$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa File: cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa (raw, json) Hash identifier: GZQThUfSh8tgWvzqz4JVL4aAMq8kVmcectFHpPnx058= Subject key identifier: 7C:CB:D7:A4:41:43:30:8E:15:93:3C:52:8C:F5:CC:B6:D1:FA:36:3A Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858493ED3D2D6AF45DE048A73C880 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 54540 IP address blocks: 144.168.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d2:d6:af:45:de:04:8a:73:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=0eba3770-ab1e-4863-a515-52e0f42a4849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1a:f6:81:11:23:81:d1:ad:97:87:ee:ad:cf: 87:55:28:a8:fd:ff:e2:e2:3a:65:6f:a1:3e:9d:af: 77:17:76:7a:05:a6:1d:ee:ef:d8:75:b5:9e:c0:b1: 30:8a:12:68:10:8d:e7:5e:4e:3f:22:00:27:00:40: 52:c9:ab:9a:5d:ce:9c:9f:ee:70:a3:a1:f4:74:38: 47:16:36:2a:77:3f:d7:a5:35:85:fa:69:aa:46:a5: d8:59:d1:50:20:f9:7f:4f:b1:ed:13:0e:b8:c9:31: 13:fe:30:0f:2d:55:68:bb:da:86:31:10:3d:a3:82: 91:76:b4:d5:be:04:e6:ef:27:de:f2:ed:95:ae:4d: 68:d1:d5:96:73:80:3f:21:79:71:ff:1f:9b:d5:19: 5f:db:b9:97:54:26:27:0b:9c:35:ae:db:cf:0e:eb: 1e:61:eb:5d:29:69:5f:21:19:42:d6:ff:ed:d1:76: f7:94:46:30:18:c1:55:24:0b:97:b1:27:4b:46:fb: b1:10:4c:89:a2:04:01:aa:fa:cc:c3:5d:d3:2c:4c: b8:73:d0:9a:d8:92:e8:b9:b6:54:6c:34:61:27:53: 09:bd:53:7c:7a:2c:0b:05:13:6c:21:16:96:9c:7d: 75:b4:cd:1b:c1:46:ca:ac:34:51:d7:a0:d4:63:4e: 15:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CB:D7:A4:41:43:30:8E:15:93:3C:52:8C:F5:CC:B6:D1:FA:36:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/cda0fa5e-6d5d-3768-a3da-28c3e7b942f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 144.168.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:32:6c:68:ca:76:77:34:1e:f8:ed:86:a1:4d:6e:fb:87:eb: 76:16:ff:65:e6:15:ed:b6:3c:38:54:f6:73:e7:1f:43:a8:88: 22:a8:8d:b0:f7:83:46:4b:68:14:20:07:9d:06:93:b7:4b:cc: ac:8d:df:c5:e1:2c:01:1f:06:29:d2:82:58:e7:c9:a3:bd:bd: cf:57:b6:24:41:1b:95:f6:0f:43:59:c2:ad:d0:e4:ec:e0:8c: 71:e4:dd:3d:5d:dc:72:60:ed:90:c5:14:9f:41:c1:d1:61:6c: 02:b4:a5:6a:ba:04:13:64:95:25:7c:72:40:de:3f:dd:98:43: 1a:df:2c:e0:ce:d4:58:f0:4f:71:a9:db:7f:44:99:04:0f:b0: f5:80:06:4d:b1:22:ce:99:75:c0:81:90:36:7e:8c:61:21:3e: f8:d6:4e:2c:dc:0f:ee:ab:77:e9:95:8f:56:7f:77:c8:c5:8a: 72:e8:0f:2a:a1:35:22:1c:f0:5e:f8:a5:32:c0:d7:e1:41:d0: 25:88:a2:ff:43:0b:5a:d1:dd:d0:a5:e6:fd:45:59:49:da:f4: da:35:be:f4:2f:ea:c3:2a:93:16:63:d0:8e:c1:62:01:78:c4: ff:9c:0a:45:39:af:5f:04:c4:d9:94:39:17:11:d0:21:14:f7: 5b:55:c3:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09LWr0XeBIpzyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MGViYTM3NzAtYWIxZS00ODYzLWE1MTUtNTJlMGY0MmE0ODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Rr2gREjgdGtl4furc+HVSio/f/i4jplb6E+ na93F3Z6BaYd7u/YdbWewLEwihJoEI3nXk4/IgAnAEBSyauaXc6cn+5wo6H0dDhH FjYqdz/XpTWF+mmqRqXYWdFQIPl/T7HtEw64yTET/jAPLVVou9qGMRA9o4KRdrTV vgTm7yfe8u2Vrk1o0dWWc4A/IXlx/x+b1Rlf27mXVCYnC5w1rtvPDuseYetdKWlf IRlC1v/t0Xb3lEYwGMFVJAuXsSdLRvuxEEyJogQBqvrMw13TLEy4c9Ca2JLoubZU bDRhJ1MJvVN8eiwLBRNsIRaWnH11tM0bwUbKrDRR16DUY04VFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzL16RBQzCOFZM8Uoz1zLbR+jY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvY2RhMGZhNWUtNmQ1ZC0z NzY4LWEzZGEtMjhjM2U3Yjk0MmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkKgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsybGjKdnc0HvjthqFNbvuH63YW/2XmFe22PDhU9nPnH0OoiCKojbD3 g0ZLaBQgB50Gk7dLzKyN38XhLAEfBinSgljnyaO9vc9XtiRBG5X2D0NZwq3Q5Ozg jHHk3T1d3HJg7ZDFFJ9BwdFhbAK0pWq6BBNklSV8ckDeP92YQxrfLODO1FjwT3Gp 239EmQQPsPWABk2xIs6ZdcCBkDZ+jGEhPvjWTizcD+6rd+mVj1Z/d8jFinLoDyqh NSIc8F74pTLA1+FB0CWIov9DC1rR3dCl5v1FWUna9No1vvQv6sMqkxZj0I7BYgF4 xP+cCkU5r18ExNmUORcR0CEU91tVw+M= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:51 2025 by rpki-client