$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e018228d-818a-33ac-ab77-0fa9e7cdc102.roa File: e018228d-818a-33ac-ab77-0fa9e7cdc102.roa (raw, json) Hash identifier: 4Q/pjvSPr+pknG4JMuiBLETcso/0V/4WO3TNJJEzsWw= Subject key identifier: 8A:0C:7F:66:1F:3A:14:90:37:25:2D:AE:A5:D8:0E:3D:C5:FE:62:C7 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285848AAFB6C6DA155FEC18B42D100 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e018228d-818a-33ac-ab77-0fa9e7cdc102.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 399910 IP address blocks: 66.96.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:6c:6d:a1:55:fe:c1:8b:42:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=357969e3-a713-4855-89b9-11f12bd3f469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:a4:17:61:2c:34:04:19:98:b1:3b:f9:a1: 55:63:5e:7d:71:1c:80:f8:7c:e8:55:5b:63:bf:3c: 4e:8e:8e:6d:ab:02:46:44:45:4f:4f:15:9f:7f:31: 59:b5:d0:d9:e9:df:21:16:72:b3:56:ca:35:d8:df: f9:26:5e:83:d8:24:6c:d8:37:35:89:a2:22:5c:ca: 26:d4:17:ae:f1:76:dd:c1:31:41:c3:62:ad:e8:6e: a0:c0:23:f6:4a:51:d5:4d:8d:64:e5:07:e1:c7:31: 0c:42:39:d6:ce:5f:c6:c1:31:6b:08:47:e7:33:43: 1e:4e:c2:f5:80:1b:74:4f:17:a2:48:c8:3a:b2:f5: 8a:d2:12:fc:bf:99:fd:89:f9:24:e7:f7:b3:b4:50: 02:da:9f:42:ac:39:04:e0:cc:28:ed:88:1c:28:3f: c6:cf:9d:58:ba:f7:f9:bf:76:6c:92:88:c7:be:3c: 06:a9:d0:74:3e:51:50:2c:7e:63:a4:fe:1b:b0:6a: 97:35:7e:28:b5:a3:11:75:e3:d5:f6:ab:bf:a1:57: 70:6b:12:aa:a8:c2:36:84:af:16:ca:a2:8c:e8:94: d2:01:f1:c1:66:c7:1f:26:e8:df:8d:60:c7:8b:e6: 49:99:ed:51:7f:69:a5:b2:60:e1:20:0c:82:86:a9: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0C:7F:66:1F:3A:14:90:37:25:2D:AE:A5:D8:0E:3D:C5:FE:62:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/e018228d-818a-33ac-ab77-0fa9e7cdc102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:47:c3:39:0a:cd:9f:9d:38:49:02:e3:b5:f3:46:88:57:6e: ee:13:c6:f7:f9:c3:72:04:e7:fa:d1:77:48:27:58:c4:57:48: 05:e5:86:45:dc:ee:16:c4:4f:cf:1e:af:91:a9:1c:c1:66:fd: 3b:29:7f:ea:ce:78:78:40:06:40:02:62:04:9a:e7:a3:c9:ff: f4:29:d3:a8:c4:2e:47:ec:58:ea:9a:53:bb:44:d2:f9:56:54: cf:77:c7:df:c8:de:30:d9:94:0d:d9:2c:65:37:bf:62:65:14: 11:b4:b2:f0:01:fb:f2:f1:69:80:60:4a:49:2f:8b:d5:52:8c: 86:a9:2f:9d:cd:30:14:f1:1a:38:66:50:f6:1f:7a:af:c6:ef: e1:4c:53:5f:0e:ac:70:56:75:73:8f:fd:45:ee:24:53:ce:e2: c0:65:3f:53:cd:21:99:64:98:cb:2e:71:2f:f9:0b:a3:11:0c: 6f:28:e0:4b:17:9a:0d:43:bc:35:57:1b:f5:f7:f5:c3:d5:e3: 1e:e2:37:dc:7b:44:64:16:80:3c:01:42:ef:ed:33:e6:41:20: ba:ba:15:b7:a1:2b:c5:18:77:d3:9a:35:31:eb:7e:24:c5:a6: 54:32:dc:f0:b4:a5:e4:94:f3:bf:c6:c9:56:25:de:3e:e5:68: c7:7a:e3:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2xtoVX+wYtC0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk MzU3OTY5ZTMtYTcxMy00ODU1LTg5YjktMTFmMTJiZDNmNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRWkF2EsNAQZmLE7+aFVY159cRyA+HzoVVtj vzxOjo5tqwJGREVPTxWffzFZtdDZ6d8hFnKzVso12N/5Jl6D2CRs2Dc1iaIiXMom 1Beu8XbdwTFBw2Kt6G6gwCP2SlHVTY1k5QfhxzEMQjnWzl/GwTFrCEfnM0MeTsL1 gBt0TxeiSMg6svWK0hL8v5n9ifkk5/eztFAC2p9CrDkE4Mwo7YgcKD/Gz51Yuvf5 v3ZskojHvjwGqdB0PlFQLH5jpP4bsGqXNX4otaMRdePV9qu/oVdwaxKqqMI2hK8W yqKM6JTSAfHBZscfJujfjWDHi+ZJme1Rf2mlsmDhIAyChqkA5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoMf2YfOhSQNyUtrqXYDj3F/mLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZTAxODIyOGQtODE4YS0z M2FjLWFiNzctMGZhOWU3Y2RjMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmBeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRHwzkKzZ+dOEkC47XzRohXbu4Txvf5w3IE5/rRd0gnWMRXSAXlhkXc 7hbET88er5GpHMFm/Tspf+rOeHhABkACYgSa56PJ//Qp06jELkfsWOqaU7tE0vlW VM93x9/I3jDZlA3ZLGU3v2JlFBG0svAB+/LxaYBgSkkvi9VSjIapL53NMBTxGjhm UPYfeq/G7+FMU18OrHBWdXOP/UXuJFPO4sBlP1PNIZlkmMsucS/5C6MRDG8o4EsX mg1DvDVXG/X39cPV4x7iN9x7RGQWgDwBQu/tM+ZBILq6FbehK8UYd9OaNTHrfiTF plQy3PC0peSU87/GyVYl3j7laMd642k= -----END CERTIFICATE-----Generated at Sat Apr 12 17:38:29 2025 by rpki-client