$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/152d5d6b-8e8d-3c06-a6fb-0d89b965015e.roa File: 152d5d6b-8e8d-3c06-a6fb-0d89b965015e.roa (raw, json) Hash identifier: XPhIzZWngIHceINe8XC4LAZhmYBxsaxp2Q8qfB9ks5w= Subject key identifier: 4E:33:12:BA:94:19:D5:4D:0E:A2:2C:BF:6B:56:22:A8:68:65:FC:7F Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858492340B5680BDF3538D7A07E80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/152d5d6b-8e8d-3c06-a6fb-0d89b965015e.roa Signing time: Mon 10 Mar 2025 03:57:30 +0000 ROA not before: Mon 10 Mar 2025 03:57:30 +0000 ROA not after: Sun 08 Jun 2025 03:57:30 +0000 asID: 174 IP address blocks: 50.7.42.0/23 maxlen: 24 50.7.52.0/24 maxlen: 24 2001:49f0:d0ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:23:40:b5:68:0b:df:35:38:d7:a0:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 10 03:57:30 2025 GMT Not After : Jun 8 03:57:30 2025 GMT Subject: CN=645ca7a4-74c4-464f-aa45-c724632dc97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:c3:db:4c:56:1b:50:33:71:99:2e:27:8f: 8c:9f:56:ea:15:67:12:71:d9:14:09:ed:e6:46:3f: 91:99:fa:68:a8:e1:c4:6d:7f:14:1e:23:a7:fb:1b: ba:02:71:9f:d4:51:36:d8:37:ba:d3:e7:de:9f:0c: 17:a8:bc:0b:93:66:d4:94:4b:cd:ea:ee:1c:6c:22: 2d:9b:a5:8f:c4:5c:d1:9d:4d:d3:dd:8d:a0:b9:39: 71:77:ba:bc:c8:05:15:45:0f:77:53:07:32:1a:54: 7b:85:5f:39:cc:b0:f7:96:bb:31:b1:b9:88:ba:aa: 0a:e1:fe:a7:b3:31:6b:7b:ae:d0:b0:96:e3:94:fe: 96:22:47:c6:23:4e:54:b4:6a:cb:48:15:08:88:c4: d1:42:fb:f1:ca:06:89:0b:f1:bc:77:c6:c2:fd:0f: 63:5e:2d:39:72:5a:3a:3a:d7:0f:b7:0d:5d:ef:3c: b1:5a:fe:b2:66:f1:12:a0:9a:34:21:4d:05:af:60: 73:bd:4d:f5:97:9f:cb:1d:f7:1e:2b:ce:c2:4c:bf: a8:e8:0b:1a:e3:75:de:b0:f3:2a:40:ed:c2:ce:19: 07:31:d8:73:fe:fd:40:03:43:17:90:5d:f3:86:e2: 23:ba:7b:81:fd:37:4c:d5:40:6b:35:ed:6c:4f:98: 98:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:33:12:BA:94:19:D5:4D:0E:A2:2C:BF:6B:56:22:A8:68:65:FC:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/152d5d6b-8e8d-3c06-a6fb-0d89b965015e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.42.0/23 50.7.52.0/24 IPv6: 2001:49f0:d0ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d1:b5:1d:7d:f3:ef:6a:61:ec:9b:cc:3d:c7:69:8c:e5:f9: b9:74:9b:37:0b:ea:f1:68:8a:c1:d4:33:8a:7f:6b:a7:9f:fa: e3:6a:f8:49:35:2c:2c:e1:9a:06:40:ab:22:44:fe:13:c1:8e: 37:ae:38:10:08:b6:10:1e:eb:dd:58:80:fa:dc:81:47:62:90: 91:5e:7e:58:af:16:20:76:6c:b7:05:ba:c0:d5:a0:bf:27:ac: b3:03:ee:a2:0a:45:51:35:e6:4b:8b:2c:78:76:06:54:c7:b9: c6:15:10:60:cc:ca:c8:41:9a:63:1a:43:1c:58:18:0e:fb:cc: 7b:3d:01:2f:fc:43:f4:1a:89:5f:9a:ec:50:d3:39:cd:f2:ad: 14:73:4b:09:5d:9b:8b:2b:d2:c9:58:17:47:4b:2c:76:40:a7: 1b:d4:20:9f:a9:1e:6c:4f:ef:e3:92:ea:03:3a:25:ed:6e:f1: e8:16:85:68:d0:cc:d7:da:71:00:f7:9a:9e:4e:f2:a3:1a:0f: 00:00:9f:89:7b:b8:02:85:69:6f:21:21:b1:ae:60:73:c0:13: 7d:3e:df:17:cf:21:96:f0:ea:24:c7:77:71:eb:08:70:71:42: 14:ae:a0:df:53:a5:8b:fa:9a:93:60:20:0d:16:e4:f4:41:88: cb:a6:f6:2c -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEkjQLVoC981ONegfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMxMDAzNTczMFoXDTI1MDYwODAzNTczMFowLzEtMCsGA1UEAxMk NjQ1Y2E3YTQtNzRjNC00NjRmLWFhNDUtYzcyNDYzMmRjOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfLD20xWG1AzcZkuJ4+Mn1bqFWcScdkUCe3m Rj+RmfpoqOHEbX8UHiOn+xu6AnGf1FE22De60+fenwwXqLwLk2bUlEvN6u4cbCIt m6WPxFzRnU3T3Y2guTlxd7q8yAUVRQ93UwcyGlR7hV85zLD3lrsxsbmIuqoK4f6n szFre67QsJbjlP6WIkfGI05UtGrLSBUIiMTRQvvxygaJC/G8d8bC/Q9jXi05clo6 OtcPtw1d7zyxWv6yZvESoJo0IU0Fr2BzvU31l5/LHfceK87CTL+o6Asa43XesPMq QO3CzhkHMdhz/v1AA0MXkF3zhuIjunuB/TdM1UBrNe1sT5iYbQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFE4zErqUGdVNDqIsv2tWIqhoZfx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMTUyZDVkNmItOGU4ZC0z YzA2LWE2ZmItMGQ4OWI5NjUwMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBMgcqAwQA Mgc0MA8EAgACMAkDBwAgAUnw0O0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZtG1HX3z72ph7JvMPcdpjOX5 uXSbNwvq8WiKwdQzin9rp5/642r4STUsLOGaBkCrIkT+E8GON644EAi2EB7r3ViA +tyBR2KQkV5+WK8WIHZstwW6wNWgvyesswPuogpFUTXmS4sseHYGVMe5xhUQYMzK yEGaYxpDHFgYDvvMez0BL/xD9BqJX5rsUNM5zfKtFHNLCV2biyvSyVgXR0ssdkCn G9Qgn6kebE/v45LqAzol7W7x6BaFaNDM19pxAPeank7yoxoPAACfiXu4AoVpbyEh sa5gc8ATfT7fF88hlvDqJMd3cesIcHFCFK6g31Oli/qak2AgDRbk9EGIy6b2LA== -----END CERTIFICATE-----Generated at Fri Mar 14 15:05:45 2025 by rpki-client