$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f481d53d-e2ca-3b14-bdb8-e281d12f5291.roa File: f481d53d-e2ca-3b14-bdb8-e281d12f5291.roa (raw, json) Hash identifier: QfsT6bVZT4fKdejCApQ6A6c9W1kloyQai+AVRZ1jFM0= Subject key identifier: EA:EC:D3:4A:49:96:DB:5D:BD:DB:0C:4D:1C:52:28:DA:31:32:37:9C Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858485B6AF721C06090BD6947DAC0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f481d53d-e2ca-3b14-bdb8-e281d12f5291.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 29802 IP address blocks: 2604:4500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:f7:21:c0:60:90:bd:69:47:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=6ff18a1b-a75c-400f-89c8-d94bf7e93c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:40:00:e4:a4:18:ea:3a:84:5f:d7:04:a7: 18:75:84:3c:81:ba:ac:a6:bd:39:0a:22:11:43:ee: 29:d0:bc:d0:59:68:d5:47:69:8c:75:60:cf:d4:a0: 36:ba:d1:d4:98:66:d8:7f:b9:74:96:8f:b0:c4:92: 2a:4f:bb:0e:d8:fa:6a:1c:3f:3d:ef:a7:a1:9d:27: 10:2c:25:2a:e8:4d:cb:9e:26:8a:82:4d:72:06:1e: 8c:3c:04:3b:9f:86:9e:1a:7b:dd:ed:29:87:78:75: e4:42:0d:0d:e3:ab:b4:44:13:14:ac:d4:d7:3e:ce: 43:35:67:ca:7c:c0:af:29:29:45:c6:bc:3b:ac:9a: 69:8d:53:34:e3:74:96:c7:99:83:0b:68:c9:13:b8: 92:69:e3:af:46:63:e1:fd:09:ac:ff:4f:01:2b:fd: dd:e6:2a:65:31:ac:35:8d:77:3a:d7:02:3d:cd:e0: f6:ee:20:9d:8f:a3:8c:dc:10:9b:ec:09:44:bd:e9: cb:4c:b8:1f:37:2c:e5:b5:0f:0e:40:8b:89:97:2c: ec:76:0c:ac:62:25:4a:be:0b:a9:90:55:28:9b:51: 27:19:df:2c:03:ca:9a:f9:05:b0:a1:65:79:4f:2c: a1:f8:c7:af:53:55:8d:d2:4c:8b:f1:f2:11:2f:57: a5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EC:D3:4A:49:96:DB:5D:BD:DB:0C:4D:1C:52:28:DA:31:32:37:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f481d53d-e2ca-3b14-bdb8-e281d12f5291.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6e:ee:21:07:f0:b8:b0:b8:f0:d3:86:c1:57:e1:4a:95:ff: a0:87:e9:a0:01:ca:33:2d:88:b8:e5:71:03:d6:8f:49:57:0c: 83:af:8c:3d:e1:5c:e0:09:3a:1d:2a:78:b5:16:ef:58:8c:ef: 14:ce:0b:32:54:c1:35:7d:36:67:69:7f:8d:8c:44:b7:00:fe: 0d:a7:b1:d8:91:76:b7:0f:3c:6c:4d:e4:2f:da:05:87:d4:da: a0:55:e8:1e:88:59:25:c6:68:6b:bc:d2:56:e7:80:c7:83:9e: ae:89:68:df:c8:7a:5d:5a:d2:7a:45:61:9b:53:54:eb:1f:fa: 5c:e0:06:ec:ff:b2:0a:2b:80:4c:42:94:d9:20:cf:0f:5d:b6: b2:c7:e7:2d:71:4c:08:bc:d5:15:51:30:48:4f:8d:1a:17:a9: 2c:e8:f4:11:70:c7:ea:e3:14:21:28:56:5d:2e:ba:54:89:45: 3f:ce:41:79:be:76:b6:b1:99:d9:31:d3:52:de:8d:fc:ca:f7: 7c:3d:a5:11:b1:70:3f:80:24:5c:91:b8:36:91:ff:c8:0f:e7: ce:59:f1:fb:85:7a:da:b0:5a:62:7f:05:f3:00:93:f6:ce:e0: 44:da:60:d5:56:41:78:28:fb:72:ce:82:c6:96:f0:d6:82:81: bd:1a:6c:65 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhbavchwGCQvWlH2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk NmZmMThhMWItYTc1Yy00MDBmLTg5YzgtZDk0YmY3ZTkzYzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodVAAOSkGOo6hF/XBKcYdYQ8gbqspr05CiIR Q+4p0LzQWWjVR2mMdWDP1KA2utHUmGbYf7l0lo+wxJIqT7sO2PpqHD8976ehnScQ LCUq6E3LniaKgk1yBh6MPAQ7n4aeGnvd7SmHeHXkQg0N46u0RBMUrNTXPs5DNWfK fMCvKSlFxrw7rJppjVM043SWx5mDC2jJE7iSaeOvRmPh/Qms/08BK/3d5iplMaw1 jXc61wI9zeD27iCdj6OM3BCb7AlEvenLTLgfNyzltQ8OQIuJlyzsdgysYiVKvgup kFUom1EnGd8sA8qa+QWwoWV5Tyyh+MevU1WN0kyL8fIRL1el/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOrs00pJlttdvdsMTRxSKNoxMjecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZjQ4MWQ1M2QtZTJjYS0z YjE0LWJkYjgtZTI4MWQxMmY1MjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRFADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnbu4hB/C4sLjw04bBV+FKlf+gh+mgAcozLYi45XED1o9JVwyDr4w9 4VzgCTodKni1Fu9YjO8UzgsyVME1fTZnaX+NjES3AP4Np7HYkXa3DzxsTeQv2gWH 1NqgVegeiFklxmhrvNJW54DHg56uiWjfyHpdWtJ6RWGbU1TrH/pc4Abs/7IKK4BM QpTZIM8PXbayx+ctcUwIvNUVUTBIT40aF6ks6PQRcMfq4xQhKFZdLrpUiUU/zkF5 vna2sZnZMdNS3o38yvd8PaURsXA/gCRckbg2kf/ID+fOWfH7hXrasFpifwXzAJP2 zuBE2mDVVkF4KPtyzoLGlvDWgoG9Gmxl -----END CERTIFICATE-----Generated at Sun Feb 16 16:00:59 2025 by rpki-client