$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/cd4c80fc-4bfc-38d4-97da-230d3865660f.roa File: cd4c80fc-4bfc-38d4-97da-230d3865660f.roa (raw, json) Hash identifier: Azkm/6+r/QI2XDPbDj6lCvyLana6sbSEoUZh3MX2rnI= Subject key identifier: 70:E9:81:EA:9B:CC:8E:43:80:42:A9:45:90:14:36:04:D3:EB:68:05 Certificate issuer: /CN=50a1e076-031a-4889-966a-80f9220a2ed6 Certificate serial: 010D0C9F432858486695AC694401505002857E20 Authority key identifier: 77:D6:AE:77:72:F6:9F:EF:38:31:F4:9E:3A:35:C7:06:63:50:FB:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/cd4c80fc-4bfc-38d4-97da-230d3865660f.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 32861 IP address blocks: 174.34.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/50a1e076-031a-4889-966a-80f9220a2ed6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/50a1e076-031a-4889-966a-80f9220a2ed6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:ac:69:44:01:50:50:02:85:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50a1e076-031a-4889-966a-80f9220a2ed6 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=d258c973-176e-43d1-8535-c5485f37711c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:bc:0c:5e:44:31:80:2a:bc:a2:5f:e1:0d: 36:53:18:28:7b:01:7e:db:7f:85:f2:d3:66:6f:1c: 0d:94:63:94:ad:1a:e2:7e:eb:45:f7:4b:fc:39:90: c0:e1:ae:0e:74:92:7b:1f:8e:f1:47:09:3a:e1:18: 89:2b:3e:4d:67:3b:11:8b:ef:b8:c4:46:a7:46:15: 52:62:b8:78:ca:05:70:7f:4e:10:29:bb:21:5b:bb: 9e:51:ce:10:e3:e4:43:b5:3e:73:31:e5:20:12:09: 4b:92:0c:ce:c8:77:6d:62:bb:b2:f1:3f:ba:12:be: e0:0f:ea:77:82:ec:4e:0c:83:f0:fa:7e:88:fd:b7: a7:9b:4c:d2:9b:c6:8d:3c:e0:62:d2:e4:26:f4:43: 4b:95:fa:9e:f2:ad:9f:54:43:fc:90:93:7d:55:98: 31:5d:51:62:2e:c7:d9:72:3c:49:ca:ae:25:0b:76: c8:bb:38:20:5e:32:21:da:6b:8d:80:86:0e:83:dc: 21:83:03:ad:95:09:d0:9b:d3:f0:b5:bf:0a:68:63: 1b:2a:bb:43:74:4e:5d:8e:8a:fd:e5:2e:86:91:74: ab:65:5c:c2:1c:dc:72:b1:b2:0b:90:9e:ec:f0:16: 23:d5:f8:75:17:1e:ca:d7:07:b4:52:48:6f:81:01: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E9:81:EA:9B:CC:8E:43:80:42:A9:45:90:14:36:04:D3:EB:68:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/cd4c80fc-4bfc-38d4-97da-230d3865660f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/50a1e076-031a-4889-966a-80f9220a2ed6.crl X509v3 Authority Key Identifier: keyid:77:D6:AE:77:72:F6:9F:EF:38:31:F4:9E:3A:35:C7:06:63:50:FB:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6.cer sbgp-ipAddrBlock: critical IPv4: 174.34.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:cc:21:b5:9c:9d:9f:1d:6f:e6:62:f7:93:dc:d4:4a:2d:44: d7:aa:e0:fb:fd:59:8d:a2:3d:b3:07:82:8c:4d:cc:3f:79:a7: af:66:e1:d8:2f:9f:5f:62:63:ad:15:56:fb:0b:d3:73:25:6b: a9:ee:f4:59:70:c8:00:21:83:f1:e6:8d:09:97:f0:05:d8:32: e6:a9:1c:37:5d:8a:95:5f:d8:95:d7:c9:99:c2:c6:2c:2e:c5: 9a:6b:08:9c:60:67:00:46:42:04:4d:6b:51:7d:cb:fc:70:14: dc:9b:31:ff:4c:5b:e4:cf:19:2a:c8:82:e6:9e:f1:8c:72:74: 8f:be:c1:6a:c8:17:65:1e:0e:d7:40:c5:1b:58:e1:23:b9:23: b9:33:fe:38:1f:f6:c3:e8:85:a5:75:c6:c9:a4:20:ac:17:53: 29:4a:8f:e5:49:ee:ec:e8:85:94:41:90:57:a0:2c:a8:c0:38: 89:4e:42:7f:8b:6e:d7:fe:5c:8f:6a:ac:e0:c7:45:d8:58:32: b7:6e:46:0a:eb:f2:cc:e2:6d:ee:0e:74:fb:bc:35:18:04:a7: 5d:a7:66:ff:53:8c:b1:13:9e:f5:a6:68:eb:4b:25:fd:a6:0f: 0e:6e:85:79:04:97:4b:f9:dd:3c:23:df:f9:d3:8c:95:c5:bc: 53:22:7b:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlaxpRAFQUAKFfiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBhMWUwNzYtMDMxYS00ODg5LTk2NmEtODBmOTIyMGEy ZWQ2MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDI1OGM5NzMtMTc2ZS00M2QxLTg1MzUtYzU0ODVmMzc3MTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrC8DF5EMYAqvKJf4Q02UxgoewF+23+F8tNm bxwNlGOUrRrifutF90v8OZDA4a4OdJJ7H47xRwk64RiJKz5NZzsRi++4xEanRhVS Yrh4ygVwf04QKbshW7ueUc4Q4+RDtT5zMeUgEglLkgzOyHdtYruy8T+6Er7gD+p3 guxODIPw+n6I/benm0zSm8aNPOBi0uQm9ENLlfqe8q2fVEP8kJN9VZgxXVFiLsfZ cjxJyq4lC3bIuzggXjIh2muNgIYOg9whgwOtlQnQm9Pwtb8KaGMbKrtDdE5djor9 5S6GkXSrZVzCHNxysbILkJ7s8BYj1fh1Fx7K1we0UkhvgQGxuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDpgeqbzI5DgEKpRZAUNgTT62gFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MGEx ZTA3Ni0wMzFhLTQ4ODktOTY2YS04MGY5MjIwYTJlZDYvY2Q0YzgwZmMtNGJmYy0z OGQ0LTk3ZGEtMjMwZDM4NjU2NjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTBhMWUwNzYtMDMxYS00ODg5LTk2 NmEtODBmOTIyMGEyZWQ2LzUwYTFlMDc2LTAzMWEtNDg4OS05NjZhLTgwZjkyMjBh MmVkNi5jcmwwHwYDVR0jBBgwFoAUd9aud3L2n+84MfSeOjXHBmNQ+7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81MGExZTA3Ni0wMzFhLTQ4ODktOTY2YS04MGY5 MjIwYTJlZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriL1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnMIbWcnZ8db+Zi95Pc1EotRNeq4Pv9WY2iPbMHgoxNzD95p69m4dgv n19iY60VVvsL03Mla6nu9FlwyAAhg/HmjQmX8AXYMuapHDddipVf2JXXyZnCxiwu xZprCJxgZwBGQgRNa1F9y/xwFNybMf9MW+TPGSrIguae8YxydI++wWrIF2UeDtdA xRtY4SO5I7kz/jgf9sPohaV1xsmkIKwXUylKj+VJ7uzohZRBkFegLKjAOIlOQn+L btf+XI9qrODHRdhYMrduRgrr8szibe4OdPu8NRgEp12nZv9TjLETnvWmaOtLJf2m Dw5uhXkEl0v53Twj3/nTjJXFvFMie8o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:49 2025 by rpki-client