$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/07f45c16-c50d-398f-9782-09e8e37bc032.roa File: 07f45c16-c50d-398f-9782-09e8e37bc032.roa (raw, json) Hash identifier: UqWhP+YVh+6MwS2vSdt+znXCFmLJE4mvGYYXoFQj79E= Subject key identifier: 06:24:E8:C3:DE:9D:F0:A6:70:6B:87:98:E0:AB:B8:AA:25:72:7D:85 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858489A3B4E6288F30433210CA900 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/07f45c16-c50d-398f-9782-09e8e37bc032.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 1239 IP address blocks: 50.7.172.0/22 maxlen: 22 50.7.180.0/22 maxlen: 22 2001:49f0:d018::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:4e:62:88:f3:04:33:21:0c:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=55c974e9-13df-49f1-af49-9a9edc7ff8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:71:80:cb:82:97:fb:80:9f:a1:f3:e0:43:2c: 9e:37:20:76:16:81:2d:24:b7:8f:05:1a:9c:bc:ef: 9e:3b:aa:ff:a9:f6:d7:55:ba:c5:62:04:9f:f4:e9: d7:b8:86:c9:c5:64:54:3f:28:d9:b0:31:73:a8:13: 63:43:12:3d:87:63:08:8f:9f:ea:fb:01:23:24:91: bd:f7:b6:22:32:48:42:66:db:c9:59:63:26:d0:de: a4:6b:3b:b4:03:77:0a:0e:b5:13:69:9a:a7:9b:9f: 25:d2:ea:bf:7d:f6:8e:5a:46:f1:3f:db:0d:7e:56: 3b:29:4f:02:c0:ec:c5:ab:e8:0e:ef:32:97:45:f8: 48:b3:3b:34:ea:72:a4:03:31:6a:54:77:12:57:89: 56:2f:ae:74:8c:65:da:0f:e9:f9:2a:0a:1a:3f:af: e9:45:44:25:86:7a:65:ef:cc:e1:ac:22:d2:02:78: bc:85:aa:29:40:3b:a2:a6:4c:16:20:5b:19:27:4d: fe:5c:c6:0b:70:56:8b:46:0b:fe:27:69:34:6a:33: d3:a7:98:61:fa:55:b7:8e:a3:46:c2:d2:3a:86:6d: 68:ec:9d:ee:77:ea:cd:48:f2:98:1f:c8:0c:35:0f: b9:12:e9:10:6c:91:0a:5b:c1:87:9a:d4:91:04:07: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:24:E8:C3:DE:9D:F0:A6:70:6B:87:98:E0:AB:B8:AA:25:72:7D:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/07f45c16-c50d-398f-9782-09e8e37bc032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.172.0/22 50.7.180.0/22 IPv6: 2001:49f0:d018::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:77:6d:58:95:9e:2e:e9:b5:b1:8d:09:b2:ce:35:ce:04:47: d7:f8:0c:4d:95:a9:3f:f6:44:42:1d:08:24:da:9d:15:00:c3: 96:93:04:a9:bf:0f:8e:33:fb:48:1f:01:d1:10:26:d2:9f:51: a7:2b:74:79:af:c5:e3:74:b1:03:26:c1:9c:6b:56:3a:77:df: da:b8:14:f7:46:70:89:ed:6e:e3:39:1c:f9:eb:8d:63:e8:5f: f8:c2:7b:6c:c3:50:15:ed:15:34:9a:1e:0f:20:d9:06:b3:95: f2:da:b3:5e:9e:00:84:32:69:39:63:00:43:69:45:0a:ad:6a: 74:3a:e5:1d:cc:1e:a1:af:21:6a:06:bf:63:d1:d3:98:cf:d2: 2c:d9:53:d2:ab:01:fc:21:83:b1:01:74:21:40:06:a7:e5:84: 3a:8a:86:92:b0:9e:5d:34:dd:65:63:bf:d9:78:db:ab:d3:f6: e6:b6:97:a4:21:c3:bb:e8:2d:1a:27:c4:db:ee:33:ce:7b:21: 28:4f:e6:80:69:c6:ca:34:a5:9e:14:58:3c:ce:94:57:b4:2b: e0:d8:af:0b:6c:00:a7:21:65:1e:67:40:54:02:f9:25:e8:e0: ec:34:0c:96:07:2d:98:c3:02:9e:a1:03:11:4f:ee:e2:d4:2d: 91:5c:fd:17 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEiaO05iiPMEMyEMqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk NTVjOTc0ZTktMTNkZi00OWYxLWFmNDktOWE5ZWRjN2ZmOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHGAy4KX+4CfofPgQyyeNyB2FoEtJLePBRqc vO+eO6r/qfbXVbrFYgSf9OnXuIbJxWRUPyjZsDFzqBNjQxI9h2MIj5/q+wEjJJG9 97YiMkhCZtvJWWMm0N6kazu0A3cKDrUTaZqnm58l0uq/ffaOWkbxP9sNflY7KU8C wOzFq+gO7zKXRfhIszs06nKkAzFqVHcSV4lWL650jGXaD+n5KgoaP6/pRUQlhnpl 78zhrCLSAni8haopQDuipkwWIFsZJ03+XMYLcFaLRgv+J2k0ajPTp5hh+lW3jqNG wtI6hm1o7J3ud+rNSPKYH8gMNQ+5EukQbJEKW8GHmtSRBActvwIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFAYk6MPenfCmcGuHmOCruKolcn2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMDdmNDVjMTYtYzUwZC0z OThmLTk3ODItMDllOGUzN2JjMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCMgesAwQC Mge0MA8EAgACMAkDBwAgAUnw0BgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASHdtWJWeLum1sY0Jss41zgRH 1/gMTZWpP/ZEQh0IJNqdFQDDlpMEqb8PjjP7SB8B0RAm0p9Rpyt0ea/F43SxAybB nGtWOnff2rgU90Zwie1u4zkc+euNY+hf+MJ7bMNQFe0VNJoeDyDZBrOV8tqzXp4A hDJpOWMAQ2lFCq1qdDrlHcweoa8haga/Y9HTmM/SLNlT0qsB/CGDsQF0IUAGp+WE OoqGkrCeXTTdZWO/2Xjbq9P25raXpCHDu+gtGifE2+4zznshKE/mgGnGyjSlnhRY PM6UV7Qr4NivC2wApyFlHmdAVAL5Jejg7DQMlgctmMMCnqEDEU/u4tQtkVz9Fw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:17 2025 by rpki-client