$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ca20e3b8-3942-3788-9a05-d3584af53e7f.roa File: ca20e3b8-3942-3788-9a05-d3584af53e7f.roa (raw, json) Hash identifier: NOAsW69gNL+hNFiNwtq8Q0Tfj2KFiSWduhQu06MaOFY= Subject key identifier: D5:A1:E3:60:B5:F0:5D:59:4F:DC:F4:3B:5C:1A:34:F5:7E:DE:79:53 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858493C092945ABA9A49B38001940 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ca20e3b8-3942-3788-9a05-d3584af53e7f.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 29802 IP address blocks: 23.29.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:29:45:ab:a9:a4:9b:38:00:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=61dad930-7873-457a-9a57-165b656dd66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:02:2b:33:65:18:04:a1:2f:f8:70:7e:aa:15: 77:55:7c:44:48:7f:fa:e0:76:a3:58:4e:0c:7f:f6: e8:c5:03:03:09:e1:57:38:8d:97:65:dc:0a:9d:1e: c3:4d:8e:86:be:da:06:ea:b6:66:e6:6b:c8:da:70: 67:46:04:4b:4b:bb:40:14:72:69:4e:18:d0:9f:66: c9:33:e0:79:62:a7:ec:77:66:5e:51:e1:d0:56:d0: e2:7f:5c:ae:35:79:b4:df:44:8b:95:d4:32:53:96: 69:3c:0a:52:4b:0a:54:9f:22:c2:1f:73:b2:30:07: 92:88:35:ce:35:cb:f3:87:b3:cc:ac:4d:24:0d:5b: 69:90:e3:20:ce:d3:7a:40:91:1f:f6:7b:cd:06:da: 7f:50:40:b9:49:69:d2:fd:7d:06:ab:58:40:13:99: 25:dd:9f:50:67:bc:d8:ce:19:b6:0d:44:cc:bd:11: 3a:66:22:40:78:a3:cc:c3:22:ac:a0:93:be:8e:f3: 41:4c:b6:d4:43:d6:ce:49:2c:d7:cc:eb:dc:98:5d: 68:0a:7a:85:98:0f:48:64:22:cd:d1:87:93:85:2a: cd:b0:6b:44:7d:6c:43:f5:7c:57:af:f6:f2:72:4d: 21:52:21:ef:d0:d3:0b:c1:f5:17:99:d7:ed:4d:f2: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A1:E3:60:B5:F0:5D:59:4F:DC:F4:3B:5C:1A:34:F5:7E:DE:79:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ca20e3b8-3942-3788-9a05-d3584af53e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.29.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:3c:2f:e9:bf:b9:db:7c:89:fd:99:4f:94:30:72:f8:d2:28: e7:91:dd:dc:b0:ae:85:64:48:1b:20:62:f2:4e:cd:15:ae:26: 6a:f4:e7:dd:d0:64:89:1d:b7:2c:01:92:89:33:29:e5:06:fd: 56:91:f3:63:e8:ef:ee:34:8b:a3:0a:e6:ce:94:50:eb:f2:86: 40:c1:fe:8f:be:32:d1:e8:f0:fd:10:df:3d:fc:a3:c4:27:14: 95:02:0c:88:07:7c:a3:a6:01:6a:3f:b9:2d:e7:1d:62:95:9a: 27:f0:10:d1:fb:e3:95:b0:e4:ba:7f:ae:73:ee:63:c6:f7:77: af:85:15:eb:f1:d8:75:47:ad:1d:22:32:3f:2f:5d:6d:1e:d1: 66:57:8d:68:ff:8c:96:a1:bf:20:da:02:ac:72:9b:8c:6c:d2: 06:31:71:27:9a:04:5b:6a:30:f7:ce:c1:c2:1e:b3:93:75:e9: a4:a4:47:ba:04:b8:1d:5e:92:b0:d8:4b:18:f2:51:db:33:a2: 24:e2:94:d8:b1:a1:a6:ba:b2:48:37:f3:40:df:40:db:02:14: f6:25:4d:7c:45:1b:85:5c:6b:b5:d8:3b:b0:41:33:d6:9f:f6: 74:4a:4f:15:70:e7:b3:c6:93:ec:71:6e:2d:5a:2b:f6:76:c2: 56:32:b4:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSlFq6mkmzgAGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk NjFkYWQ5MzAtNzg3My00NTdhLTlhNTctMTY1YjY1NmRkNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQIrM2UYBKEv+HB+qhV3VXxESH/64HajWE4M f/boxQMDCeFXOI2XZdwKnR7DTY6GvtoG6rZm5mvI2nBnRgRLS7tAFHJpThjQn2bJ M+B5Yqfsd2ZeUeHQVtDif1yuNXm030SLldQyU5ZpPApSSwpUnyLCH3OyMAeSiDXO Ncvzh7PMrE0kDVtpkOMgztN6QJEf9nvNBtp/UEC5SWnS/X0Gq1hAE5kl3Z9QZ7zY zhm2DUTMvRE6ZiJAeKPMwyKsoJO+jvNBTLbUQ9bOSSzXzOvcmF1oCnqFmA9IZCLN 0YeThSrNsGtEfWxD9XxXr/byck0hUiHv0NMLwfUXmdftTfKUewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWh42C18F1ZT9z0O1waNPV+3nlTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvY2EyMGUzYjgtMzk0Mi0z Nzg4LTlhMDUtZDM1ODRhZjUzZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFx1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY8L+m/udt8if2ZT5QwcvjSKOeR3dywroVkSBsgYvJOzRWuJmr0593Q ZIkdtywBkokzKeUG/VaR82Po7+40i6MK5s6UUOvyhkDB/o++MtHo8P0Q3z38o8Qn FJUCDIgHfKOmAWo/uS3nHWKVmifwENH745Ww5Lp/rnPuY8b3d6+FFevx2HVHrR0i Mj8vXW0e0WZXjWj/jJahvyDaAqxym4xs0gYxcSeaBFtqMPfOwcIes5N16aSkR7oE uB1ekrDYSxjyUdszoiTilNixoaa6skg380DfQNsCFPYlTXxFG4Vca7XYO7BBM9af 9nRKTxVw57PGk+xxbi1aK/Z2wlYytKE= -----END CERTIFICATE-----Generated at Sat Apr 12 08:03:34 2025 by rpki-client