$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/4f854a41-341c-3751-a8f4-828af737083f.roa File: 4f854a41-341c-3751-a8f4-828af737083f.roa (raw, json) Hash identifier: 4nVF5SaWCrW4K7VI2LtCpALiMGPQgu4lSaXn9MLK+jI= Subject key identifier: DF:ED:3F:06:0B:0D:A5:E7:44:8D:03:41:F9:F1:5C:36:A6:54:DA:01 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858493C0923DAF8C33EFF6E5EBA40 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/4f854a41-341c-3751-a8f4-828af737083f.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 29802 IP address blocks: 91.191.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:23:da:f8:c3:3e:ff:6e:5e:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=244af7b5-7e19-4219-ab78-cfe26fc0b794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:55:ed:31:2e:9d:20:49:8c:95:da:b6:87:64: 59:ea:c1:c8:b8:88:4f:38:d8:68:b6:53:56:fe:b1: 20:cf:03:7e:40:e2:b5:68:44:2c:f6:2a:6a:6b:3b: 8b:fa:e6:9c:33:68:09:49:da:98:2c:c9:66:c9:5d: 02:8e:66:31:2c:d4:8b:0d:fc:f0:d3:a4:1f:8e:9c: 94:42:38:35:2f:63:83:e4:e0:5e:1f:a5:35:ae:f8: 27:3a:7d:37:e7:bd:1e:3f:84:b7:8c:8f:74:44:12: b1:2a:b8:e1:d9:41:fe:8f:26:6a:76:7b:cc:a4:42: 43:f3:a5:3b:f7:84:c8:17:20:7f:28:9c:ad:a2:c3: 46:84:83:c7:82:24:01:85:36:33:14:50:88:f2:1f: f5:38:6a:ea:58:0d:5c:80:b4:ea:71:b4:94:40:71: de:66:7e:dc:14:a1:e2:25:06:69:a8:04:c2:ca:ba: ee:55:61:5c:3b:03:10:35:2f:ac:1d:16:88:ac:ec: 98:0e:ef:87:c1:60:85:c5:f4:69:19:88:ed:91:f7: c1:b8:38:89:5b:c0:c4:6d:28:06:89:83:00:6e:e9: aa:d1:5d:ab:e0:8a:64:68:9e:f5:f0:16:35:d8:a2: 32:c1:d6:99:11:06:f8:91:89:47:ae:4e:f3:c7:9a: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:ED:3F:06:0B:0D:A5:E7:44:8D:03:41:F9:F1:5C:36:A6:54:DA:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/4f854a41-341c-3751-a8f4-828af737083f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:37:16:a1:57:68:58:a2:58:b3:d7:83:76:12:b3:66:49:87: 02:73:74:9f:f7:e8:a2:db:a4:86:eb:15:e9:fc:16:2d:68:8f: dc:bd:60:c2:a4:b8:35:5e:f7:2e:49:4f:97:67:39:03:71:66: a7:05:a4:ba:12:e0:83:e0:33:34:4c:2a:66:ff:45:4e:b5:4f: 99:75:20:1e:8a:f6:1d:40:f7:5e:82:ea:18:61:1f:81:21:26: 20:78:12:31:c1:11:09:8f:27:a1:f3:5c:06:32:84:96:21:eb: 8b:6b:3d:e1:01:04:24:ed:8b:7b:03:22:77:cd:53:02:c1:36: 3c:ba:83:8a:91:ac:bf:33:b8:17:b9:13:d2:c8:62:a0:90:f9: d9:99:f1:34:39:f2:44:58:cc:57:81:e5:31:69:b1:5b:23:5a: 84:2c:e6:ad:56:12:ca:33:46:2a:9a:2e:f7:27:11:13:80:02: 8d:66:07:ed:b4:c2:24:8e:45:ed:06:4d:b7:83:fd:0a:fb:35: 36:40:d1:fe:8c:8b:4f:a9:fe:0e:92:80:e1:0c:db:be:69:05: 5a:8d:2a:41:e0:b1:d6:a3:ad:b0:33:c1:fa:8e:e8:aa:d6:35: 60:c4:84:10:2d:e5:3d:00:4e:10:e4:be:6d:f0:3d:43:a1:83: 4b:ad:e2:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSPa+MM+/25eukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MjQ0YWY3YjUtN2UxOS00MjE5LWFiNzgtY2ZlMjZmYzBiNzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFXtMS6dIEmMldq2h2RZ6sHIuIhPONhotlNW /rEgzwN+QOK1aEQs9ipqazuL+uacM2gJSdqYLMlmyV0CjmYxLNSLDfzw06QfjpyU Qjg1L2OD5OBeH6U1rvgnOn03570eP4S3jI90RBKxKrjh2UH+jyZqdnvMpEJD86U7 94TIFyB/KJytosNGhIPHgiQBhTYzFFCI8h/1OGrqWA1cgLTqcbSUQHHeZn7cFKHi JQZpqATCyrruVWFcOwMQNS+sHRaIrOyYDu+HwWCFxfRpGYjtkffBuDiJW8DEbSgG iYMAbumq0V2r4IpkaJ718BY12KIywdaZEQb4kYlHrk7zx5qBTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/tPwYLDaXnRI0DQfnxXDamVNoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNGY4NTRhNDEtMzQxYy0z NzUxLWE4ZjQtODI4YWY3MzcwODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD03FqFXaFiiWLPXg3YSs2ZJhwJzdJ/36KLbpIbrFen8Fi1oj9y9YMKk uDVe9y5JT5dnOQNxZqcFpLoS4IPgMzRMKmb/RU61T5l1IB6K9h1A916C6hhhH4Eh JiB4EjHBEQmPJ6HzXAYyhJYh64trPeEBBCTti3sDInfNUwLBNjy6g4qRrL8zuBe5 E9LIYqCQ+dmZ8TQ58kRYzFeB5TFpsVsjWoQs5q1WEsozRiqaLvcnEROAAo1mB+20 wiSORe0GTbeD/Qr7NTZA0f6Mi0+p/g6SgOEM275pBVqNKkHgsdajrbAzwfqO6KrW NWDEhBAt5T0AThDkvm3wPUOhg0ut4sA= -----END CERTIFICATE-----Generated at Sat Apr 12 05:32:21 2025 by rpki-client