$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42d275a6-2920-3503-8bc8-18cdead41ead.roa File: 42d275a6-2920-3503-8bc8-18cdead41ead.roa (raw, json) Hash identifier: Oo8OV8ERhR98yFQURyTAQsXLr0DuO+h9Ha7hHbvNaKU= Subject key identifier: 2D:14:87:1F:F1:40:A7:B0:2B:00:28:E4:2C:B0:25:84:E2:21:D3:7D Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858487CEB2E9CDE5FA937C79A8F00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42d275a6-2920-3503-8bc8-18cdead41ead.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 29802 IP address blocks: 91.191.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:2e:9c:de:5f:a9:37:c7:9a:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=957a29b4-aba0-4638-9b0a-e993d869c5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:41:e9:85:0a:fd:32:74:7f:f4:44:90:54: 8f:4d:50:2f:ba:31:53:3e:db:d2:fc:68:88:32:53: 21:9a:f3:3c:4d:3f:4b:c4:d1:98:a2:81:e8:f9:e9: 2b:73:0a:32:30:ee:11:b6:4f:23:9f:27:fd:2e:90: db:f5:93:e1:3b:7a:8c:17:3d:c6:85:0a:f8:0f:9a: 0a:40:88:26:ef:d4:0c:91:70:8f:e3:5d:13:cf:3e: 22:cb:35:58:fb:b0:2a:50:42:24:8a:ba:b7:e1:5e: 0c:c8:29:62:a5:8f:b6:9c:25:81:21:f2:1b:e2:42: 09:ee:41:3d:ad:35:71:09:c7:50:48:85:c5:57:61: fb:ee:20:53:86:34:ac:23:61:b1:68:d1:da:d4:2b: 9d:b0:f3:d6:85:1c:72:de:12:c5:c9:6f:81:b1:55: cf:09:ac:2d:ff:7a:79:b3:d9:6f:dd:43:d2:96:a2: ac:13:c7:3a:65:9f:af:63:14:c6:a3:8b:46:ef:e8: 0d:32:eb:29:93:75:91:ea:71:92:51:17:ec:4a:8d: 37:74:bd:de:f0:23:10:98:d3:97:cd:61:11:3e:d2: 0c:81:b6:c1:98:5a:b1:0c:73:b9:c9:e3:fd:65:02: ae:f5:03:aa:16:f3:d3:54:75:bf:c6:b5:07:3a:a2: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:14:87:1F:F1:40:A7:B0:2B:00:28:E4:2C:B0:25:84:E2:21:D3:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/42d275a6-2920-3503-8bc8-18cdead41ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:34:64:e3:78:0d:13:05:ad:44:58:95:dc:4a:8d:a0:44:44: db:d8:0d:14:84:75:38:aa:45:a4:62:92:f5:c1:59:f9:22:07: 4b:37:df:a4:42:c3:12:30:11:a1:11:d8:75:43:3f:1e:39:0e: 1d:c6:8f:06:f4:66:13:fc:54:d2:c4:df:73:ac:b2:16:ec:28: 44:d4:f5:c5:d4:75:94:a5:68:44:1e:24:14:3d:19:34:12:d2: 1e:3d:5c:42:40:05:86:5f:cb:31:6a:a1:44:3d:bc:9a:8a:d9: fd:df:18:6c:08:7a:47:59:6e:94:ab:78:45:04:06:ba:91:cd: 57:9d:d3:5d:ac:cf:f5:a0:11:5f:e0:c1:42:61:91:48:67:ec: a9:43:ed:d7:cb:51:7c:a7:3a:fc:bd:9e:87:ea:33:ee:4e:e0: d5:3c:7c:46:0c:8a:f3:a3:11:ae:1b:56:e7:11:4c:30:74:bc: d6:f2:44:51:44:a6:da:aa:4f:e8:aa:90:1f:0b:e7:13:6f:28: 4b:a9:e6:47:10:73:21:d3:c4:1a:94:9d:1c:af:01:96:f4:4b: cf:c0:09:3d:46:74:17:31:ba:82:9f:59:ea:3d:88:28:48:41: 8a:39:8c:36:f7:ff:fb:3c:88:e8:5d:db:5f:a9:ea:33:16:f2: 62:1b:8c:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86y6c3l+pN8eajwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk OTU3YTI5YjQtYWJhMC00NjM4LTliMGEtZTk5M2Q4NjljNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZRB6YUK/TJ0f/REkFSPTVAvujFTPtvS/GiI MlMhmvM8TT9LxNGYooHo+ekrcwoyMO4Rtk8jnyf9LpDb9ZPhO3qMFz3GhQr4D5oK QIgm79QMkXCP410Tzz4iyzVY+7AqUEIkirq34V4MyClipY+2nCWBIfIb4kIJ7kE9 rTVxCcdQSIXFV2H77iBThjSsI2GxaNHa1CudsPPWhRxy3hLFyW+BsVXPCawt/3p5 s9lv3UPSlqKsE8c6ZZ+vYxTGo4tG7+gNMuspk3WR6nGSURfsSo03dL3e8CMQmNOX zWERPtIMgbbBmFqxDHO5yeP9ZQKu9QOqFvPTVHW/xrUHOqIYpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0Uhx/xQKewKwAo5CywJYTiIdN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNDJkMjc1YTYtMjkyMC0z NTAzLThiYzgtMThjZGVhZDQxZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY0ZON4DRMFrURYldxKjaBERNvYDRSEdTiqRaRikvXBWfkiB0s336RC wxIwEaER2HVDPx45Dh3Gjwb0ZhP8VNLE33OsshbsKETU9cXUdZSlaEQeJBQ9GTQS 0h49XEJABYZfyzFqoUQ9vJqK2f3fGGwIekdZbpSreEUEBrqRzVed012sz/WgEV/g wUJhkUhn7KlD7dfLUXynOvy9nofqM+5O4NU8fEYMivOjEa4bVucRTDB0vNbyRFFE ptqqT+iqkB8L5xNvKEup5kcQcyHTxBqUnRyvAZb0S8/ACT1GdBcxuoKfWeo9iChI QYo5jDb3//s8iOhd21+p6jMW8mIbjLM= -----END CERTIFICATE-----Generated at Fri Mar 14 08:44:41 2025 by rpki-client