$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa File: bf5295e2-1c04-3ba0-be72-988f0756c50e.roa (raw, json) Hash identifier: k312J4b2RKyXCTDTE7gHo4yo5aJ7puL++9IHbcwSH8I= Subject key identifier: A4:A7:89:D3:E8:97:ED:0B:98:BE:9A:BC:00:B7:40:5F:E2:51:E1:7D Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584940397BA4ED88B7F73F1B9E00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 29802 IP address blocks: 23.227.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:7b:a4:ed:88:b7:f7:3f:1b:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=a5074092-e496-41a3-839a-7a0d10001b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d4:a8:10:99:4f:fc:1b:ab:b2:ec:9c:50:f8: 0a:ff:97:4c:a5:7e:58:56:46:e1:8c:a5:d3:d2:d6: 45:7d:13:59:e2:e3:72:b9:bf:65:c7:fa:78:f1:2f: 4b:05:de:02:74:58:7a:34:38:81:f2:68:dc:ce:20: eb:23:6e:de:b9:99:be:bb:7a:8d:ff:80:12:3a:11: 15:9d:cc:33:3d:ee:d3:8a:e0:90:b6:a0:16:d6:2f: b4:fa:b5:3e:1f:df:7c:09:04:49:9c:de:7f:13:c7: 04:44:59:77:09:8d:4d:a9:8e:b9:37:3f:6b:28:87: e9:c3:7d:2e:d4:83:8c:39:9b:1d:9d:4f:9a:63:7a: c6:22:f6:30:4c:8c:1e:e6:fa:e1:af:9e:44:4f:d0: c6:d8:03:71:38:39:c4:52:2b:47:88:f6:2e:54:9d: 00:de:72:b7:57:0e:e7:77:86:ab:ee:e9:cb:60:f3: 1f:b5:3d:61:16:3b:9c:01:13:27:43:a7:8c:6c:fc: a9:46:64:c4:d3:bf:7c:21:9e:46:96:e0:2a:27:52: 48:98:85:4e:e9:d3:81:15:31:87:a1:4d:86:d2:bd: a7:20:2e:e7:19:ef:92:61:ee:a5:f0:73:30:a8:2b: 18:69:6e:3d:8a:05:b0:8f:e5:0e:6d:a7:89:d4:f0: 4f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A7:89:D3:E8:97:ED:0B:98:BE:9A:BC:00:B7:40:5F:E2:51:E1:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.227.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:87:43:fd:e4:1c:e3:34:7f:01:db:1e:72:ff:0d:17:0e:21: f3:aa:3f:fa:1f:d1:b3:9b:b3:94:74:b5:b7:0d:b5:0c:9a:bb: 25:00:5a:6e:dd:b0:48:36:a5:79:eb:7d:e1:6a:6e:8d:38:d6: 49:97:53:50:16:b4:01:8c:0c:f5:c4:b3:cb:82:82:33:78:33: cf:15:45:f6:f2:06:e1:63:0f:e4:2c:84:9c:28:56:b5:34:81: d1:0d:77:7b:bc:3e:66:94:05:1e:d6:e0:db:7d:b4:ff:63:1f: 5d:9e:99:56:af:65:0d:c3:a0:50:13:db:47:75:47:0b:64:f1: 36:df:97:14:e5:67:2f:b8:5b:1f:d1:54:f5:ff:33:85:eb:37: a4:9a:0e:7d:80:82:cb:68:eb:84:6b:10:bc:0d:a3:75:68:c1: f8:ff:65:73:2d:b2:a2:6d:55:84:ae:04:0f:20:20:7b:ae:40: b5:52:d1:d5:e8:a1:a5:19:77:83:81:e8:62:00:83:ff:06:96: 0f:b6:53:98:b8:e1:5c:ce:02:44:bd:93:38:52:b0:2a:f4:3f: a3:ed:0f:a6:ce:50:cd:09:11:b6:44:21:44:17:bd:ae:82:2e: dd:ec:aa:7f:42:c5:22:fd:c9:1c:53:37:f4:02:9f:5d:1e:e8: 1b:34:1a:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOXuk7Yi39z8bngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YTUwNzQwOTItZTQ5Ni00MWEzLTgzOWEtN2EwZDEwMDAxYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdSoEJlP/BursuycUPgK/5dMpX5YVkbhjKXT 0tZFfRNZ4uNyub9lx/p48S9LBd4CdFh6NDiB8mjcziDrI27euZm+u3qN/4ASOhEV ncwzPe7TiuCQtqAW1i+0+rU+H998CQRJnN5/E8cERFl3CY1NqY65Nz9rKIfpw30u 1IOMOZsdnU+aY3rGIvYwTIwe5vrhr55ET9DG2ANxODnEUitHiPYuVJ0A3nK3Vw7n d4ar7unLYPMftT1hFjucARMnQ6eMbPypRmTE0798IZ5GluAqJ1JImIVO6dOBFTGH oU2G0r2nIC7nGe+SYe6l8HMwqCsYaW49igWwj+UObaeJ1PBP3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSnidPol+0LmL6avAC3QF/iUeF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYmY1Mjk1ZTItMWMwNC0z YmEwLWJlNzItOTg4ZjA3NTZjNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+OgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWHQ/3kHOM0fwHbHnL/DRcOIfOqP/of0bObs5R0tbcNtQyauyUAWm7d sEg2pXnrfeFqbo041kmXU1AWtAGMDPXEs8uCgjN4M88VRfbyBuFjD+QshJwoVrU0 gdENd3u8PmaUBR7W4Nt9tP9jH12emVavZQ3DoFAT20d1Rwtk8TbflxTlZy+4Wx/R VPX/M4XrN6SaDn2Agsto64RrELwNo3Vowfj/ZXMtsqJtVYSuBA8gIHuuQLVS0dXo oaUZd4OB6GIAg/8Glg+2U5i44VzOAkS9kzhSsCr0P6PtD6bOUM0JEbZEIUQXva6C Lt3sqn9CxSL9yRxTN/QCn10e6Bs0Gh4= -----END CERTIFICATE-----Generated at Sat Apr 12 05:29:50 2025 by rpki-client