$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1503d505-5194-36e4-8547-82404b18ae4c.roa File: 1503d505-5194-36e4-8547-82404b18ae4c.roa (raw, json) Hash identifier: LRVx0kJJ4wsH9veWD/1h7g0UOPOhzQr1WB0k3ulG0mo= Subject key identifier: 16:E2:D3:5B:2B:F7:4D:AC:29:07:63:0B:7D:20:79:40:44:21:E0:86 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285848AAFB6C5C4328C04EB0FB7F00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1503d505-5194-36e4-8547-82404b18ae4c.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 401298 IP address blocks: 66.96.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:6c:5c:43:28:c0:4e:b0:fb:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=fb9a0dad-c6ee-426e-af3a-6cb8457b0229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:a5:5a:61:75:4a:68:61:b8:f3:89:72:3e: ac:5f:18:3f:81:51:5f:54:78:28:b5:96:a0:46:02: bb:01:f3:55:8c:ed:c2:2e:bd:e5:28:21:17:3c:b3: 09:4a:4d:df:e5:7a:c8:7b:f4:bc:86:d7:3b:06:c7: 22:ec:45:ec:3c:25:6d:3d:ae:a8:b6:3e:ad:1c:20: 7a:89:25:56:12:bc:8f:7e:f9:f8:2e:7c:3a:ee:d2: 27:55:ab:97:fc:78:da:7b:ac:13:c5:d0:a5:c9:74: 97:cb:cc:28:ac:a3:56:17:75:ad:fa:a1:50:0d:81: 7d:43:b1:d9:1d:10:fa:bc:7c:a4:a9:7c:1e:e1:ff: fc:f5:90:bd:f2:d7:54:f2:21:f1:e8:f7:f4:05:c6: f8:f3:b8:72:11:1c:b2:eb:90:b7:ca:dd:db:ac:c7: 3e:d5:01:f9:a9:e3:93:ac:6b:af:83:2a:24:61:d8: d4:dc:76:63:b8:ef:c5:52:55:b8:71:02:bc:d0:6c: e3:0f:36:3f:9a:f3:e2:bb:31:49:49:ff:4a:a0:95: 8f:05:13:7d:69:3e:c9:fa:55:ac:19:53:ba:00:9c: 1c:c4:41:88:a7:e1:fa:7a:13:ea:cd:57:19:52:7c: 6e:c5:76:9a:85:75:02:15:dd:df:34:0e:49:e1:4f: 36:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E2:D3:5B:2B:F7:4D:AC:29:07:63:0B:7D:20:79:40:44:21:E0:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1503d505-5194-36e4-8547-82404b18ae4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fe:79:fe:44:9e:06:4c:5f:e7:7e:6a:70:9c:75:d7:be:e1: 89:67:3e:e5:18:66:d1:64:01:7c:1d:37:7c:bd:33:b0:24:1e: 45:0d:2f:8f:09:11:4c:47:8e:47:fe:4f:0a:ae:9c:46:70:99: 59:e6:74:59:49:6d:4a:33:f4:cb:d3:7a:69:3d:6c:63:88:94: 0e:28:2e:2b:04:29:00:6e:01:3b:39:72:b8:b8:74:3a:d9:10: ad:59:31:53:90:f2:79:b1:e8:c5:a5:5a:70:bb:22:33:81:47: eb:58:b7:33:b9:81:dc:05:73:3b:74:2f:34:12:7c:52:0e:47: 32:83:75:86:3a:46:dc:1a:40:f7:cb:f8:89:44:d2:41:52:69: 17:de:c6:8e:56:77:11:0e:f1:5f:ab:ff:c9:5f:dd:11:b8:73: 7d:68:e2:b3:c6:17:9f:13:33:75:f8:22:5c:05:a7:54:9c:b5: eb:92:62:00:54:99:a1:c0:0f:a4:58:d4:06:ef:9f:59:c9:40: 03:e6:e0:0c:b9:78:d0:a5:be:89:25:f8:56:8e:39:3b:29:c3: 67:46:50:2e:14:e8:c7:ea:77:e1:68:00:cd:c6:c2:dc:5b:18: 4a:f7:86:ec:53:62:32:ef:ef:89:78:54:2c:dc:f8:18:ed:18: 90:3e:58:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2xcQyjATrD7fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk ZmI5YTBkYWQtYzZlZS00MjZlLWFmM2EtNmNiODQ1N2IwMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdSlWmF1SmhhuPOJcj6sXxg/gVFfVHgotZag RgK7AfNVjO3CLr3lKCEXPLMJSk3f5XrIe/S8htc7Bsci7EXsPCVtPa6otj6tHCB6 iSVWEryPfvn4Lnw67tInVauX/Hjae6wTxdClyXSXy8worKNWF3Wt+qFQDYF9Q7HZ HRD6vHykqXwe4f/89ZC98tdU8iHx6Pf0Bcb487hyERyy65C3yt3brMc+1QH5qeOT rGuvgyokYdjU3HZjuO/FUlW4cQK80GzjDzY/mvPiuzFJSf9KoJWPBRN9aT7J+lWs GVO6AJwcxEGIp+H6ehPqzVcZUnxuxXaahXUCFd3fNA5J4U82nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbi01sr902sKQdjC30geUBEIeCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMTUwM2Q1MDUtNTE5NC0z NmU0LTg1NDctODI0MDRiMThhZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmBdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT+ef5EngZMX+d+anCcdde+4YlnPuUYZtFkAXwdN3y9M7AkHkUNL48J EUxHjkf+TwqunEZwmVnmdFlJbUoz9MvTemk9bGOIlA4oLisEKQBuATs5cri4dDrZ EK1ZMVOQ8nmx6MWlWnC7IjOBR+tYtzO5gdwFczt0LzQSfFIORzKDdYY6RtwaQPfL +IlE0kFSaRfexo5WdxEO8V+r/8lf3RG4c31o4rPGF58TM3X4IlwFp1ScteuSYgBU maHAD6RY1Abvn1nJQAPm4Ay5eNClvokl+FaOOTspw2dGUC4U6Mfqd+FoAM3Gwtxb GEr3huxTYjLv74l4VCzc+BjtGJA+WGw= -----END CERTIFICATE-----Generated at Sat Apr 12 17:36:08 2025 by rpki-client