$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa File: 916c3f1d-1340-37a7-8106-fdf9db78a154.roa (raw, json) Hash identifier: Pj9YawbcztB810GsWx3cauMntuI4qErq3g5SZ4I5Mw4= Subject key identifier: 27:FB:AC:E5:80:B9:4F:EF:15:B9:D5:9E:8F:CA:B0:B0:76:43:F4:6B Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584940397D38CBECA562F3B22600 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 29802 IP address blocks: 198.178.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:7d:38:cb:ec:a5:62:f3:b2:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=25ed36d4-31f7-4900-9844-c28bcf8c31b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:18:dd:fb:ef:ba:31:c8:4b:1c:1a:2f:03:4c: e9:a8:8b:bf:80:ba:b4:e1:8e:31:6b:aa:8f:23:93: 61:a0:ab:36:8c:02:f8:be:fe:bb:52:02:2d:c6:84: d0:f4:3c:37:28:0e:c3:9e:15:9b:92:0a:22:52:fc: 27:7c:9e:35:88:05:f8:65:2c:55:c6:4c:1f:01:dd: 58:7b:0a:22:0c:ae:2f:9a:74:9c:67:2b:39:99:16: c5:1e:fc:b9:cb:dd:65:05:ce:a2:07:a3:af:c5:33: e1:0e:2d:62:85:d6:ee:ae:6c:ee:ab:2b:db:e9:33: a9:ab:3d:ba:a9:95:54:12:2c:11:33:ae:fe:86:54: e5:61:75:ec:dd:db:b2:73:48:97:a2:e3:8f:e9:27: b9:54:64:4a:45:8a:19:4c:57:6e:8e:c8:27:06:2f: 40:69:b0:3a:8f:5a:5f:e8:5a:a5:52:c1:cd:e7:8b: 61:a3:1a:2d:35:4c:50:72:b8:6c:ab:26:95:2d:76: a0:eb:d8:6a:6c:7b:49:7a:e2:1f:7b:4d:39:5e:f2: 9d:60:9c:da:73:5f:e4:e5:b8:6c:99:d7:ec:0b:39: 77:ae:ff:a5:d7:2a:b0:12:4e:c6:10:4d:3c:a8:cd: 16:94:55:53:07:fe:65:50:5c:31:61:bd:d5:97:7d: ce:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FB:AC:E5:80:B9:4F:EF:15:B9:D5:9E:8F:CA:B0:B0:76:43:F4:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/916c3f1d-1340-37a7-8106-fdf9db78a154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 198.178.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c2:07:d8:27:06:ad:d8:fe:33:38:c9:49:4f:9b:f7:c1:13: 7d:5a:db:c1:16:c3:5c:f4:80:b1:9a:cf:80:f3:07:e5:dd:66: f3:50:26:37:e3:1a:b7:6d:4a:dc:f9:84:52:05:3e:54:8f:49: 0e:b1:50:dd:00:ea:14:98:ac:2a:c9:2a:c0:82:5b:86:d7:a6: a6:3f:78:52:91:12:67:f4:cf:3b:91:14:da:66:2a:ab:4e:18: c1:c9:38:87:42:4d:84:0f:6e:1b:27:f3:29:6d:cd:2d:ec:32: 27:19:52:25:87:1b:7a:f8:71:b1:e2:67:b6:f4:20:9f:1c:b8: 77:63:90:24:ee:f9:65:c3:31:66:a1:24:59:6b:df:19:30:d1: 01:1f:38:ec:98:12:0f:f7:11:2d:66:49:56:62:4d:0f:a0:f1: 2a:16:17:13:7a:b9:be:8f:0b:22:3e:cc:a9:4e:65:a7:82:1a: 16:d1:8e:d7:f9:48:c2:1f:22:4e:13:16:3b:35:d6:6e:f4:f4: c7:94:41:f5:f3:19:40:db:2f:18:ee:f7:11:c2:4c:af:ae:6b: 70:19:78:13:63:30:1f:ab:ff:dc:51:e1:7a:ae:a3:ad:49:38: 42:49:6f:a7:56:ce:0f:c3:37:dd:1d:21:4b:ad:a5:3c:8b:03: ca:12:90:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOX04y+ylYvOyJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MjVlZDM2ZDQtMzFmNy00OTAwLTk4NDQtYzI4YmNmOGMzMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRjd+++6MchLHBovA0zpqIu/gLq04Y4xa6qP I5NhoKs2jAL4vv67UgItxoTQ9Dw3KA7DnhWbkgoiUvwnfJ41iAX4ZSxVxkwfAd1Y ewoiDK4vmnScZys5mRbFHvy5y91lBc6iB6OvxTPhDi1ihdburmzuqyvb6TOpqz26 qZVUEiwRM67+hlTlYXXs3duyc0iXouOP6Se5VGRKRYoZTFdujsgnBi9AabA6j1pf 6FqlUsHN54thoxotNUxQcrhsqyaVLXag69hqbHtJeuIfe005XvKdYJzac1/k5bhs mdfsCzl3rv+l1yqwEk7GEE08qM0WlFVTB/5lUFwxYb3Vl33OTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCf7rOWAuU/vFbnVno/KsLB2Q/RrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOTE2YzNmMWQtMTM0MC0z N2E3LTgxMDYtZmRmOWRiNzhhMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxrJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDCB9gnBq3Y/jM4yUlPm/fBE31a28EWw1z0gLGaz4DzB+XdZvNQJjfj GrdtStz5hFIFPlSPSQ6xUN0A6hSYrCrJKsCCW4bXpqY/eFKREmf0zzuRFNpmKqtO GMHJOIdCTYQPbhsn8yltzS3sMicZUiWHG3r4cbHiZ7b0IJ8cuHdjkCTu+WXDMWah JFlr3xkw0QEfOOyYEg/3ES1mSVZiTQ+g8SoWFxN6ub6PCyI+zKlOZaeCGhbRjtf5 SMIfIk4TFjs11m709MeUQfXzGUDbLxju9xHCTK+ua3AZeBNjMB+r/9xR4Xquo61J OEJJb6dWzg/DN90dIUutpTyLA8oSkK4= -----END CERTIFICATE-----Generated at Sat Apr 12 08:17:26 2025 by rpki-client