$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/95244fe7-f5d3-398e-8164-b6de9b979c38.roa File: 95244fe7-f5d3-398e-8164-b6de9b979c38.roa (raw, json) Hash identifier: cT+X+PECXVWR3kJRNXY50V6vlq0woHL3c4+95Qqnn9M= Subject key identifier: 52:2C:2E:22:96:D4:EB:C8:55:75:38:02:AB:EE:A5:83:97:83:E0:02 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584891DB328CFFC648406459BAC0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/95244fe7-f5d3-398e-8164-b6de9b979c38.roa Signing time: Fri 17 Jan 2025 02:00:40 +0000 ROA not before: Fri 17 Jan 2025 02:00:40 +0000 ROA not after: Thu 17 Apr 2025 01:00:40 +0000 asID: 30058 IP address blocks: 50.7.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:db:32:8c:ff:c6:48:40:64:59:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 17 02:00:40 2025 GMT Not After : Apr 17 01:00:40 2025 GMT Subject: CN=3225c195-cbe9-4a01-b3d3-016228686609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e3:49:9c:8d:b4:48:ab:18:19:a5:1f:78:76: 10:1e:e9:3b:29:d0:e7:38:9e:b7:c2:5c:e9:1a:d6: 57:61:6b:47:f8:f5:ab:25:e4:5f:a2:91:61:7a:c2: 57:02:f2:1a:00:07:b0:fe:ef:3d:62:f1:68:e9:3f: 9d:9d:3d:1d:b1:e0:96:5a:e8:46:32:7b:e5:e8:7e: c5:8f:d4:b9:61:27:2e:46:6f:c1:00:2b:06:8c:63: 61:56:2b:36:4e:92:36:00:d5:c6:45:9e:a4:48:fd: 52:51:47:4f:77:90:3a:02:96:ab:71:7e:ad:90:a5: 77:3b:8f:a8:bc:c7:f8:63:50:e4:74:ca:a7:1e:ef: 4e:5b:72:30:c9:8f:64:0a:4a:95:a6:da:8d:83:1a: 15:61:e0:2e:67:28:cd:a9:3f:8d:4a:29:6f:13:27: 4b:b1:ee:fa:35:b6:0a:81:47:8b:1f:eb:3e:d3:e7: b1:49:77:76:f6:95:32:6d:06:54:82:10:48:ea:ec: 38:b0:8a:ee:2a:a1:96:2d:31:9f:6c:57:6b:dc:bb: 37:c9:af:59:b6:d1:2e:be:08:da:68:44:37:c6:b4: d1:14:ad:16:b9:33:81:ee:f6:6b:f3:50:ba:de:58: 48:b1:22:57:9f:16:89:f4:0b:c6:ca:0f:63:88:d7: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2C:2E:22:96:D4:EB:C8:55:75:38:02:AB:EE:A5:83:97:83:E0:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/95244fe7-f5d3-398e-8164-b6de9b979c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b0:be:cd:7a:2a:61:c0:0a:a8:d9:41:ca:4d:6a:3e:9e:42: 68:b0:a0:72:7a:12:7a:b4:e5:c5:2d:b7:65:ae:da:97:16:ee: 50:b0:58:ce:bb:f1:0f:9a:35:fc:24:4c:42:fc:75:d5:1c:46: 80:3b:52:ab:61:9e:88:b1:59:2e:bd:5d:ef:f2:ff:30:28:64: e3:d5:19:ca:2c:c7:a6:8f:87:41:99:16:07:4a:03:98:03:a3: 14:68:a1:37:d2:1c:41:ea:69:ca:0a:c3:db:f8:be:11:86:9c: c3:64:e9:6f:ff:ca:1d:42:61:3d:52:d4:13:97:18:44:46:6a: 6c:d0:d0:5f:b4:46:bf:b0:8e:e9:3d:f7:0b:b6:4a:9e:2c:a8: 9e:4d:58:b8:83:26:70:82:a5:9f:04:23:68:24:e7:ed:75:02: 15:be:47:60:93:0c:7a:c9:4a:1f:49:98:4a:60:82:3d:0b:b4: 55:34:15:a6:42:ca:98:94:a8:69:cc:9e:7d:d2:b4:f5:ed:f2: 1e:cb:2b:ee:18:55:6d:d1:8d:1c:d0:a6:a9:b2:55:23:bb:17: 1b:4d:34:51:93:e9:7d:f3:3f:a4:5f:0f:11:2a:6b:a6:dc:37: 34:8c:cf:6c:66:ae:13:ac:c2:27:04:2e:b9:4b:ef:98:62:80: da:54:31:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiR2zKM/8ZIQGRZusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk MzIyNWMxOTUtY2JlOS00YTAxLWIzZDMtMDE2MjI4Njg2NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguNJnI20SKsYGaUfeHYQHuk7KdDnOJ63wlzp GtZXYWtH+PWrJeRfopFhesJXAvIaAAew/u89YvFo6T+dnT0dseCWWuhGMnvl6H7F j9S5YScuRm/BACsGjGNhVis2TpI2ANXGRZ6kSP1SUUdPd5A6AparcX6tkKV3O4+o vMf4Y1DkdMqnHu9OW3IwyY9kCkqVptqNgxoVYeAuZyjNqT+NSilvEydLse76NbYK gUeLH+s+0+exSXd29pUybQZUghBI6uw4sIruKqGWLTGfbFdr3Ls3ya9ZttEuvgja aEQ3xrTRFK0WuTOB7vZr81C63lhIsSJXnxaJ9AvGyg9jiNdA0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIsLiKW1OvIVXU4AqvupYOXg+ACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOTUyNDRmZTctZjVkMy0z OThlLTgxNjQtYjZkZTliOTc5YzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGwvs16KmHACqjZQcpNaj6eQmiwoHJ6Enq05cUtt2Wu2pcW7lCwWM67 8Q+aNfwkTEL8ddUcRoA7UqthnoixWS69Xe/y/zAoZOPVGcosx6aPh0GZFgdKA5gD oxRooTfSHEHqacoKw9v4vhGGnMNk6W//yh1CYT1S1BOXGERGamzQ0F+0Rr+wjuk9 9wu2Sp4sqJ5NWLiDJnCCpZ8EI2gk5+11AhW+R2CTDHrJSh9JmEpggj0LtFU0FaZC ypiUqGnMnn3StPXt8h7LK+4YVW3RjRzQpqmyVSO7FxtNNFGT6X3zP6RfDxEqa6bc NzSMz2xmrhOswicELrlL75higNpUMQM= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:28 2025 by rpki-client