$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/50c57776-26b1-31a1-8de0-d6e883c06944.roa File: 50c57776-26b1-31a1-8de0-d6e883c06944.roa (raw, json) Hash identifier: sPe4HfrNFssHT9zR+FHCRE2Rk9Rl9gbGkRdkOSXEaO4= Subject key identifier: BD:49:1C:1C:65:6D:9F:6B:5A:C4:1A:E7:67:57:85:A5:BA:C2:12:2F Certificate issuer: /CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Certificate serial: 010D0C9F43285848BBBB79653267A1A9D87168C0 Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/50c57776-26b1-31a1-8de0-d6e883c06944.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 14362 IP address blocks: 192.101.77.0/24 maxlen: 24 199.33.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:79:65:32:67:a1:a9:d8:71:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=8458e20e-a66e-4a40-9133-783573cb6ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9d:5c:ff:c4:61:cc:80:76:32:7a:dc:9c:20: 81:cb:2a:ea:0f:52:79:dc:ba:ba:20:23:ef:3f:67: 6b:78:66:b0:1c:67:bb:3a:11:a6:68:63:a7:c1:56: 84:c0:06:f7:4c:e3:e9:ab:91:b5:12:af:c3:76:58: e8:09:31:73:0b:04:b4:9b:73:66:9f:98:48:81:1a: 14:a6:24:12:77:2d:7e:a1:c5:6a:3b:61:e4:6d:31: 48:0f:b4:9f:9d:5e:c9:a6:c7:08:fe:06:1c:9a:8e: d7:d9:97:30:1a:03:de:91:9a:fa:0a:f0:3c:36:57: 3b:fd:bb:67:18:b7:ea:c1:07:d8:69:1c:dc:42:f9: 03:70:e7:a8:4e:a0:2a:13:d4:8f:50:98:5e:96:92: 8e:ad:18:37:84:45:17:4b:cf:88:9d:2b:36:9b:2d: 46:42:5f:cb:1e:d6:33:3b:97:b6:b5:e4:c7:dd:9b: 34:d4:ce:70:6a:ed:f6:f6:26:9b:32:45:e9:46:55: 31:ac:1e:9b:0c:1d:dd:5c:e1:75:2d:77:7f:6c:75: 0a:10:ae:9b:b2:37:9e:ae:83:7f:21:d3:1a:28:8d: 11:42:89:07:c8:c8:b3:10:18:62:3a:f8:7e:9e:3e: a1:fb:44:a9:0b:9e:eb:fe:7b:ac:9c:8b:b1:c0:81: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:49:1C:1C:65:6D:9F:6B:5A:C4:1A:E7:67:57:85:A5:BA:C2:12:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/50c57776-26b1-31a1-8de0-d6e883c06944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl X509v3 Authority Key Identifier: keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer sbgp-ipAddrBlock: critical IPv4: 192.101.77.0/24 199.33.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:16:c4:81:6c:d9:88:16:7d:f8:8c:c8:cb:40:8b:25:56:e1: 4a:60:ef:96:ad:6e:25:1f:5c:77:c2:ff:dd:57:8e:0e:0e:16: cd:ef:c2:9a:d0:ef:be:6e:2f:a8:6b:00:0e:c6:dd:3d:7d:d8: 4e:f3:7a:80:77:4d:09:20:f7:2f:45:04:f9:7b:18:82:47:3c: 47:57:4d:f0:78:d4:a5:62:04:f8:37:bf:36:72:9d:13:c6:1e: 2f:e4:3e:f4:75:b5:b2:90:1e:87:fc:cd:34:6b:0c:7c:7a:e1: f0:b5:97:6a:d8:1e:d8:e7:14:76:86:4c:d1:af:15:69:17:dc: e2:40:2f:2e:9b:7a:28:d0:3d:4e:d9:59:21:94:a1:e4:70:cf: f0:a6:d9:f2:d9:b7:ec:04:ab:1b:7f:9f:24:08:f6:2c:1a:07: 67:66:8c:f1:a8:4f:38:9d:b8:3c:a4:c2:3b:c1:21:66:09:7a: 4a:27:1f:08:6f:22:fe:87:22:6c:ff:db:6e:69:1f:c6:ca:8e: e9:b0:ab:38:28:e3:d9:0f:39:3e:d3:29:68:c2:eb:9d:58:fe: 90:12:29:94:c1:da:8b:7e:08:ce:7f:f0:fb:79:76:79:ed:4f: 67:a8:37:b0:2b:7d:75:b0:cf:c3:f8:64:33:73:ae:bc:fd:37: 98:c0:7c:6a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEi7u3llMmehqdhxaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg0ZWE1YzMtMzIyNi00OGFjLTgzOGItMGZkZjY5MTc2 ODU0MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ODQ1OGUyMGUtYTY2ZS00YTQwLTkxMzMtNzgzNTczY2I2ZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ1c/8RhzIB2MnrcnCCByyrqD1J53Lq6ICPv P2dreGawHGe7OhGmaGOnwVaEwAb3TOPpq5G1Eq/DdljoCTFzCwS0m3Nmn5hIgRoU piQSdy1+ocVqO2HkbTFID7SfnV7JpscI/gYcmo7X2ZcwGgPekZr6CvA8Nlc7/btn GLfqwQfYaRzcQvkDcOeoTqAqE9SPUJhelpKOrRg3hEUXS8+InSs2my1GQl/LHtYz O5e2teTH3Zs01M5wau329iabMkXpRlUxrB6bDB3dXOF1LXd/bHUKEK6bsjeeroN/ IdMaKI0RQokHyMizEBhiOvh+nj6h+0SpC57r/nusnIuxwIEbrwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFL1JHBxlbZ9rWsQa52dXhaW6whIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODRl YTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRmNjkxNzY4NTQvNTBjNTc3NzYtMjZiMS0z MWExLThkZTAtZDZlODgzYzA2OTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg0ZWE1YzMtMzIyNi00OGFjLTgz OGItMGZkZjY5MTc2ODU0L2Y4NGVhNWMzLTMyMjYtNDhhYy04MzhiLTBmZGY2OTE3 Njg1NC5jcmwwHwYDVR0jBBgwFoAUgnGeZO77bFrpQf3uHVWoMhY77kIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODRlYTVjMy0zMjI2LTQ4YWMtODM4Yi0wZmRm NjkxNzY4NTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwGVNAwQA xyFIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABcWxIFs2YgWffiMyMtAiyVW4Upg75atbiUfXHfC/91Xjg4O Fs3vwprQ775uL6hrAA7G3T192E7zeoB3TQkg9y9FBPl7GIJHPEdXTfB41KViBPg3 vzZynRPGHi/kPvR1tbKQHof8zTRrDHx64fC1l2rYHtjnFHaGTNGvFWkX3OJALy6b eijQPU7ZWSGUoeRwz/Cm2fLZt+wEqxt/nyQI9iwaB2dmjPGoTziduDykwjvBIWYJ ekonHwhvIv6HImz/225pH8bKjumwqzgo49kPOT7TKWjC651Y/pASKZTB2ot+CM5/ 8Pt5dnntT2eoN7ArfXWwz8P4ZDNzrrz9N5jAfGo= -----END CERTIFICATE-----Generated at Fri Apr 11 21:49:41 2025 by rpki-client