$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa File: 12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa (raw, json) Hash identifier: tTpb7xjh3RgFi//xgvaCg/3V7fthBOiVq53/imzkNUA= Subject key identifier: 76:E3:2A:72:74:BC:9A:3D:A3:D9:04:27:F7:8F:11:4C:0B:0A:F6:93 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584944693631B9C34DB8B744BD80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 29802 IP address blocks: 209.133.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:36:31:b9:c3:4d:b8:b7:44:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=4d4c5f01-8833-4295-bfe6-85491960b00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:5d:7c:88:c8:0d:45:5f:85:01:8f:27:ed: 09:83:a8:77:1c:82:ad:1e:72:3b:a0:6f:0d:60:13: 3a:ca:c4:e1:61:48:2d:ac:ed:15:2c:e1:f4:d9:1f: 1f:78:24:5e:50:81:5e:33:0a:e9:5b:d5:62:77:90: 7a:40:b2:f4:a8:c3:11:20:05:44:94:1d:0a:e4:59: 56:c1:68:45:1a:42:de:40:43:28:59:91:7c:0d:73: c0:02:23:8e:f9:80:43:f8:29:70:9f:fd:56:fc:1e: 28:36:db:57:91:3e:f6:f8:aa:4e:c6:8d:75:30:74: d0:cc:4e:4b:2b:1b:e5:a6:06:c2:b8:cc:73:ab:a5: 51:c9:65:94:5f:49:91:60:0d:f5:36:e1:20:33:af: 28:bd:1c:95:ae:02:4e:f9:da:25:35:4b:ef:49:52: f4:89:cf:12:e8:7c:d2:aa:14:11:36:58:a3:6c:8a: 75:3e:0d:a1:6c:64:86:92:09:60:a0:b8:78:24:32: 5e:4c:eb:cf:ad:40:37:2b:5c:d9:8d:11:29:71:b0: cd:4b:c3:f9:e6:d9:c0:7c:18:75:44:5d:5b:e7:ae: bb:2b:08:db:ca:1b:79:64:a8:62:83:2b:d0:94:07: b5:20:f2:11:ba:4f:d7:93:2c:ed:7d:74:11:44:43: 32:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E3:2A:72:74:BC:9A:3D:A3:D9:04:27:F7:8F:11:4C:0B:0A:F6:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/12e8abd8-2cfc-3e51-b53c-d152f2b3a21e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 209.133.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:12:b8:9c:ea:f6:c1:56:1d:27:02:03:8f:92:30:61:a5:2f: 8e:07:14:c0:52:b9:ee:73:3f:e4:5d:b4:95:29:01:fc:16:a6: 71:ca:94:92:91:30:3b:72:cd:61:56:2f:48:d2:a1:0d:1d:7e: 6d:4e:60:9c:fc:66:0e:2f:b9:10:63:0d:f0:d4:35:2e:2f:8b: 38:a3:ba:b0:d7:ac:46:2c:43:9f:61:79:05:58:bf:88:97:f0: 7d:09:4c:17:2f:09:b5:a1:47:75:ab:99:ee:77:eb:02:75:4d: 11:3d:5a:7b:89:16:58:bb:49:39:76:e3:0c:84:f6:f7:b2:74: c1:d7:f7:91:9f:ce:a6:0b:c8:ee:61:54:c1:05:31:86:07:99: fe:54:43:d6:42:8a:84:90:19:09:84:90:30:7c:27:ed:af:e0: 1d:16:a9:44:e4:a0:89:1e:7b:01:ac:4c:90:5c:6b:ea:83:c3: a7:78:9a:a0:29:dd:65:91:70:83:ba:1b:a7:3d:dd:f0:c8:4e: 41:08:8b:a1:0e:31:ef:31:62:22:9d:eb:2f:ea:5b:c2:e4:d4: 1e:bd:2c:48:8c:d8:ad:31:d4:11:40:ca:cd:ce:01:ee:87:a9: 96:43:89:17:7c:93:d4:e3:c1:7b:fd:9b:33:c5:ef:81:d9:17: 12:76:0e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTYxucNNuLdEvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NGQ0YzVmMDEtODgzMy00Mjk1LWJmZTYtODU0OTE5NjBiMDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2pdfIjIDUVfhQGPJ+0Jg6h3HIKtHnI7oG8N YBM6ysThYUgtrO0VLOH02R8feCReUIFeMwrpW9Vid5B6QLL0qMMRIAVElB0K5FlW wWhFGkLeQEMoWZF8DXPAAiOO+YBD+Clwn/1W/B4oNttXkT72+KpOxo11MHTQzE5L KxvlpgbCuMxzq6VRyWWUX0mRYA31NuEgM68ovRyVrgJO+dolNUvvSVL0ic8S6HzS qhQRNlijbIp1Pg2hbGSGkglgoLh4JDJeTOvPrUA3K1zZjREpcbDNS8P55tnAfBh1 RF1b5667Kwjbyht5ZKhigyvQlAe1IPIRuk/XkyztfXQRREMypQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbjKnJ0vJo9o9kEJ/ePEUwLCvaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMTJlOGFiZDgtMmNmYy0z ZTUxLWI1M2MtZDE1MmYyYjNhMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0SuJzq9sFWHScCA4+SMGGlL44HFMBSue5zP+RdtJUpAfwWpnHKlJKR MDtyzWFWL0jSoQ0dfm1OYJz8Zg4vuRBjDfDUNS4vizijurDXrEYsQ59heQVYv4iX 8H0JTBcvCbWhR3Wrme536wJ1TRE9WnuJFli7STl24wyE9veydMHX95GfzqYLyO5h VMEFMYYHmf5UQ9ZCioSQGQmEkDB8J+2v4B0WqUTkoIkeewGsTJBca+qDw6d4mqAp 3WWRcIO6G6c93fDITkEIi6EOMe8xYiKd6y/qW8Lk1B69LEiM2K0x1BFAys3OAe6H qZZDiRd8k9TjwXv9mzPF74HZFxJ2Dkc= -----END CERTIFICATE-----Generated at Mon Jun 9 20:27:22 2025 by rpki-client