$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a068ddaa-17ad-3912-a398-57aca79f12a1.roa File: a068ddaa-17ad-3912-a398-57aca79f12a1.roa (raw, json) Hash identifier: hX6psb6eIdpmVWK3L2Canrr2EUisUH9j+Ao5FYBfLiE= Subject key identifier: D5:99:AE:72:46:F2:7D:AB:4B:2E:F0:7D:42:16:7C:3D:8F:31:BA:3D Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858488815E1DC81B2EF898B32D400 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a068ddaa-17ad-3912-a398-57aca79f12a1.roa Signing time: Mon 13 Jan 2025 14:00:52 +0000 ROA not before: Mon 13 Jan 2025 14:00:52 +0000 ROA not after: Sun 13 Apr 2025 13:00:52 +0000 asID: 1239 IP address blocks: 50.7.30.0/23 maxlen: 24 50.7.80.0/22 maxlen: 24 50.7.206.0/23 maxlen: 24 50.7.208.0/23 maxlen: 24 50.7.246.0/23 maxlen: 24 198.16.99.0/24 maxlen: 24 198.16.120.0/24 maxlen: 24 2001:49f0:d01e::/48 maxlen: 48 2001:49f0:d095::/48 maxlen: 48 2001:49f0:d0e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:88:15:e1:dc:81:b2:ef:89:8b:32:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 13 14:00:52 2025 GMT Not After : Apr 13 13:00:52 2025 GMT Subject: CN=c715b44b-e1dc-4439-8c62-66e3818527d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:b1:c8:ed:f4:4d:d2:63:ce:da:10:73:0c: a5:a6:a9:f8:d1:f5:75:b3:be:06:87:8e:fd:c9:26: 8f:1b:87:01:f6:08:fa:94:0f:19:b5:10:25:d3:aa: 10:92:01:74:ed:b5:98:fd:8b:29:b8:e7:d4:f9:ec: 4c:c7:88:d8:66:0b:b9:0e:66:a1:cd:63:1b:b4:6f: 18:99:4c:7a:e0:e6:8e:55:d9:a2:5e:db:3d:4f:b7: c9:d1:fe:19:e7:96:51:98:9c:fb:2e:f3:cc:34:87: ad:58:43:47:46:0a:67:16:91:fa:25:23:1a:67:ce: b4:c9:0d:12:11:2e:04:fd:92:e3:4d:5a:8c:a4:e9: 24:7d:36:1c:c4:db:d8:bf:ea:b1:ac:10:b9:20:4d: fe:1f:07:4f:1d:f1:f8:c3:bc:56:c3:85:02:19:93: ca:b6:31:d2:a7:c8:b0:15:53:ec:bf:20:48:0e:4a: 40:c1:e1:9e:60:bb:26:89:77:0c:43:46:8b:39:03: d8:8a:00:2d:53:f6:9b:7a:83:3b:23:6e:cf:73:5d: 6a:99:34:39:69:24:27:cf:43:ed:52:97:10:25:fd: ab:b9:4e:4f:87:80:0c:6c:46:be:10:9c:55:a4:18: 0d:54:b4:2d:a9:74:9f:84:a5:28:47:54:6c:d6:23: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:99:AE:72:46:F2:7D:AB:4B:2E:F0:7D:42:16:7C:3D:8F:31:BA:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a068ddaa-17ad-3912-a398-57aca79f12a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.30.0/23 50.7.80.0/22 50.7.206.0-50.7.209.255 50.7.246.0/23 198.16.99.0/24 198.16.120.0/24 IPv6: 2001:49f0:d01e::/48 2001:49f0:d095::/48 2001:49f0:d0e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c4:ca:ab:73:69:03:19:c9:02:3c:f3:f1:ff:17:d1:d9:a2: 4b:b4:0f:4a:3c:2f:75:e3:04:78:66:8f:21:65:67:1f:bd:db: b7:67:da:04:68:0c:27:33:3a:e5:33:71:9e:a6:26:cf:eb:37: 63:a4:d7:74:b5:1d:27:12:27:94:b7:c9:e5:cd:34:be:69:27: d7:87:39:a1:41:e6:28:47:0e:c1:d1:b2:2b:5e:66:12:60:9d: a6:c1:1d:31:63:2c:23:5a:4b:d0:53:df:e0:89:0d:fa:c6:fb: 2b:f8:cb:f5:cf:24:0d:62:3d:2a:38:ea:23:f4:84:65:0b:ee: 3e:01:f7:83:8a:6e:26:2f:0d:a2:ee:0a:59:79:ec:67:f4:81: 42:e6:15:24:1e:df:07:38:8c:56:cc:11:a5:55:da:1f:d6:96: a8:fa:8c:fb:af:cb:4d:73:56:33:88:3e:b5:2b:53:3c:d8:05: 1a:19:f1:d3:0d:23:65:50:0e:58:77:e6:10:40:79:ea:76:aa: 14:5c:96:d5:77:0a:de:ce:0f:88:45:96:2c:03:f2:9d:52:fc: 1f:43:4a:8f:57:50:63:8e:9e:0a:4d:67:df:d6:08:82:4c:f0: 35:db:35:7b:31:5b:d6:04:80:2c:9a:c3:ec:c5:ca:87:04:4b: 54:ed:15:62 -----BEGIN CERTIFICATE----- MIIGjDCCBXSgAwIBAgIUAQ0Mn0MoWEiIFeHcgbLviYsy1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDExMzE0MDA1MloXDTI1MDQxMzEzMDA1MlowLzEtMCsGA1UEAxMk YzcxNWI0NGItZTFkYy00NDM5LThjNjItNjZlMzgxODUyN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pOxyO30TdJjztoQcwylpqn40fV1s74Gh479 ySaPG4cB9gj6lA8ZtRAl06oQkgF07bWY/YspuOfU+exMx4jYZgu5DmahzWMbtG8Y mUx64OaOVdmiXts9T7fJ0f4Z55ZRmJz7LvPMNIetWENHRgpnFpH6JSMaZ860yQ0S ES4E/ZLjTVqMpOkkfTYcxNvYv+qxrBC5IE3+HwdPHfH4w7xWw4UCGZPKtjHSp8iw FVPsvyBIDkpAweGeYLsmiXcMQ0aLOQPYigAtU/abeoM7I27Pc11qmTQ5aSQnz0Pt UpcQJf2ruU5Ph4AMbEa+EJxVpBgNVLQtqXSfhKUoR1Rs1iOwTwIDAQABo4IDnjCC A5owHQYDVR0OBBYEFNWZrnJG8n2rSy7wfUIWfD2PMbo9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYTA2OGRkYWEtMTdhZC0z OTEyLWEzOTgtNTdhY2E3OWYxMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMGgGCCsGAQUFBwEHAQH/BFkwVzAyBAIAATAsAwQBMgceAwQC MgdQMAwDBAEyB84DBAEyB9ADBAEyB/YDBADGEGMDBADGEHgwIQQCAAIwGwMHACAB SfDQHgMHACABSfDQlQMHACABSfDQ4DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOxMqrc2kDGckCPPPx/xfR 2aJLtA9KPC914wR4Zo8hZWcfvdu3Z9oEaAwnMzrlM3GepibP6zdjpNd0tR0nEieU t8nlzTS+aSfXhzmhQeYoRw7B0bIrXmYSYJ2mwR0xYywjWkvQU9/giQ36xvsr+Mv1 zyQNYj0qOOoj9IRlC+4+AfeDim4mLw2i7gpZeexn9IFC5hUkHt8HOIxWzBGlVdof 1pao+oz7r8tNc1YziD61K1M82AUaGfHTDSNlUA5Yd+YQQHnqdqoUXJbVdwrezg+I RZYsA/KdUvwfQ0qPV1Bjjp4KTWff1giCTPA12zV7MVvWBIAsmsPsxcqHBEtU7RVi -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:50 2025 by rpki-client