$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa File: 5c388c98-e698-3634-a1c7-a223e82c1398.roa (raw, json) Hash identifier: 8kLGgHiPJYAzlag8kZSKH5H/xR3kHhyYT31rgz2tI8o= Subject key identifier: BC:11:30:AE:A8:00:1E:B1:38:42:83:F0:20:C0:C4:D8:34:7E:AA:48 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858485B6AF747BD2672A2C3CD9580 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 29802 IP address blocks: 66.232.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:f7:47:bd:26:72:a2:c3:cd:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=389a0255-82ca-46c0-9415-ca98f5bf5b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:70:9f:c8:93:a9:03:91:68:2a:af:d0:88: ef:68:9c:13:20:fe:43:28:5b:08:19:02:a0:e4:b2: 20:09:98:c3:aa:bf:0c:8e:d3:c0:1a:2c:22:51:f9: 1f:d5:ce:0f:8e:13:5f:99:f2:30:e5:c0:ec:2b:0f: 00:b4:94:5d:0a:df:60:c0:95:b2:46:b6:e6:d1:02: 26:ee:72:44:9e:c1:eb:d7:3c:27:a5:22:8b:aa:58: 14:c7:6d:6a:4c:5d:d2:25:b0:12:96:04:30:e1:de: 2d:74:16:4d:be:70:bd:a2:50:71:ec:63:99:c5:41: e8:8c:87:67:00:d8:1f:6e:3c:64:8e:fb:37:05:62: 02:1d:e2:df:cf:f1:30:f4:3c:26:d1:7f:6c:a7:eb: ae:d5:82:cc:e2:5f:5a:de:36:24:e8:70:88:71:43: 3a:d4:b5:02:2d:ac:53:de:ec:81:ce:d4:87:72:3c: 56:c9:75:5d:01:70:5b:bf:08:f0:a4:d7:ee:f3:4f: 36:d7:48:0a:97:45:11:15:6c:49:88:4d:e4:ce:52: 59:03:a4:8a:75:e3:9e:0a:34:de:71:d4:b1:f2:ab: 01:cd:b4:83:32:43:d8:96:3c:87:83:08:10:2a:5c: 2b:7d:e5:21:4f:c4:e6:c8:1d:b8:fb:56:2b:24:fa: ce:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:11:30:AE:A8:00:1E:B1:38:42:83:F0:20:C0:C4:D8:34:7E:AA:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.232.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0c:c9:48:d4:0d:a9:a7:9e:8c:d3:fb:ad:04:cc:fc:15:b6: 9e:02:a8:4d:53:86:9b:51:47:b2:90:7c:07:95:79:d0:94:1b: d6:6e:a9:32:25:37:dc:35:5d:d3:6d:d4:f9:e6:80:1c:b0:7c: dd:6d:54:4e:4f:37:d3:15:0c:38:aa:95:60:70:a5:98:94:af: d9:ef:35:09:7d:f0:7f:b3:68:35:9a:38:8c:73:7f:32:85:83: a6:c8:53:51:d8:78:a0:0a:a6:9a:87:df:51:6a:00:57:8d:21: 90:91:8a:7e:a1:60:81:38:52:5a:d7:b7:d9:22:a3:55:c9:01: a7:7c:ed:b6:3c:8d:66:6b:c1:e5:bc:9e:78:37:65:e3:32:e3: aa:db:92:ed:ec:ff:eb:a9:15:49:00:3c:81:a4:2e:2a:60:ec: d0:66:c0:b5:b7:38:fb:71:78:26:53:ca:7e:77:e6:2c:95:80: d0:8d:b0:39:cd:f5:73:c8:44:3c:2b:11:dc:3b:50:f5:82:ed: fc:2b:03:60:48:0d:6f:9c:d9:ae:9d:6a:3b:d9:40:64:0d:33: 17:0c:29:c5:19:8c:b5:4d:5b:ee:0a:70:50:c6:39:25:85:82: de:35:26:ff:3e:40:92:b5:ca:fa:d1:14:2c:44:7d:28:c2:bc: fd:7a:91:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavdHvSZyosPNlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk Mzg5YTAyNTUtODJjYS00NmMwLTk0MTUtY2E5OGY1YmY1YjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0lwn8iTqQORaCqv0IjvaJwTIP5DKFsIGQKg 5LIgCZjDqr8MjtPAGiwiUfkf1c4PjhNfmfIw5cDsKw8AtJRdCt9gwJWyRrbm0QIm 7nJEnsHr1zwnpSKLqlgUx21qTF3SJbASlgQw4d4tdBZNvnC9olBx7GOZxUHojIdn ANgfbjxkjvs3BWICHeLfz/Ew9Dwm0X9sp+uu1YLM4l9a3jYk6HCIcUM61LUCLaxT 3uyBztSHcjxWyXVdAXBbvwjwpNfu808210gKl0URFWxJiE3kzlJZA6SKdeOeCjTe cdSx8qsBzbSDMkPYljyHgwgQKlwrfeUhT8TmyB24+1YrJPrO6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwRMK6oAB6xOEKD8CDAxNg0fqpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNWMzODhjOTgtZTY5OC0z NjM0LWExYzctYTIyM2U4MmMxMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQuhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkMyUjUDamnnozT+60EzPwVtp4CqE1ThptRR7KQfAeVedCUG9ZuqTIl N9w1XdNt1PnmgBywfN1tVE5PN9MVDDiqlWBwpZiUr9nvNQl98H+zaDWaOIxzfzKF g6bIU1HYeKAKppqH31FqAFeNIZCRin6hYIE4UlrXt9kio1XJAad87bY8jWZrweW8 nng3ZeMy46rbku3s/+upFUkAPIGkLipg7NBmwLW3OPtxeCZTyn535iyVgNCNsDnN 9XPIRDwrEdw7UPWC7fwrA2BIDW+c2a6dajvZQGQNMxcMKcUZjLVNW+4KcFDGOSWF gt41Jv8+QJK1yvrRFCxEfSjCvP16kVk= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:18 2025 by rpki-client