$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bd2c467b-6669-3ce8-9c91-7de9789f7628.roa File: bd2c467b-6669-3ce8-9c91-7de9789f7628.roa (raw, json) Hash identifier: pBPxRrjlxmXYgZw0MCgc9P2hMBOsFNGTvb0QITH2wSo= Subject key identifier: 34:D1:46:C9:B1:6D:41:B2:C6:3C:B1:77:8A:B5:C3:C6:8D:C7:85:28 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285848A565F311124C6E1D7E140B80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bd2c467b-6669-3ce8-9c91-7de9789f7628.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 174 IP address blocks: 50.7.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:f3:11:12:4c:6e:1d:7e:14:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=d003f907-ebc6-4aa2-840b-785b29faf70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:ca:c7:b8:94:9d:e3:d5:69:45:6b:84:0d: 96:6f:11:f1:68:3f:28:af:50:73:b9:32:8f:7e:16: c3:c0:21:7b:6a:82:49:3b:92:3e:01:c6:c9:ae:ed: 01:47:95:b1:43:f9:6f:4e:c1:01:c7:6f:cf:fd:f4: 26:69:70:ef:e6:70:42:04:8c:70:bc:f6:f0:96:71: 6d:84:53:7c:8e:04:69:67:26:d3:38:4b:e4:e4:81: 1b:32:2e:02:73:61:09:bd:04:a4:84:4b:3d:f8:d0: 16:f7:f5:8c:f6:2a:a5:83:25:9c:d6:23:2c:c9:18: 2c:e7:e1:ee:72:5a:ad:14:01:f4:5b:9a:f7:53:82: dc:2a:77:8e:6e:3c:7a:bc:a8:1d:99:76:04:53:71: f4:0f:6a:7f:3b:aa:c2:1c:0e:da:6b:93:a0:2d:ec: 86:99:32:83:b4:7e:08:5f:09:09:eb:00:0a:20:c0: 70:e3:96:03:86:fe:a2:33:b0:9b:77:d9:32:81:6a: b6:0f:dd:39:7b:34:54:7f:6d:94:ee:ab:e6:1c:0e: 83:39:5f:20:4e:fa:6a:46:b2:2d:36:a3:29:77:bc: 57:3a:09:ad:47:8e:eb:6d:f2:6e:bc:c1:ef:3a:f3: 2e:28:97:1d:97:f5:db:4e:07:a5:8e:c3:03:2f:96: 9c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D1:46:C9:B1:6D:41:B2:C6:3C:B1:77:8A:B5:C3:C6:8D:C7:85:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bd2c467b-6669-3ce8-9c91-7de9789f7628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:8a:47:62:c5:6b:0f:27:75:13:b3:30:85:00:94:71:f0:ba: e2:61:91:56:c4:12:b5:44:f2:b9:53:d4:11:fd:0e:f8:a0:39: 96:f6:a2:63:4e:ad:5f:72:e7:34:95:55:a9:5a:c5:0f:71:a4: a0:5e:95:27:35:0c:30:48:8c:82:f2:2a:76:bf:11:ff:01:2c: 0b:84:42:2b:9d:8d:c9:b2:30:8d:99:3d:68:fd:01:79:22:27: 92:dc:9c:cc:b8:cb:d4:e0:5e:99:90:2f:ea:d5:5a:6c:71:7a: b2:b8:49:97:60:6a:f0:2e:ae:2b:c0:6a:a0:95:1a:b5:80:cc: 1f:9b:7d:74:75:9e:c2:5c:77:da:72:62:eb:0c:81:fa:6f:e9: cd:f5:20:84:a2:d8:ab:3a:e7:c1:d5:00:e2:e4:ea:cc:02:69: 73:53:0d:95:ee:41:3e:55:62:91:ac:f8:27:74:2c:77:9d:19: 6c:98:07:09:16:3d:dc:91:a5:ca:cf:b3:3d:43:81:12:fb:a1: 38:00:21:38:bf:fd:e8:0d:4d:22:c6:a7:d1:c4:90:f4:c7:0f: 73:75:9f:bf:c3:1d:da:03:7e:07:8c:21:46:5f:52:4e:43:0f: cd:c4:2e:e7:ab:74:7d:87:a9:8e:0d:47:57:84:27:9a:bf:3a: ea:2b:20:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEilZfMREkxuHX4UC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDAwM2Y5MDctZWJjNi00YWEyLTg0MGItNzg1YjI5ZmFmNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvbKx7iUnePVaUVrhA2WbxHxaD8or1BzuTKP fhbDwCF7aoJJO5I+AcbJru0BR5WxQ/lvTsEBx2/P/fQmaXDv5nBCBIxwvPbwlnFt hFN8jgRpZybTOEvk5IEbMi4Cc2EJvQSkhEs9+NAW9/WM9iqlgyWc1iMsyRgs5+Hu clqtFAH0W5r3U4LcKneObjx6vKgdmXYEU3H0D2p/O6rCHA7aa5OgLeyGmTKDtH4I XwkJ6wAKIMBw45YDhv6iM7Cbd9kygWq2D905ezRUf22U7qvmHA6DOV8gTvpqRrIt NqMpd7xXOgmtR47rbfJuvMHvOvMuKJcdl/XbTgeljsMDL5acxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTRRsmxbUGyxjyxd4q1w8aNx4UoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYmQyYzQ2N2ItNjY2OS0z Y2U4LTljOTEtN2RlOTc4OWY3NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuKR2LFaw8ndROzMIUAlHHwuuJhkVbEErVE8rlT1BH9DvigOZb2omNO rV9y5zSVValaxQ9xpKBelSc1DDBIjILyKna/Ef8BLAuEQiudjcmyMI2ZPWj9AXki J5LcnMy4y9TgXpmQL+rVWmxxerK4SZdgavAurivAaqCVGrWAzB+bfXR1nsJcd9py YusMgfpv6c31IISi2Ks658HVAOLk6swCaXNTDZXuQT5VYpGs+Cd0LHedGWyYBwkW PdyRpcrPsz1DgRL7oTgAITi//egNTSLGp9HEkPTHD3N1n7/DHdoDfgeMIUZfUk5D D83ELuerdH2HqY4NR1eEJ5q/OuorIG8= -----END CERTIFICATE-----Generated at Fri Mar 14 11:27:43 2025 by rpki-client