$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83db6f62-6ed5-357a-a147-e92085379ed4.roa File: 83db6f62-6ed5-357a-a147-e92085379ed4.roa (raw, json) Hash identifier: fwk9hFieff5/+q/ZQYqwrBBmgQ84+gXbZCOtHBcN3d4= Subject key identifier: 9B:CD:50:7C:CE:C5:21:98:3D:9A:ED:01:05:6E:F8:67:1A:9D:B6:8D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5B65561FBA2A44799BD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83db6f62-6ed5-357a-a147-e92085379ed4.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 394604 IP address blocks: 50.234.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:b6:55:61:fb:a2:a4:47:99:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=8d1e3c45-e82e-4d2f-b6a6-f9dc4d76a6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:fd:5b:2e:0a:e7:37:69:20:79:70:d2:bf: ce:16:e8:b0:dd:d6:81:81:f1:2f:d8:08:2e:95:4c: c8:eb:75:65:9a:b7:f4:ad:87:3d:81:51:1b:dc:f0: 65:29:58:d7:b2:b6:85:b5:58:22:5e:9c:8b:2b:7a: 18:44:de:fe:87:fa:ca:33:c2:ef:bf:98:dd:c3:9f: cf:e0:c7:bc:45:26:a0:91:ad:92:9d:e5:80:55:bc: 2a:ad:2e:55:7f:03:08:71:70:28:a8:bf:71:74:16: 43:8a:d0:27:d3:98:a6:10:45:b5:e1:9d:6b:8c:27: d7:a1:a0:9f:7f:68:1d:c7:f1:14:07:48:bb:c1:40: 73:21:a8:23:ad:50:0c:7d:8f:c4:a7:80:07:a8:2f: 80:e6:23:7c:3e:29:22:7c:a1:b8:fb:3a:05:07:18: f9:e3:62:29:ac:af:f6:21:67:bc:48:1c:eb:0c:21: 5f:14:c9:15:b3:c5:55:5a:74:8a:20:1e:45:72:f4: ec:97:7d:fe:8c:99:e4:58:0d:16:e9:6c:d2:16:2c: 51:52:6c:4c:e4:52:6a:f6:d5:c3:8c:dd:af:ca:35: 63:e2:95:fd:07:e1:6e:6f:9d:e4:db:d8:79:67:b2: 3e:1b:38:9f:c7:90:82:f4:af:f8:3e:af:81:40:ab: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CD:50:7C:CE:C5:21:98:3D:9A:ED:01:05:6E:F8:67:1A:9D:B6:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/83db6f62-6ed5-357a-a147-e92085379ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.234.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:89:83:31:2a:d4:81:7f:03:91:4e:d0:f0:33:1d:ab:fd:b3: dc:0d:a5:65:5d:1c:07:6e:ad:42:5c:61:d9:0d:e6:d3:1d:1a: 7f:88:e9:b8:aa:aa:11:01:ab:5d:16:6b:0a:8c:32:39:a5:9c: ea:5b:97:b9:01:98:4f:7e:1b:45:40:7e:64:dd:0a:8d:a3:cc: fa:a2:34:df:ee:ad:65:49:ff:b6:e9:06:16:e6:9b:47:3b:42: 97:ec:63:ba:11:a5:ed:38:23:49:9b:27:8a:d2:b0:59:79:f4: 57:b2:68:61:53:fa:d0:64:ff:18:1a:ed:46:c0:a4:d2:8c:bf: 04:f6:46:96:4a:74:4c:0b:86:ad:26:97:da:45:5e:4b:c2:86: 44:37:20:8a:97:5a:a7:a7:28:dd:b1:8f:7f:75:4b:d5:ed:39: f6:a8:40:fc:69:8c:a0:57:68:2f:bf:70:57:af:e4:c6:59:e0: e2:6a:d0:2f:7f:87:3d:57:8b:86:a7:e4:0a:ad:73:d6:3c:fa: a5:19:96:38:e0:b3:b7:f3:a8:e7:64:19:c9:a5:d1:7b:2e:05: 00:29:1e:e5:27:8f:56:d1:f3:a1:70:c0:c7:7c:c1:1d:66:7c: 3c:e5:72:d5:73:f9:e1:b6:6f:5c:36:02:9a:13:c6:df:e2:90: e0:42:58:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pbZVYfuipEeZvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGQxZTNjNDUtZTgyZS00ZDJmLWI2YTYtZjlkYzRkNzZhNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor/9Wy4K5zdpIHlw0r/OFuiw3daBgfEv2Agu lUzI63Vlmrf0rYc9gVEb3PBlKVjXsraFtVgiXpyLK3oYRN7+h/rKM8Lvv5jdw5/P 4Me8RSagka2SneWAVbwqrS5VfwMIcXAoqL9xdBZDitAn05imEEW14Z1rjCfXoaCf f2gdx/EUB0i7wUBzIagjrVAMfY/Ep4AHqC+A5iN8PikifKG4+zoFBxj542IprK/2 IWe8SBzrDCFfFMkVs8VVWnSKIB5FcvTsl33+jJnkWA0W6WzSFixRUmxM5FJq9tXD jN2vyjVj4pX9B+Fub53k29h5Z7I+Gzifx5CC9K/4Pq+BQKu90wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvNUHzOxSGYPZrtAQVu+GcanbaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODNkYjZmNjItNmVkNS0z NTdhLWExNDctZTkyMDg1Mzc5ZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuoqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6JgzEq1IF/A5FO0PAzHav9s9wNpWVdHAdurUJcYdkN5tMdGn+I6biq qhEBq10WawqMMjmlnOpbl7kBmE9+G0VAfmTdCo2jzPqiNN/urWVJ/7bpBhbmm0c7 QpfsY7oRpe04I0mbJ4rSsFl59FeyaGFT+tBk/xga7UbApNKMvwT2RpZKdEwLhq0m l9pFXkvChkQ3IIqXWqenKN2xj391S9XtOfaoQPxpjKBXaC+/cFev5MZZ4OJq0C9/ hz1Xi4an5Aqtc9Y8+qUZljjgs7fzqOdkGcml0XsuBQApHuUnj1bR86FwwMd8wR1m fDzlctVz+eG2b1w2ApoTxt/ikOBCWFY= -----END CERTIFICATE-----Generated at Wed Apr 30 02:09:31 2025 by rpki-client