$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/84121d1f-462f-3cfe-83fa-6a9aab01ec21.roa File: 84121d1f-462f-3cfe-83fa-6a9aab01ec21.roa (raw, json) Hash identifier: YWQddS70ACAD0Kt6wsVVQXM8omYsEBLHq0rCYSztIMc= Subject key identifier: 68:39:85:23:B1:4F:2E:3C:6A:6B:0E:B8:05:E6:E1:67:36:0F:40:B3 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858494039437CF25A27E157F10E80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/84121d1f-462f-3cfe-83fa-6a9aab01ec21.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 394727 IP address blocks: 107.155.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:43:7c:f2:5a:27:e1:57:f1:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=e3c8b469-c2fe-4e27-be80-5ea1100fabaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:85:83:30:bc:80:20:e9:62:dc:47:49:c1: 3d:11:dd:7b:90:68:a8:f6:a3:d0:ce:15:a9:28:af: 34:9b:f5:07:8a:7b:bd:2f:5a:51:c6:78:4f:33:62: 95:95:96:1b:fa:73:82:bc:e7:9a:a5:33:36:3c:fc: d9:9c:5e:79:38:1c:6f:67:ad:47:3b:70:c2:49:57: f3:0c:4d:b3:2b:0e:13:40:20:72:0d:b0:b6:1a:e7: e8:2e:05:41:13:f1:0a:f2:cc:5c:86:b7:68:44:fd: ac:a6:ff:94:f0:c7:3f:84:c2:ad:66:b9:1c:44:d2: 52:88:98:5e:6d:5d:13:56:cf:4a:ea:17:6d:dc:f0: 54:ba:3e:82:ef:f8:e7:c3:6e:c2:0d:cc:cc:c5:f3: dc:d2:ad:cd:79:f6:df:d9:f6:1d:6a:3c:90:2d:ef: a0:c9:33:c2:86:d9:4b:31:49:e1:e2:ab:b5:e9:78: 84:ff:4b:6b:81:a2:67:72:f6:c0:bb:9a:e6:a6:e5: 0f:d8:61:0d:c5:d4:32:6d:d1:c9:64:7b:1a:b8:39: 26:bc:a4:e1:52:98:82:80:cb:e4:1b:9e:27:a0:c7: 93:2a:25:b9:ed:a6:cb:53:cb:04:b3:b7:79:b3:e6: 52:cc:96:43:f8:c2:59:38:e7:1e:67:49:c7:8b:82: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:39:85:23:B1:4F:2E:3C:6A:6B:0E:B8:05:E6:E1:67:36:0F:40:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/84121d1f-462f-3cfe-83fa-6a9aab01ec21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 107.155.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b0:42:e6:60:7d:73:f7:44:12:60:51:26:a7:f8:b8:76:ab: e4:f0:c2:c2:ca:9c:7d:48:a5:3c:08:23:06:24:03:18:da:07: 43:c5:bf:3e:95:f5:b2:87:25:2d:92:30:ac:f0:59:dc:56:6f: c9:64:77:1b:7e:51:52:63:52:9c:fc:67:25:ab:c9:31:a9:86: 20:8a:88:09:34:a8:ee:69:48:6d:20:2e:d7:86:7a:e3:26:23: 81:34:7a:8a:00:f9:b6:4d:2f:85:37:b4:c9:56:c9:d1:9a:ce: 6b:93:27:b8:8d:59:5d:5e:f3:c8:27:6e:6c:4b:c5:92:db:5b: c0:f3:5a:ba:80:2d:72:ca:81:90:b2:1d:14:ec:f4:0d:de:6f: 9c:ca:be:df:75:4d:f9:ae:83:04:54:de:1f:a5:17:57:c0:c3: d3:e0:90:83:3d:95:19:fa:c2:91:de:8a:4d:d1:23:08:d2:cd: dd:ff:a3:05:ba:f6:17:1b:b8:0c:77:94:4d:b9:ab:7b:c2:5f: eb:0c:ba:e4:a2:96:19:81:89:cb:f1:16:ee:39:95:aa:fc:15: e0:a5:9d:da:16:8a:50:77:1c:b4:70:26:14:fe:e9:f5:58:d0: 1d:8b:17:97:c3:30:c1:d9:87:57:8e:e9:bb:30:5d:48:72:20: e4:b0:07:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUN88lon4VfxDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZTNjOGI0NjktYzJmZS00ZTI3LWJlODAtNWVhMTEwMGZhYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8+FgzC8gCDpYtxHScE9Ed17kGio9qPQzhWp KK80m/UHinu9L1pRxnhPM2KVlZYb+nOCvOeapTM2PPzZnF55OBxvZ61HO3DCSVfz DE2zKw4TQCByDbC2GufoLgVBE/EK8sxchrdoRP2spv+U8Mc/hMKtZrkcRNJSiJhe bV0TVs9K6hdt3PBUuj6C7/jnw27CDczMxfPc0q3Nefbf2fYdajyQLe+gyTPChtlL MUnh4qu16XiE/0trgaJncvbAu5rmpuUP2GENxdQybdHJZHsauDkmvKThUpiCgMvk G54noMeTKiW57abLU8sEs7d5s+ZSzJZD+MJZOOceZ0nHi4L70wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg5hSOxTy48amsOuAXm4Wc2D0CzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvODQxMjFkMWYtNDYyZi0z Y2ZlLTgzZmEtNmE5YWFiMDFlYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5tsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGwQuZgfXP3RBJgUSan+Lh2q+TwwsLKnH1IpTwIIwYkAxjaB0PFvz6V 9bKHJS2SMKzwWdxWb8lkdxt+UVJjUpz8ZyWryTGphiCKiAk0qO5pSG0gLteGeuMm I4E0eooA+bZNL4U3tMlWydGazmuTJ7iNWV1e88gnbmxLxZLbW8DzWrqALXLKgZCy HRTs9A3eb5zKvt91TfmugwRU3h+lF1fAw9PgkIM9lRn6wpHeik3RIwjSzd3/owW6 9hcbuAx3lE25q3vCX+sMuuSilhmBicvxFu45lar8FeClndoWilB3HLRwJhT+6fVY 0B2LF5fDMMHZh1eO6bswXUhyIOSwBwY= -----END CERTIFICATE-----Generated at Sat Apr 12 17:20:46 2025 by rpki-client