$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa File: 504a2c0b-e942-3392-a51f-7d8c0fe34915.roa (raw, json) Hash identifier: FflN/26DuWIfuSH5axO438gDNk3oqz6qodpB1eW3w+Y= Subject key identifier: D1:BD:14:C0:D3:17:7B:6F:6C:3B:71:56:17:2B:28:70:AD:F5:0F:7F Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858485B6AFCA5659272B5FF8A7B80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 29802 IP address blocks: 66.165.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:fc:a5:65:92:72:b5:ff:8a:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=d5ccc530-b109-4722-a518-6d874d57f881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:29:5e:ce:a4:58:3a:c5:35:dc:45:a9:96:2b: a6:1c:3d:ef:ca:1c:41:2e:39:12:83:6e:be:81:a0: 0f:7d:0c:c8:56:ac:78:a5:67:41:45:c7:4e:19:19: 04:36:1b:f2:01:79:ea:67:fa:8b:05:b4:74:95:b6: 86:06:4b:c4:a5:7f:33:7b:a5:26:24:32:c1:c9:d6: 80:c1:5b:aa:4a:d2:16:59:d0:c4:58:14:c0:5e:86: ad:f5:28:a0:fa:e6:5a:a1:67:db:0d:9f:dd:bc:c0: 00:52:87:3b:5b:20:7d:5e:1d:b6:ea:02:1e:e6:46: 05:51:4d:af:86:b1:22:53:86:6e:a1:11:96:18:98: 2b:c9:1e:ea:1d:cb:dd:67:3b:3c:e3:35:01:a5:99: 0d:ee:a5:80:85:60:d4:2a:ee:68:fc:a4:ff:00:ca: 51:e3:94:57:af:6a:83:63:49:ff:1f:ec:27:87:35: 96:c9:63:dd:60:26:34:ca:c9:84:9f:b4:2d:30:5d: 94:3c:49:aa:1d:b6:6a:ea:4a:f0:ab:b5:6b:72:6a: 99:c1:26:e8:b6:aa:30:57:b9:74:40:89:53:36:cb: 37:f9:9b:a3:90:44:ef:f4:7a:02:11:15:3b:31:d8: 9b:19:86:fb:dc:2a:55:f1:16:30:8b:be:37:82:e3: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BD:14:C0:D3:17:7B:6F:6C:3B:71:56:17:2B:28:70:AD:F5:0F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.165.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:de:91:a4:c6:3b:20:09:6a:e4:8e:ba:c3:5d:f2:34:8d:33: 55:a8:78:c8:eb:7c:ac:55:64:45:23:90:0e:ed:cc:c2:36:81: d1:97:26:2e:0f:ac:f1:78:9d:62:3d:55:da:d0:a8:6d:a7:cf: 66:df:f2:53:1a:96:62:58:a6:e4:7f:c2:86:87:24:9c:98:a4: f4:c4:ec:02:9a:aa:7e:73:ca:16:1b:45:f4:28:28:7e:f5:d5: 00:5a:0b:31:e1:3a:66:e0:e8:bd:83:a3:9e:ea:68:24:91:cd: 00:fa:3f:9c:be:ae:27:9c:b2:18:6f:cf:63:f2:0a:a1:a3:b3: 6e:ba:da:1a:5c:f3:27:3a:da:c7:08:e9:0e:80:6b:ef:68:b1: 43:2a:3d:62:cd:14:3b:a4:80:2c:5e:4d:22:5e:b7:81:b1:ce: a5:e3:68:71:55:08:b9:23:e4:a0:e4:c5:e4:73:1c:99:ae:70: 08:24:43:45:4b:25:88:fe:cb:53:47:0f:a6:28:54:21:48:27: 08:c1:48:80:85:13:b9:85:42:6f:45:b3:a6:ee:59:a7:3a:ce: 19:40:3e:cb:e9:19:21:08:0d:61:80:9c:5b:16:a4:64:be:a9: 19:48:57:22:d1:2c:9e:00:49:6d:53:07:54:07:79:57:ac:ba: 68:47:fe:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavylZZJytf+Ke4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk ZDVjY2M1MzAtYjEwOS00NzIyLWE1MTgtNmQ4NzRkNTdmODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjylezqRYOsU13EWpliumHD3vyhxBLjkSg26+ gaAPfQzIVqx4pWdBRcdOGRkENhvyAXnqZ/qLBbR0lbaGBkvEpX8ze6UmJDLBydaA wVuqStIWWdDEWBTAXoat9Sig+uZaoWfbDZ/dvMAAUoc7WyB9Xh226gIe5kYFUU2v hrEiU4ZuoRGWGJgryR7qHcvdZzs84zUBpZkN7qWAhWDUKu5o/KT/AMpR45RXr2qD Y0n/H+wnhzWWyWPdYCY0ysmEn7QtMF2UPEmqHbZq6krwq7VrcmqZwSbotqowV7l0 QIlTNss3+ZujkETv9HoCERU7MdibGYb73CpV8RYwi743guMM4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG9FMDTF3tvbDtxVhcrKHCt9Q9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNTA0YTJjMGItZTk0Mi0z MzkyLWE1MWYtN2Q4YzBmZTM0OTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvekaTGOyAJauSOusNd8jSNM1WoeMjrfKxVZEUjkA7tzMI2gdGXJi4P rPF4nWI9VdrQqG2nz2bf8lMalmJYpuR/woaHJJyYpPTE7AKaqn5zyhYbRfQoKH71 1QBaCzHhOmbg6L2Do57qaCSRzQD6P5y+riecshhvz2PyCqGjs2662hpc8yc62scI 6Q6Aa+9osUMqPWLNFDukgCxeTSJet4GxzqXjaHFVCLkj5KDkxeRzHJmucAgkQ0VL JYj+y1NHD6YoVCFIJwjBSICFE7mFQm9Fs6buWac6zhlAPsvpGSEIDWGAnFsWpGS+ qRlIVyLRLJ4ASW1TB1QHeVesumhH/l8= -----END CERTIFICATE-----Generated at Fri Mar 14 09:28:36 2025 by rpki-client