$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1c41f273-037f-34f4-ad80-363fc877481e.roa File: 1c41f273-037f-34f4-ad80-363fc877481e.roa (raw, json) Hash identifier: yT1dui3emEbBeOrcOa/XYu3RRoqs29ddmluFmAyCLd0= Subject key identifier: C3:54:72:28:9B:8A:47:14:26:A5:4B:F9:F2:3C:57:8A:6B:7A:48:97 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858493C0929C6A92EC564ECF14118 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1c41f273-037f-34f4-ad80-363fc877481e.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 29802 IP address blocks: 69.46.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:29:c6:a9:2e:c5:64:ec:f1:41:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=f7d5c9a0-4561-48f2-9eda-dd7ce68443fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ba:79:d2:ed:80:b3:b6:9c:55:ba:7f:4e:64: 77:cf:48:60:a8:c2:e4:93:f1:3e:00:ec:dd:ef:6e: 19:e7:1d:88:8b:ed:cc:91:ba:6f:a5:4d:44:51:53: 80:33:ee:b8:b8:dd:d5:ec:dc:86:58:f8:1f:cf:ad: df:c5:50:42:2f:d7:24:20:df:17:02:c6:9e:9e:9d: 0c:73:06:df:57:df:8d:64:43:28:3b:ea:5f:a9:b7: 0f:80:54:4d:6d:2d:c6:b2:84:8f:21:09:d5:97:54: 4d:fe:f6:9e:49:f5:34:70:8e:a7:50:2c:d6:0f:86: e7:87:9b:a5:2b:3a:31:59:b4:55:18:1a:4f:a1:33: a7:26:fc:97:04:58:74:54:2e:29:17:5e:6b:06:bb: 9e:e7:b4:a0:cf:a2:f1:a5:68:24:81:d1:d9:35:cf: ff:db:a6:1e:b3:4f:8b:21:66:c1:8d:ed:0c:52:34: b5:bf:ce:71:6b:7c:2b:c6:2d:13:ca:52:75:83:06: 2e:44:4b:e4:08:6e:54:09:a3:60:88:0d:f9:8d:03: 0e:af:11:52:83:62:93:da:9c:a3:d2:5e:eb:8f:e3: 45:0c:e0:94:f6:2f:e7:cf:b6:d3:64:82:30:58:25: 11:49:e6:be:f1:b4:6b:64:72:43:a2:40:e9:5c:0f: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:54:72:28:9B:8A:47:14:26:A5:4B:F9:F2:3C:57:8A:6B:7A:48:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1c41f273-037f-34f4-ad80-363fc877481e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 69.46.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f0:71:b3:cf:30:56:98:6b:99:ec:e2:1b:c5:34:92:a0:7b: 5f:f1:10:11:24:37:5f:16:b3:e2:2d:93:a6:30:e8:7c:b9:5a: d3:61:52:db:2c:9f:3d:bf:2c:31:47:32:66:b1:ef:89:8d:16: a3:4c:0e:06:29:fd:4a:37:a1:9e:a7:72:da:8a:1a:d2:d8:05: 98:31:1d:09:e0:58:0b:52:a0:32:d0:c3:ba:b7:f6:82:48:2f: c8:8e:b2:f9:00:1f:cd:9a:22:de:f7:02:d3:45:e4:e3:93:f7: d6:8b:79:39:59:07:ad:66:7f:f2:82:8a:6d:ac:4b:b8:8d:47: a5:8a:ea:73:09:7f:b5:fc:4f:c3:b1:7d:97:f6:e2:6e:98:9b: 9d:e3:dd:1c:d8:5a:a7:fa:99:0e:c6:23:92:d6:c7:b9:65:10: 8c:aa:fd:10:7c:45:e7:b6:c3:1f:22:80:2c:56:59:97:7a:87: 4e:a9:6b:e5:87:7d:4d:d1:be:85:ed:7b:00:02:17:64:d4:e1: 3f:13:05:c7:5d:c0:d4:db:74:64:1c:87:bc:08:90:bc:5d:b5: b2:26:42:c3:96:37:10:fa:f2:d2:e2:81:ed:76:29:4e:b1:6a: 73:8b:6b:d3:97:74:3a:24:66:3b:80:1f:f1:9c:97:55:e4:af: 7c:f2:7e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSnGqS7FZOzxQRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZjdkNWM5YTAtNDU2MS00OGYyLTllZGEtZGQ3Y2U2ODQ0M2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLp50u2As7acVbp/TmR3z0hgqMLkk/E+AOzd 724Z5x2Ii+3MkbpvpU1EUVOAM+64uN3V7NyGWPgfz63fxVBCL9ckIN8XAsaenp0M cwbfV9+NZEMoO+pfqbcPgFRNbS3GsoSPIQnVl1RN/vaeSfU0cI6nUCzWD4bnh5ul KzoxWbRVGBpPoTOnJvyXBFh0VC4pF15rBrue57Sgz6LxpWgkgdHZNc//26Yes0+L IWbBje0MUjS1v85xa3wrxi0TylJ1gwYuREvkCG5UCaNgiA35jQMOrxFSg2KT2pyj 0l7rj+NFDOCU9i/nz7bTZIIwWCURSea+8bRrZHJDokDpXA8GJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNUciibikcUJqVL+fI8V4prekiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWM0MWYyNzMtMDM3Zi0z NGY0LWFkODAtMzYzZmM4Nzc0ODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRS4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7wcbPPMFaYa5ns4hvFNJKge1/xEBEkN18Ws+Itk6Yw6Hy5WtNhUtss nz2/LDFHMmax74mNFqNMDgYp/Uo3oZ6nctqKGtLYBZgxHQngWAtSoDLQw7q39oJI L8iOsvkAH82aIt73AtNF5OOT99aLeTlZB61mf/KCim2sS7iNR6WK6nMJf7X8T8Ox fZf24m6Ym53j3RzYWqf6mQ7GI5LWx7llEIyq/RB8Ree2wx8igCxWWZd6h06pa+WH fU3RvoXtewACF2TU4T8TBcddwNTbdGQch7wIkLxdtbImQsOWNxD68tLige12KU6x anOLa9OXdDokZjuAH/Gcl1Xkr3zyfpI= -----END CERTIFICATE-----Generated at Sat Apr 12 05:31:38 2025 by rpki-client