$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa File: 5c388c98-e698-3634-a1c7-a223e82c1398.roa (raw, json) Hash identifier: TsNF6V2+lhQRCmi86joaF7A/NBSCGXaDy21ZO7Pha3E= Subject key identifier: F0:9D:D1:A3:B0:E5:F7:FE:7E:23:4D:AF:1A:2C:60:A4:C9:12:9B:F8 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858493C0923A31C1FC75E8AC2C278 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 29802 IP address blocks: 66.232.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:23:a3:1c:1f:c7:5e:8a:c2:c2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=a0e9b033-1fb8-473e-a99c-f9182a1140c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:a3:8f:5d:ef:bb:07:95:a8:c0:f4:8a:7a: 9a:0b:1e:23:2c:0a:d5:7d:11:b8:aa:f6:bc:79:b8: 9e:93:7e:4c:0f:d3:47:23:a3:5c:d5:63:5c:29:fc: 46:24:6b:28:3e:66:f5:38:46:78:d1:a4:f8:87:d5: 7c:ec:9c:e8:5b:0c:a8:72:2d:24:4d:df:3c:1b:e3: dc:59:3e:c2:6b:9a:e9:ea:d4:10:15:fa:03:bf:86: bc:79:c1:b1:5c:b4:be:40:e3:d4:44:8c:e8:b1:4a: 80:5f:59:78:09:b7:5b:46:25:66:47:ed:e1:4c:68: bd:34:2a:95:b5:06:a3:da:c7:21:db:42:75:47:f4: 41:05:dd:80:cd:ee:a1:59:c8:62:62:41:6a:af:ef: 0c:bb:30:3c:2f:ce:65:9f:f9:fb:06:63:1a:21:14: 38:6d:85:c2:bc:2e:bb:fc:16:95:cd:1e:b7:c9:9a: 4c:2d:f3:4f:45:f4:1b:a5:73:23:fb:9b:81:d3:ae: c4:87:7c:4c:0c:87:71:77:ff:b0:f8:c0:50:36:1a: 39:2f:05:01:49:e2:6a:0c:36:ae:36:dd:8e:e0:dc: 0e:2d:25:34:6b:17:cb:7f:f4:ab:89:09:35:a1:f1: 11:1d:d0:6b:06:82:d1:ff:1d:d4:c6:49:cc:74:e3: 03:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9D:D1:A3:B0:E5:F7:FE:7E:23:4D:AF:1A:2C:60:A4:C9:12:9B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.232.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:50:07:ea:2a:8d:2a:de:ee:c3:b3:67:ae:ce:7a:ac:86:e0: 15:a8:38:70:5e:b5:8e:31:55:ca:f6:6f:6a:c9:32:96:21:e0: a5:71:a0:04:58:e2:b2:74:4f:ca:18:76:53:b4:8b:80:6e:ff: bf:57:1d:f8:6f:b7:1e:0d:3f:d0:ee:ce:a1:7a:29:67:f2:4a: 87:9a:07:65:d0:d7:0c:31:50:f5:db:3e:65:56:4b:94:12:5c: d5:fc:3a:98:ec:7f:9d:40:66:e9:de:00:93:f1:ad:5e:2c:a0: 1a:be:ca:f8:ea:72:bb:50:d1:56:94:f6:5f:33:d9:e8:fc:ee: c1:f2:d9:92:71:bf:7c:ba:64:61:fc:b3:8e:7b:aa:50:ed:25: d5:53:5c:42:80:aa:ec:8d:95:4f:0f:c1:cc:cb:68:4f:12:81: 4d:57:05:e9:8e:c0:bc:c9:54:cd:03:31:b3:db:f0:df:0c:c6: 67:6f:6e:04:eb:f6:08:2b:d5:f3:e9:37:de:3d:1f:96:ab:41: 55:83:72:64:a7:a5:7a:7f:af:7a:a5:85:6f:b5:ea:8a:ff:8f: e9:b3:19:ea:af:4b:6b:43:e3:ce:ec:bf:b7:5d:2b:db:4c:b7: 68:54:f4:38:4b:38:93:33:13:f5:a1:c7:bc:b4:1e:49:2f:58: d2:86:5e:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSOjHB/HXorCwngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk YTBlOWIwMzMtMWZiOC00NzNlLWE5OWMtZjkxODJhMTE0MGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZWjj13vuweVqMD0inqaCx4jLArVfRG4qva8 ebiek35MD9NHI6Nc1WNcKfxGJGsoPmb1OEZ40aT4h9V87JzoWwyoci0kTd88G+Pc WT7Ca5rp6tQQFfoDv4a8ecGxXLS+QOPURIzosUqAX1l4CbdbRiVmR+3hTGi9NCqV tQaj2sch20J1R/RBBd2Aze6hWchiYkFqr+8MuzA8L85ln/n7BmMaIRQ4bYXCvC67 /BaVzR63yZpMLfNPRfQbpXMj+5uB067Eh3xMDIdxd/+w+MBQNho5LwUBSeJqDDau Nt2O4NwOLSU0axfLf/SriQk1ofERHdBrBoLR/x3UxknMdOMDewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCd0aOw5ff+fiNNrxosYKTJEpv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNWMzODhjOTgtZTY5OC0z NjM0LWExYzctYTIyM2U4MmMxMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQuhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdQB+oqjSre7sOzZ67OeqyG4BWoOHBetY4xVcr2b2rJMpYh4KVxoARY 4rJ0T8oYdlO0i4Bu/79XHfhvtx4NP9DuzqF6KWfySoeaB2XQ1wwxUPXbPmVWS5QS XNX8Opjsf51AZuneAJPxrV4soBq+yvjqcrtQ0VaU9l8z2ej87sHy2ZJxv3y6ZGH8 s457qlDtJdVTXEKAquyNlU8PwczLaE8SgU1XBemOwLzJVM0DMbPb8N8MxmdvbgTr 9ggr1fPpN949H5arQVWDcmSnpXp/r3qlhW+16or/j+mzGeqvS2tD487sv7ddK9tM t2hU9DhLOJMzE/Whx7y0HkkvWNKGXhA= -----END CERTIFICATE-----Generated at Sat Apr 12 05:32:31 2025 by rpki-client