$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09ae8ad8-4b5e-36bc-9565-378c2f643913.roa File: 09ae8ad8-4b5e-36bc-9565-378c2f643913.roa (raw, json) Hash identifier: XEJGrVLBZP/ujP7pR3CE8apBSwG+he12BfTq1d1MIuQ= Subject key identifier: 83:76:95:7E:F7:03:E7:98:82:BD:EB:C8:47:53:36:AE:41:3A:5C:03 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858488815E1A3109C7BC45D77D280 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09ae8ad8-4b5e-36bc-9565-378c2f643913.roa Signing time: Mon 13 Jan 2025 14:00:52 +0000 ROA not before: Mon 13 Jan 2025 14:00:52 +0000 ROA not after: Sun 13 Apr 2025 13:00:52 +0000 asID: 174 IP address blocks: 50.7.30.0/23 maxlen: 24 50.7.80.0/22 maxlen: 24 50.7.206.0/23 maxlen: 24 50.7.208.0/23 maxlen: 24 50.7.246.0/23 maxlen: 24 198.16.99.0/24 maxlen: 24 198.16.120.0/24 maxlen: 24 2001:49f0:d01e::/48 maxlen: 48 2001:49f0:d095::/48 maxlen: 48 2001:49f0:d0e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:88:15:e1:a3:10:9c:7b:c4:5d:77:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 13 14:00:52 2025 GMT Not After : Apr 13 13:00:52 2025 GMT Subject: CN=171eb525-a6b2-449f-b529-ff5a3d9bdb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f2:b8:f3:7c:04:d6:8a:56:4c:2f:3d:e2:5b: 77:de:37:c5:4a:98:13:4c:b1:40:0a:28:50:5d:2d: 5f:2e:99:8c:71:a9:e6:d3:1d:bc:92:17:e5:a5:3f: a9:90:64:cb:89:4b:28:31:05:8d:81:28:08:fc:8a: 96:14:98:c8:57:1e:37:91:c0:56:a8:69:54:51:4a: 2d:9e:4b:68:35:fd:77:fb:5d:59:1d:82:34:a7:31: 6f:e8:7c:cd:d1:ae:1d:6e:3b:a9:73:e3:c0:3a:5e: 3f:57:1d:1f:f1:44:3b:3c:65:ef:1c:14:c4:22:15: fd:80:1a:e8:90:a1:7a:3a:3f:e5:4e:20:a4:d5:29: 83:7f:3f:5a:69:11:69:5e:5f:b4:90:b1:b3:31:58: de:ed:fa:46:41:8d:a1:75:6a:76:da:28:64:3f:a1: bb:c0:c7:17:03:c8:c1:45:34:94:c7:3a:ab:07:0c: 19:76:ac:a3:78:48:7a:16:ae:15:04:93:bf:9e:44: bc:57:1d:87:7f:c5:c6:05:59:14:b6:f7:e7:bb:98: 61:8a:3c:56:f8:e3:91:6c:ec:03:e1:1f:d4:81:f4: 9f:7e:1b:7c:fb:09:15:b6:fb:5c:fd:44:5b:11:47: f6:88:90:c8:72:53:4b:bb:e1:fe:23:df:94:02:8f: e5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:76:95:7E:F7:03:E7:98:82:BD:EB:C8:47:53:36:AE:41:3A:5C:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09ae8ad8-4b5e-36bc-9565-378c2f643913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.30.0/23 50.7.80.0/22 50.7.206.0-50.7.209.255 50.7.246.0/23 198.16.99.0/24 198.16.120.0/24 IPv6: 2001:49f0:d01e::/48 2001:49f0:d095::/48 2001:49f0:d0e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f5:e3:80:dd:a3:2e:65:27:97:1f:be:21:07:c6:8a:8e:91: 06:81:2c:19:01:8e:28:bc:ad:0c:3d:41:ce:41:ff:9e:4f:5a: 5d:fe:d3:fb:e0:32:d6:46:57:8e:c4:f6:69:b5:e0:b2:a7:61: 1d:24:fb:04:17:37:27:f4:95:b3:8e:17:92:c4:1b:f6:82:4b: 0b:d7:3d:c4:f3:3f:f8:f2:2b:f1:2a:56:60:3c:a0:1e:70:cd: 23:d0:5b:eb:53:d7:ef:65:70:b9:26:2e:b6:ee:b8:7b:41:be: c9:5f:de:1f:bd:6e:fe:cd:8e:65:91:74:a0:2b:b6:84:3d:b7: 7d:80:36:05:3c:f2:9a:e7:f8:b3:6f:d9:f1:1f:1e:8a:e5:24: a3:bf:2f:ac:d6:72:4d:2e:e8:8e:5e:83:de:15:9b:66:2a:d8: 80:c4:d4:e6:b3:f4:b4:4a:58:cf:6b:c2:83:49:b7:b0:ef:45: d2:02:7f:dd:f1:0f:1f:98:75:05:a5:e4:fa:bf:e0:9d:4e:e5: 1c:79:4f:fa:91:60:b0:ba:ce:34:3a:30:01:76:3e:98:b0:8e: f6:d7:d2:fb:01:6e:74:12:c1:b8:5d:73:d9:13:4f:f5:d6:32: 78:67:b2:99:cf:d4:00:f3:3a:f2:ab:56:03:0a:45:1f:b5:6d: d4:74:af:88 -----BEGIN CERTIFICATE----- MIIGjDCCBXSgAwIBAgIUAQ0Mn0MoWEiIFeGjEJx7xF130oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDExMzE0MDA1MloXDTI1MDQxMzEzMDA1MlowLzEtMCsGA1UEAxMk MTcxZWI1MjUtYTZiMi00NDlmLWI1MjktZmY1YTNkOWJkYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvK483wE1opWTC894lt33jfFSpgTTLFACihQ XS1fLpmMcanm0x28khflpT+pkGTLiUsoMQWNgSgI/IqWFJjIVx43kcBWqGlUUUot nktoNf13+11ZHYI0pzFv6HzN0a4dbjupc+PAOl4/Vx0f8UQ7PGXvHBTEIhX9gBro kKF6Oj/lTiCk1SmDfz9aaRFpXl+0kLGzMVje7fpGQY2hdWp22ihkP6G7wMcXA8jB RTSUxzqrBwwZdqyjeEh6Fq4VBJO/nkS8Vx2Hf8XGBVkUtvfnu5hhijxW+OORbOwD 4R/UgfSffht8+wkVtvtc/URbEUf2iJDIclNLu+H+I9+UAo/lKQIDAQABo4IDnjCC A5owHQYDVR0OBBYEFIN2lX73A+eYgr3ryEdTNq5BOlwDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMDlhZThhZDgtNGI1ZS0z NmJjLTk1NjUtMzc4YzJmNjQzOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMGgGCCsGAQUFBwEHAQH/BFkwVzAyBAIAATAsAwQBMgceAwQC MgdQMAwDBAEyB84DBAEyB9ADBAEyB/YDBADGEGMDBADGEHgwIQQCAAIwGwMHACAB SfDQHgMHACABSfDQlQMHACABSfDQ4DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQ9eOA3aMuZSeXH74hB8aK jpEGgSwZAY4ovK0MPUHOQf+eT1pd/tP74DLWRleOxPZpteCyp2EdJPsEFzcn9JWz jheSxBv2gksL1z3E8z/48ivxKlZgPKAecM0j0FvrU9fvZXC5Ji627rh7Qb7JX94f vW7+zY5lkXSgK7aEPbd9gDYFPPKa5/izb9nxHx6K5SSjvy+s1nJNLuiOXoPeFZtm KtiAxNTms/S0SljPa8KDSbew70XSAn/d8Q8fmHUFpeT6v+CdTuUceU/6kWCwus40 OjABdj6YsI7219L7AW50EsG4XXPZE0/11jJ4Z7KZz9QA8zryq1YDCkUftW3UdK+I -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:03 2025 by rpki-client