44:2e:f3: e6:39:3b:05:9b:33:d0:be:ef:34:f1:00:2b:ea:47: 69:7c:c0:8a:c8:8a:8d:0d:dd:44:11:19:6a:9d:20: c1:b5:03:5c:b7:60:81:95:f0:40:38:5e:d0:3e:1e: 1b:97:b4:37:a6:fb:41:62:f8:f0:ee:1c:35:a3:8b: 70:3b:55:a8:7f:b3:68:74:26:9e:bd:d1:32:07:db: 29:84:e0:93:f0:a8:00:f9:a6:f9:99:09:95:4e:78: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:15:F3:9E:CA:CF:50:57:E1:D5:9D:D9:D5:92:2F:F3:BC:F2:AB:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fb23ad91-e243-392a-b642-2c6479395a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 50.114.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e7:ee:bd:dc:c0:0c:e2:62:27:e5:42:10:94:3f:c5:dd:37: 06:e6:55:f8:45:48:d0:32:a1:83:7a:74:04:c1:3d:fb:32:08: 4e:c1:f0:cf:df:18:d4:7b:a7:06:9d:9f:2a:12:8b:38:c9:bb: 15:a9:9d:15:1a:43:5b:2e:68:d5:5f:a8:79:94:c4:44:2f:e3: 87:88:e6:79:04:44:1d:66:d9:69:ea:08:06:54:e3:6e:63:c9: 85:39:92:63:83:94:a7:71:d4:4c:9f:f2:35:03:a8:32:d9:2c: ed:a6:b4:dc:12:00:0e:28:db:eb:39:f0:60:b3:da:74:8c:6c: 2b:a6:26:d8:8b:c8:4e:96:65:75:33:80:2c:2e:8c:68:dc:c8: a7:fe:13:d5:6c:78:7e:52:3a:37:81:25:2d:46:b2:19:ba:a4: b3:f8:aa:75:47:0f:79:6b:1e:1c:3c:78:bd:e5:5f:42:57:17: ba:40:fe:ed:20:49:6a:1b:50:81:dc:16:0e:96:9c:2a:d9:28: f7:e9:68:39:be:aa:a3:ef:91:c8:22:1b:4d:28:30:9a:0e:01: f1:b1:27:70:46:6a:29:53:5d:36:03:e5:a1:7d:d5:13:a6:08: 84:e7:82:04:7f:2b:5b:7e:8e:d7:4e:d4:b6:95:28:d6:d2:74: 2f:53:03:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoTHWXYj/ihK0MmwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ODdhNzhiM2MtNDM2MS00MzBiLWFkMDktNzM0NDE5ZWZjM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ7spUT3spT2iPwYHx0P41ypVyqj81IX1cWd jTo+7BJ7YmkJ56zxs/LnoayfNKt0wC6GWH/PpU3Bcf6cZWnyiASEmt76fUd/ZLm0 fgNLbO3ftY04YE6faRnkcDV8wIRvxT3Ww5XSqa3P9uSA8N9xqb8XdJyCx9E9xcEc x3oJPin2qk954Xk2TlPdjCkDVqNyUbX0LLypEfe8iqm+iHxsOrRELvPmOTsFmzPQ vu808QAr6kdpfMCKyIqNDd1EERlqnSDBtQNct2CBlfBAOF7QPh4bl7Q3pvtBYvjw 7hw1o4twO1Wof7NodCaevdEyB9sphOCT8KgA+ab5mQmVTngi8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsV857Kz1BX4dWd2dWSL/O88qt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZmIyM2FkOTEtZTI0My0z OTJhLWI2NDItMmM2NDc5Mzk1YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMnL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXn7r3cwAziYiflQhCUP8XdNwbmVfhFSNAyoYN6dATBPfsyCE7B8M/f GNR7pwadnyoSizjJuxWpnRUaQ1suaNVfqHmUxEQv44eI5nkERB1m2WnqCAZU425j yYU5kmODlKdx1Eyf8jUDqDLZLO2mtNwSAA4o2+s58GCz2nSMbCumJtiLyE6WZXUz gCwujGjcyKf+E9VseH5SOjeBJS1Gshm6pLP4qnVHD3lrHhw8eL3lX0JXF7pA/u0g SWobUIHcFg6WnCrZKPfpaDm+qqPvkcgiG00oMJoOAfGxJ3BGailTXTYD5aF91ROm CITnggR/K1t+jtdO1LaVKNbSdC9TA8E= -----END CERTIFICATE-----Generated at Sat Apr 5 03:58:39 2025 by rpki-client