$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f1647871-729e-3bdb-bc99-6773110329fd.roa File: f1647871-729e-3bdb-bc99-6773110329fd.roa (raw, json) Hash identifier: f27aNeqimuldPDRfK9Nl91s+tE3uhtGQ7TDaIuwx0Ko= Subject key identifier: B4:0F:16:54:57:F6:4A:D8:7A:E7:F7:E9:29:1C:EA:BD:88:FA:24:4C Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858493ED3D23A872E6ECF8166BBA0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f1647871-729e-3bdb-bc99-6773110329fd.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 29802 IP address blocks: 91.191.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d2:3a:87:2e:6e:cf:81:66:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=1fbbc5f9-cde8-4cf0-978b-356ba76cd3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:56:39:4a:d4:76:be:b5:e8:40:3d:95:f5:d2: 14:36:34:06:ea:d9:3c:32:f6:29:7f:b1:a7:7c:11: 49:93:01:2c:2c:8c:62:d3:d6:da:45:21:93:87:70: 6b:30:de:1b:c9:46:80:7e:5a:d7:83:a6:a6:7a:db: 26:05:69:85:a4:06:c4:ce:b8:bd:e9:3f:b2:08:7d: 5a:b9:c8:25:65:39:ed:fe:57:e6:32:87:de:4a:4e: 7a:c7:dc:d8:63:03:16:40:a6:99:58:a5:ad:40:5d: 98:ce:2b:cb:42:09:23:c2:a8:65:1d:09:4b:0e:6a: 69:e8:7c:64:df:c2:e5:cf:81:1f:1d:b8:12:ed:6c: 93:83:9f:6a:49:c3:ba:7c:b3:36:7b:9a:c9:10:cb: 66:e8:c3:68:20:e5:8a:28:e3:7e:e0:c3:03:69:59: 76:38:77:fa:c6:f8:bb:9b:40:a3:51:dc:71:f5:23: cd:19:b1:60:6b:82:ff:29:07:6d:ca:9e:f0:62:2f: f7:45:40:90:2c:1e:46:96:09:63:fc:b1:b8:8b:8b: ac:11:1a:c7:37:c2:05:2e:e9:1b:40:23:c2:c9:7b: d4:c7:e1:bb:a1:3c:68:e6:87:8d:c8:60:c9:a8:fd: 85:c1:4a:5e:7e:e2:ee:e5:e3:26:aa:62:81:b4:dd: c8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0F:16:54:57:F6:4A:D8:7A:E7:F7:E9:29:1C:EA:BD:88:FA:24:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f1647871-729e-3bdb-bc99-6773110329fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 91.191.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:52:1d:62:46:ec:8a:ca:15:2b:67:bb:5f:23:15:74:3c:26: ef:c3:87:49:30:21:b8:0b:06:76:cd:18:10:60:d4:89:6d:14: 81:95:78:d9:da:38:ad:43:ee:1a:98:eb:70:e9:25:11:cc:3c: a6:22:8b:71:bb:43:f1:62:ab:3e:7a:c9:17:e8:eb:75:61:7c: 3b:a8:ff:4a:bf:ca:97:d6:1e:d7:f7:7f:d9:92:47:19:a5:c7: 1d:bb:20:57:ce:cf:6a:da:8a:94:3b:52:53:ab:3e:3d:8e:ff: 38:df:5b:57:6a:ba:0c:f7:b1:d1:cf:37:a0:63:c9:19:21:d0: c7:5f:b3:5e:d6:ff:3c:af:14:e3:22:5b:ae:c1:67:0e:aa:24: 61:a1:ac:fa:99:97:49:ee:c7:e9:bf:ef:92:ef:93:aa:a4:8b: f4:71:ab:a3:9d:80:18:0f:9b:66:e8:fa:d4:f1:b6:b1:4b:53: a3:26:d8:8c:eb:60:9b:5d:f1:2c:46:87:8d:24:dd:75:66:d7: 04:96:ad:50:a5:f7:b8:f9:d8:66:62:74:20:4f:28:25:81:ec: 00:bd:ad:8b:79:af:4f:4e:1d:e5:04:9f:8b:03:7d:0c:6c:71: 4e:16:d0:ba:1e:36:d0:b1:08:43:e7:7f:73:e1:d6:c5:40:62: 4c:f2:75:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09I6hy5uz4Fmu6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MWZiYmM1ZjktY2RlOC00Y2YwLTk3OGItMzU2YmE3NmNkM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VY5StR2vrXoQD2V9dIUNjQG6tk8MvYpf7Gn fBFJkwEsLIxi09baRSGTh3BrMN4byUaAflrXg6ametsmBWmFpAbEzri96T+yCH1a ucglZTnt/lfmMofeSk56x9zYYwMWQKaZWKWtQF2YzivLQgkjwqhlHQlLDmpp6Hxk 38Llz4EfHbgS7WyTg59qScO6fLM2e5rJEMtm6MNoIOWKKON+4MMDaVl2OHf6xvi7 m0CjUdxx9SPNGbFga4L/KQdtyp7wYi/3RUCQLB5Glglj/LG4i4usERrHN8IFLukb QCPCyXvUx+G7oTxo5oeNyGDJqP2FwUpefuLu5eMmqmKBtN3I9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQPFlRX9krYeuf36Skc6r2I+iRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZjE2NDc4NzEtNzI5ZS0z YmRiLWJjOTktNjc3MzExMDMyOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW7/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNSHWJG7IrKFStnu18jFXQ8Ju/Dh0kwIbgLBnbNGBBg1IltFIGVeNna OK1D7hqY63DpJRHMPKYii3G7Q/Fiqz56yRfo63VhfDuo/0q/ypfWHtf3f9mSRxml xx27IFfOz2raipQ7UlOrPj2O/zjfW1dqugz3sdHPN6BjyRkh0Mdfs17W/zyvFOMi W67BZw6qJGGhrPqZl0nux+m/75Lvk6qki/Rxq6OdgBgPm2bo+tTxtrFLU6Mm2Izr YJtd8SxGh40k3XVm1wSWrVCl97j52GZidCBPKCWB7AC9rYt5r09OHeUEn4sDfQxs cU4W0LoeNtCxCEPnf3Ph1sVAYkzydQ0= -----END CERTIFICATE-----Generated at Sat Apr 12 05:29:52 2025 by rpki-client