$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c39501e9-3b1d-343d-8fd7-b9fca8777ae7.roa File: c39501e9-3b1d-343d-8fd7-b9fca8777ae7.roa (raw, json) Hash identifier: /3Qkrb7kEzerec8QegKTXpP/iKqy5YXEpoSe5LLXHX4= Subject key identifier: 4D:14:E6:A0:39:A8:5D:F8:F0:00:77:F3:A1:08:08:E9:E6:5F:B6:D5 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584891DB327977CC1FDE763DFA8C Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c39501e9-3b1d-343d-8fd7-b9fca8777ae7.roa Signing time: Fri 17 Jan 2025 02:00:40 +0000 ROA not before: Fri 17 Jan 2025 02:00:40 +0000 ROA not after: Thu 17 Apr 2025 01:00:40 +0000 asID: 174 IP address blocks: 50.7.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:91:db:32:79:77:cc:1f:de:76:3d:fa:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 17 02:00:40 2025 GMT Not After : Apr 17 01:00:40 2025 GMT Subject: CN=719bbe79-b9ff-4b66-a8a1-c87aaca05580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d8:21:fa:6c:f1:cc:95:d8:0f:4c:47:c7:4a: fd:48:30:14:a5:5e:40:e3:d3:bc:d6:9b:bb:96:f0: 2c:7b:f9:ac:1a:c0:52:4a:95:18:9a:13:12:ac:97: c0:8a:6d:16:fc:2c:1f:c4:38:ce:8a:76:54:16:ab: 70:9d:48:5e:ab:a3:9a:dd:3b:74:39:67:cf:b4:0f: 09:e6:ea:31:b8:87:cd:7c:47:fc:e7:e6:ca:4c:c4: dc:22:26:74:0e:bb:7c:ef:45:52:48:09:4d:75:3d: 0d:6c:ef:93:e2:aa:0b:91:b3:6e:db:48:d3:b5:d0: d5:f8:5d:5a:65:53:dd:b2:c1:2e:91:70:67:31:ce: 77:4d:2a:d1:85:52:c4:ab:76:d7:93:88:9c:53:a3: ce:57:b0:bb:f6:f1:0a:65:20:6a:29:e1:f7:c0:56: 31:6d:29:b0:bb:07:b1:c4:1b:cf:f6:1a:79:94:d2: d0:13:47:5e:eb:de:f2:dd:db:59:be:27:48:f0:f8: db:5a:c5:07:23:8d:9f:7c:a3:2e:26:a4:4f:7c:d4: 44:da:81:d2:49:ec:e2:9a:f0:a2:cd:e5:69:ba:25: be:c8:51:75:11:72:e8:a0:08:19:20:1f:8e:e0:18: 6f:48:fe:df:88:9d:21:b3:a8:66:58:51:27:c9:ab: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:14:E6:A0:39:A8:5D:F8:F0:00:77:F3:A1:08:08:E9:E6:5F:B6:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c39501e9-3b1d-343d-8fd7-b9fca8777ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:18:80:de:8f:7e:71:22:53:22:25:d0:db:15:bc:18:0b:84: 14:fd:71:85:d5:2d:99:df:21:7e:f7:cf:c3:ea:d5:3d:54:ce: 75:b5:69:02:3f:3c:56:46:9e:be:5b:dd:e9:a0:dd:82:54:04: c7:2a:f4:62:bc:d9:ad:1f:9a:67:ab:38:a3:ff:86:05:3b:b9: 04:ef:91:d1:a1:d8:41:8e:08:c6:2e:5d:25:db:aa:ed:a9:04: b1:7c:20:f6:40:e9:a4:ea:ab:fc:5f:ce:f1:0b:e0:e2:6e:f2: f3:9a:34:01:a3:ae:b1:0d:c2:32:10:2b:7d:10:af:94:cc:bf: 97:bd:b1:be:ff:3a:41:28:04:ab:bb:08:a8:2f:96:c7:13:f3: 96:c7:5d:cc:d7:93:2d:a3:7e:18:93:ce:b9:1d:0c:c2:6d:97: 2f:4d:bd:5a:7f:aa:8a:bc:b3:fd:13:7e:57:88:ee:ec:fe:53: 39:c5:55:0b:4f:31:5a:7d:84:c3:75:f4:6b:a1:ed:ee:3c:e0: 14:b1:ad:26:d4:6e:66:7b:8c:b9:24:ba:18:7f:56:d6:13:f0: 42:16:32:4d:e7:91:3c:85:2d:d0:13:5c:bb:17:9e:9a:d0:07: 9a:c4:43:8f:b1:24:36:9b:2b:88:7d:3b:2a:76:c0:6c:0a:34: 9f:f3:46:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiR2zJ5d8wf3nY9+owwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk NzE5YmJlNzktYjlmZi00YjY2LWE4YTEtYzg3YWFjYTA1NTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntgh+mzxzJXYD0xHx0r9SDAUpV5A49O81pu7 lvAse/msGsBSSpUYmhMSrJfAim0W/CwfxDjOinZUFqtwnUheq6Oa3Tt0OWfPtA8J 5uoxuIfNfEf85+bKTMTcIiZ0Drt870VSSAlNdT0NbO+T4qoLkbNu20jTtdDV+F1a ZVPdssEukXBnMc53TSrRhVLEq3bXk4icU6POV7C79vEKZSBqKeH3wFYxbSmwuwex xBvP9hp5lNLQE0de697y3dtZvidI8PjbWsUHI42ffKMuJqRPfNRE2oHSSezimvCi zeVpuiW+yFF1EXLooAgZIB+O4BhvSP7fiJ0hs6hmWFEnyav9kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0U5qA5qF348AB386EICOnmX7bVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYzM5NTAxZTktM2IxZC0z NDNkLThmZDctYjlmY2E4Nzc3YWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEYgN6PfnEiUyIl0NsVvBgLhBT9cYXVLZnfIX73z8Pq1T1UznW1aQI/ PFZGnr5b3emg3YJUBMcq9GK82a0fmmerOKP/hgU7uQTvkdGh2EGOCMYuXSXbqu2p BLF8IPZA6aTqq/xfzvEL4OJu8vOaNAGjrrENwjIQK30Qr5TMv5e9sb7/OkEoBKu7 CKgvlscT85bHXczXky2jfhiTzrkdDMJtly9NvVp/qoq8s/0TfleI7uz+UznFVQtP MVp9hMN19Guh7e484BSxrSbUbmZ7jLkkuhh/VtYT8EIWMk3nkTyFLdATXLsXnprQ B5rEQ4+xJDabK4h9Oyp2wGwKNJ/zRvk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:54 2025 by rpki-client