$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa File: c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa (raw, json) Hash identifier: /Q/HKLG08MDeVxyh7DS00X2t9z+21zb2BY+6t7fVRd0= Subject key identifier: 17:D3:8D:20:92:49:EC:C0:CB:33:E5:38:65:CE:27:4A:0F:48:D0:D4 Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F43285848A1360E5E4F4550EB2FACEC80 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 29909 IP address blocks: 50.21.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:0e:5e:4f:45:50:eb:2f:ac:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=8fc77f0e-896f-46ef-ada2-3dab711d2d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:e7:c9:19:48:07:ac:1a:dc:0c:19:af:f9: 6f:ca:f3:4d:e9:92:67:cf:23:ba:d0:8b:01:06:c0: 93:9d:9e:40:2e:79:f0:d0:1e:14:22:0f:29:5b:ee: 9d:96:38:39:94:10:98:44:f4:80:5e:cb:96:c6:6e: f3:f1:c8:83:f1:6d:98:c4:bf:37:76:fc:1b:36:c7: e2:2b:c5:1f:02:71:99:a6:1a:0e:76:35:33:8f:0c: 2e:f5:98:96:8d:ab:6f:c8:66:cd:cc:16:a1:cd:35: 29:1b:90:a8:9d:a4:2b:af:dc:03:56:50:ba:33:e1: 4e:eb:8d:df:9e:3d:ed:e2:07:75:48:d5:f6:b0:c9: 95:0c:b4:12:74:03:01:2b:95:71:27:14:ea:22:49: 45:d6:30:6a:a5:0f:bf:5f:ac:58:12:62:95:82:b2: 4f:41:29:76:f6:00:c6:ca:99:96:39:7b:c0:f6:a6: b9:0b:43:51:07:b7:97:f7:ae:12:e9:53:ae:2a:64: 2d:1b:c6:34:b3:7f:5e:8e:fb:55:01:2b:8e:b9:46: 28:bd:22:9e:a1:ad:eb:3d:18:12:b1:7f:e3:f4:48: 19:3a:85:aa:e7:09:e3:47:f1:4d:fa:c7:13:49:4e: 4d:a1:22:35:03:61:f8:04:07:f7:59:63:97:e4:7e: f7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D3:8D:20:92:49:EC:C0:CB:33:E5:38:65:CE:27:4A:0F:48:D0:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 50.21.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:92:c0:d2:1e:74:2a:b7:9c:ea:5f:b3:3c:0a:8d:43:62:72: 76:cb:31:b2:36:ad:d5:11:1c:16:c1:96:06:21:2f:b8:9b:b8: 60:25:15:6f:51:1c:71:a7:35:0a:30:51:b5:22:d3:a2:60:cf: c1:33:2a:27:57:05:3d:44:46:7e:9a:a8:2f:bc:49:da:28:17: 92:ba:1c:80:10:97:47:b2:08:a7:d4:72:54:fc:c7:d9:b2:b5: 90:ff:70:c2:60:30:ca:70:54:6f:2a:ee:e3:27:41:14:12:a3: 6e:5f:6f:82:3a:6e:00:2e:15:d5:ec:01:98:8c:c8:fb:4a:85: e1:fd:cd:b3:39:47:bd:7c:d9:0f:9c:d1:21:85:22:c7:a8:5e: 56:04:e9:53:65:3a:1d:19:6c:dd:da:68:c3:f3:b8:d3:b0:16: 1d:f7:63:1f:1f:00:ca:06:3f:cc:c1:76:60:88:de:1d:da:9f: cb:f4:79:51:32:05:03:60:d2:bc:88:16:3c:26:d9:6f:ea:8c: 9f:ad:34:6f:1c:3e:5e:90:de:71:e5:06:de:c7:95:ef:3c:d1: 47:1c:00:71:e7:34:02:4e:27:87:2c:d9:47:22:bd:09:57:71: 2f:78:69:2d:89:ba:8a:bc:40:d1:b3:ec:22:85:d3:55:e4:b2: 26:a5:06:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNg5eT0VQ6y+s7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk OGZjNzdmMGUtODk2Zi00NmVmLWFkYTItM2RhYjcxMWQyZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqfnyRlIB6wa3AwZr/lvyvNN6ZJnzyO60IsB BsCTnZ5ALnnw0B4UIg8pW+6dljg5lBCYRPSAXsuWxm7z8ciD8W2YxL83dvwbNsfi K8UfAnGZphoOdjUzjwwu9ZiWjatvyGbNzBahzTUpG5ConaQrr9wDVlC6M+FO643f nj3t4gd1SNX2sMmVDLQSdAMBK5VxJxTqIklF1jBqpQ+/X6xYEmKVgrJPQSl29gDG ypmWOXvA9qa5C0NRB7eX964S6VOuKmQtG8Y0s39ejvtVASuOuUYovSKeoa3rPRgS sX/j9EgZOoWq5wnjR/FN+scTSU5NoSI1A2H4BAf3WWOX5H73ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfTjSCSSezAyzPlOGXOJ0oPSNDUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvYzU4YTgyNWYtNjczOC0z YWQ0LThhNzctOWNjNzdkZjIyY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMhWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABySwNIedCq3nOpfszwKjUNicnbLMbI2rdURHBbBlgYhL7ibuGAlFW9R HHGnNQowUbUi06Jgz8EzKidXBT1ERn6aqC+8SdooF5K6HIAQl0eyCKfUclT8x9my tZD/cMJgMMpwVG8q7uMnQRQSo25fb4I6bgAuFdXsAZiMyPtKheH9zbM5R7182Q+c 0SGFIseoXlYE6VNlOh0ZbN3aaMPzuNOwFh33Yx8fAMoGP8zBdmCI3h3an8v0eVEy BQNg0ryIFjwm2W/qjJ+tNG8cPl6Q3nHlBt7Hle880UccAHHnNAJOJ4cs2UcivQlX cS94aS2Juoq8QNGz7CKF01XksialBog= -----END CERTIFICATE-----Generated at Sat Apr 12 12:28:53 2025 by rpki-client