$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa File: 9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa (raw, json) Hash identifier: ug+bJhk02NTGV/KrvHmbL5kanRK3muX0bz4n+jnh7CI= Subject key identifier: 11:15:83:29:04:C5:73:3D:2D:89:8A:71:04:9E:8E:46:91:0D:F2:12 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285848AAFB6C7EFE7CF6D2054F5D80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 401299 IP address blocks: 66.96.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:6c:7e:fe:7c:f6:d2:05:4f:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=3cc48588-9e20-4447-b5bb-1d782e52120d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:7c:7c:e6:75:bb:99:91:e3:66:31:3c:e4: b8:98:52:58:95:22:d9:ca:2a:4d:0b:f5:3d:82:5e: d7:81:10:b5:37:d0:9b:90:b0:14:bc:ec:1a:a1:92: 18:b1:d0:11:d8:f9:cb:e9:52:21:66:0b:0e:51:cc: 15:bc:a2:b4:4c:4e:ed:14:b6:20:91:e5:f2:05:6b: b7:57:f6:b3:46:f5:52:04:c2:33:7d:9e:36:d2:58: 8f:b7:54:e0:d6:3d:50:bd:8b:8c:ff:11:59:14:bf: 8e:c7:5e:ea:0f:c1:35:61:dc:64:65:25:f9:2d:c6: f0:8a:68:77:83:28:02:6c:6b:91:0b:8f:1d:e8:ab: fa:36:5f:de:11:2f:ae:8a:96:45:9e:3d:8a:ca:ea: 7e:f6:ad:f4:ad:ba:55:78:a7:67:e4:2b:1d:25:7d: cb:de:d1:a9:02:70:29:e0:3f:f2:1d:c9:b6:8b:de: eb:da:62:ac:7e:82:13:fb:84:2d:5c:ea:b1:9a:4d: 01:00:a4:49:81:ff:93:a1:ec:2f:fb:ad:2f:f0:25: f0:9c:3b:80:18:e4:59:87:98:6b:2d:b7:e4:6f:8f: 25:84:f5:a7:8b:20:d6:e8:77:42:a0:03:75:ba:ad: 34:49:3b:f8:ea:af:94:64:92:72:d8:46:b4:5f:63: 3e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:15:83:29:04:C5:73:3D:2D:89:8A:71:04:9E:8E:46:91:0D:F2:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/9e7e057a-d07f-351d-b281-a2c6cf713a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b0:f2:97:c4:b1:6d:0c:61:e7:ec:1a:4c:97:18:51:1f:2c: af:0a:1c:20:63:6a:35:47:8f:84:a5:3e:71:ad:b5:04:71:d8: ad:17:f7:b8:f8:56:83:55:02:25:22:06:f1:63:d9:0f:91:48: c2:3a:3e:35:25:7b:0d:bb:aa:36:25:7e:40:15:00:16:47:c8: 2a:4c:3e:66:d9:5e:62:e2:61:bb:4f:78:fc:06:a8:4a:44:90: 9f:ef:e0:b8:4b:34:12:b7:0e:31:c7:99:f8:5a:3a:c3:1d:15: 66:8a:97:20:1a:92:2e:37:f9:7a:c1:14:47:e3:5e:90:d8:2f: 54:8b:46:99:aa:ef:9c:0d:00:3a:c5:36:1a:76:8d:48:9f:d6: fa:4f:dd:76:41:59:68:70:a4:94:9b:5a:6e:33:88:9e:63:fb: e6:48:79:de:60:6a:4c:5e:18:9f:79:60:87:97:70:14:53:7b: 2b:4a:f8:58:22:4b:73:62:f3:d3:fc:7a:a3:f1:74:5e:1c:ff: 79:a0:a3:20:ca:47:e9:a8:b4:f0:20:89:bf:24:01:0c:ca:6c: 7d:fa:37:a3:1a:b3:2c:9f:66:9d:84:3c:cd:ac:9e:92:3e:5e: f6:d4:71:13:dc:9d:f4:c9:bf:a1:d5:45:9d:59:03:50:03:6f: f5:20:8d:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2x+/nz20gVPXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk M2NjNDg1ODgtOWUyMC00NDQ3LWI1YmItMWQ3ODJlNTIxMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCp8fOZ1u5mR42YxPOS4mFJYlSLZyipNC/U9 gl7XgRC1N9CbkLAUvOwaoZIYsdAR2PnL6VIhZgsOUcwVvKK0TE7tFLYgkeXyBWu3 V/azRvVSBMIzfZ420liPt1Tg1j1QvYuM/xFZFL+Ox17qD8E1YdxkZSX5Lcbwimh3 gygCbGuRC48d6Kv6Nl/eES+uipZFnj2Kyup+9q30rbpVeKdn5CsdJX3L3tGpAnAp 4D/yHcm2i97r2mKsfoIT+4QtXOqxmk0BAKRJgf+Toewv+60v8CXwnDuAGORZh5hr Lbfkb48lhPWniyDW6HdCoAN1uq00STv46q+UZJJy2Ea0X2M+8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEVgykExXM9LYmKcQSejkaRDfISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOWU3ZTA1N2EtZDA3Zi0z NTFkLWIyODEtYTJjNmNmNzEzYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESw8pfEsW0MYefsGkyXGFEfLK8KHCBjajVHj4SlPnGttQRx2K0X97j4 VoNVAiUiBvFj2Q+RSMI6PjUlew27qjYlfkAVABZHyCpMPmbZXmLiYbtPePwGqEpE kJ/v4LhLNBK3DjHHmfhaOsMdFWaKlyAaki43+XrBFEfjXpDYL1SLRpmq75wNADrF Nhp2jUif1vpP3XZBWWhwpJSbWm4ziJ5j++ZIed5gakxeGJ95YIeXcBRTeytK+Fgi S3Ni89P8eqPxdF4c/3mgoyDKR+motPAgib8kAQzKbH36N6MasyyfZp2EPM2snpI+ XvbUcRPcnfTJv6HVRZ1ZA1ADb/UgjVo= -----END CERTIFICATE-----Generated at Sat Apr 12 17:23:04 2025 by rpki-client