$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5375d770-02c0-30d4-88d9-8c113a61a958.roa File: 5375d770-02c0-30d4-88d9-8c113a61a958.roa (raw, json) Hash identifier: x42CA88gTO2MpgbBgIHuu7WiOCXAx17ZY3uAPHKoKwU= Subject key identifier: 50:0C:06:24:E2:47:29:43:0A:78:3E:06:D1:9E:D9:7C:84:8A:F7:8D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA60DB47DBAC5007913F080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5375d770-02c0-30d4-88d9-8c113a61a958.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 20214 IP address blocks: 50.220.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:0d:b4:7d:ba:c5:00:79:13:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=c54e7183-9982-495d-8673-a29a65e6c46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:64:0f:8a:bf:2c:75:53:2e:c0:c4:08:cb:b8: b5:45:00:cd:99:1e:07:71:c5:4b:72:51:f0:35:93: 92:47:40:3f:ff:98:b5:da:1d:1f:13:75:91:b4:e5: 0f:fc:42:3b:4e:0f:82:e8:75:9d:13:38:e1:18:63: 8b:18:ea:48:be:02:25:4c:9c:17:5c:6e:52:a1:5c: 7c:b9:72:b7:9a:38:68:8c:3a:a7:5a:89:06:69:bb: 1e:b0:59:43:aa:24:0b:13:0e:46:2b:4d:24:7e:73: f4:0c:06:2d:1e:8a:cc:ee:42:98:26:f7:aa:54:4a: 6a:55:ad:0a:94:78:ed:72:7c:68:1f:f3:2c:4f:88: 38:c8:b5:80:6a:05:86:2f:ec:6f:4e:75:19:bc:48: cc:c0:fc:12:63:6d:f3:61:28:f1:ce:1b:6a:fe:0c: 13:a6:b3:5b:47:eb:73:04:82:06:af:a9:aa:c1:3f: 3d:34:c7:ca:e6:d4:af:5a:ff:ab:1b:7f:79:84:0f: 17:ea:47:b4:24:c6:4d:34:05:c2:dc:65:7c:d4:f3: 4b:4c:6a:1b:d1:bf:b8:1f:07:f5:b7:3d:5f:21:24: 6a:81:8d:ee:7c:19:26:1a:d5:65:9a:87:ad:45:91: a6:43:9c:da:c8:a2:4a:50:9f:70:d1:1d:97:f5:40: c0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0C:06:24:E2:47:29:43:0A:78:3E:06:D1:9E:D9:7C:84:8A:F7:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5375d770-02c0-30d4-88d9-8c113a61a958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.220.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:37:2a:45:63:ad:5a:f8:dd:1b:ff:12:3e:fb:41:45:c4:df: 6b:55:78:3e:39:40:d3:9b:12:f5:85:eb:32:f4:b3:07:a8:95: c1:e7:ab:46:f8:74:19:15:3c:30:8c:ef:51:c7:5d:c7:89:be: 7a:d2:c8:3b:c3:10:5f:be:e3:e3:e8:98:a7:6a:ba:b6:2b:7f: 5c:d4:2d:fe:6c:3d:06:9f:a5:12:da:5b:2c:95:7e:90:19:6b: 94:a1:22:c1:73:18:29:b3:1c:d8:09:ee:fa:0f:a4:12:0f:6c: 02:a1:0b:5e:2e:ce:22:02:54:0b:71:17:ad:62:ac:75:a0:2f: 61:0c:d1:91:38:7b:04:a7:42:49:9f:77:94:e9:f2:fd:28:51: dd:5a:87:4a:1a:48:34:64:81:0e:2a:f9:65:6b:4b:11:0c:92: e8:ca:b9:bf:4a:bb:64:f3:4c:5e:89:53:8b:a3:ae:6e:39:da: 93:de:0c:27:53:4a:95:a8:28:36:c6:14:3b:14:56:c3:d2:48: 3d:11:ef:e9:bc:2a:12:40:d5:e2:f4:57:07:f8:37:72:98:a4: 4f:7c:27:93:bb:fb:c4:b8:e8:32:01:1d:7c:56:69:6d:a0:66: 31:d0:54:80:30:ae:77:cc:43:34:8e:8a:f4:97:05:8e:93:f5: ee:0b:7c:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pg20fbrFAHkT8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzU0ZTcxODMtOTk4Mi00OTVkLTg2NzMtYTI5YTY1ZTZjNDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmQPir8sdVMuwMQIy7i1RQDNmR4HccVLclHw NZOSR0A//5i12h0fE3WRtOUP/EI7Tg+C6HWdEzjhGGOLGOpIvgIlTJwXXG5SoVx8 uXK3mjhojDqnWokGabsesFlDqiQLEw5GK00kfnP0DAYtHorM7kKYJveqVEpqVa0K lHjtcnxoH/MsT4g4yLWAagWGL+xvTnUZvEjMwPwSY23zYSjxzhtq/gwTprNbR+tz BIIGr6mqwT89NMfK5tSvWv+rG395hA8X6ke0JMZNNAXC3GV81PNLTGob0b+4Hwf1 tz1fISRqgY3ufBkmGtVlmoetRZGmQ5zayKJKUJ9w0R2X9UDAmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAMBiTiRylDCng+BtGe2XyEiveNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTM3NWQ3NzAtMDJjMC0z MGQ0LTg4ZDktOGMxMTNhNjFhOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMtzWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM3KkVjrVr43Rv/Ej77QUXE32tVeD45QNObEvWF6zL0sweolcHnq0b4 dBkVPDCM71HHXceJvnrSyDvDEF++4+PomKdqurYrf1zULf5sPQafpRLaWyyVfpAZ a5ShIsFzGCmzHNgJ7voPpBIPbAKhC14uziICVAtxF61irHWgL2EM0ZE4ewSnQkmf d5Tp8v0oUd1ah0oaSDRkgQ4q+WVrSxEMkujKub9Ku2TzTF6JU4ujrm452pPeDCdT SpWoKDbGFDsUVsPSSD0R7+m8KhJA1eL0Vwf4N3KYpE98J5O7+8S46DIBHXxWaW2g ZjHQVIAwrnfMQzSOivSXBY6T9e4LfFs= -----END CERTIFICATE-----Generated at Sun Apr 27 16:26:42 2025 by rpki-client