$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8867853f-3f0d-3c60-97d2-c8266de3e354.roa File: 8867853f-3f0d-3c60-97d2-c8266de3e354.roa (raw, json) Hash identifier: aj2TwHT5dz9OiXrSR1aL1c+ullaDX6yeSxudji0FLSM= Subject key identifier: 09:4C:7E:C0:9C:0D:18:89:2C:8D:C9:63:D9:F9:0D:1D:E4:36:DD:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5AD3940907ABBE9A7ACD0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8867853f-3f0d-3c60-97d2-c8266de3e354.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 15124 IP address blocks: 50.170.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:ad:39:40:90:7a:bb:e9:a7:ac:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=d6d506b8-bc14-4123-b7a4-f7da8209d957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e3:17:9e:9d:ce:69:85:d0:8b:fb:df:cb:7b: 78:25:65:99:16:e9:51:c9:63:14:5c:c9:23:42:47: 78:ee:ee:e0:69:f6:eb:92:70:1e:c8:9e:c8:cb:a2: ab:d5:22:3c:78:f3:e8:40:65:58:9f:8c:9d:a5:24: e9:61:a1:20:75:5a:f3:8e:e2:a7:95:e5:90:5b:16: 6d:56:d1:2d:3a:ef:13:15:b9:11:c2:ab:34:9c:41: 8d:9b:b5:50:97:db:0e:ad:7a:26:36:7f:cd:e1:25: 75:9c:46:49:9d:88:72:98:ae:c3:76:ba:79:8c:66: fa:11:40:ba:e0:b1:fd:85:bc:ee:5a:9f:b3:81:1f: 16:43:e1:86:30:5a:02:7c:13:7d:9b:d3:08:4a:cc: 4e:df:f5:39:95:49:ed:41:8d:e0:7c:d2:10:a5:f7: 5b:d5:55:31:f6:cc:47:43:7c:09:8a:29:cc:6e:bc: ab:05:6b:69:7a:ab:51:2b:3c:38:64:e1:76:84:e3: 6e:5e:0a:31:d8:1a:4d:f6:25:28:1a:f1:b1:6f:1a: d1:a8:e5:7d:31:36:2a:f0:8e:32:68:ad:57:f5:82: 8d:42:9f:60:ba:08:9c:00:39:6b:e4:f4:50:7d:89: 30:57:65:21:d7:18:a2:aa:76:e5:5e:71:3f:e7:a4: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4C:7E:C0:9C:0D:18:89:2C:8D:C9:63:D9:F9:0D:1D:E4:36:DD:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8867853f-3f0d-3c60-97d2-c8266de3e354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.170.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:e3:fd:df:7b:3a:67:60:7c:a0:e3:51:6f:21:ae:88:00:68: 47:39:8b:89:34:38:af:58:e9:e2:7b:ed:00:76:27:59:61:ac: 42:74:1f:08:e8:5a:13:21:7a:63:4b:c5:dc:1c:ef:ba:fe:76: 2d:a8:4e:b4:de:81:8b:ff:d7:58:58:2f:e1:78:75:00:15:cc: 8b:d7:9b:bc:4b:f6:6b:57:44:1e:15:c7:e9:82:df:3d:e4:5a: 9b:32:b2:a8:8a:b3:95:e4:3b:d2:ef:d2:c6:38:2f:a4:51:82: ce:ec:64:01:07:d4:fb:84:e0:27:55:3f:96:19:c2:79:b7:f7: a0:5e:fd:d5:a5:3c:4e:3e:ee:f6:f1:81:44:84:12:4b:9f:17: 83:50:96:d4:1f:1b:12:52:54:77:2d:0a:68:f2:c1:ef:a8:1a: 72:a1:32:be:b7:03:9c:eb:95:d8:d2:61:f0:d9:88:83:f8:bb: d2:58:b5:29:3e:56:18:78:77:b5:29:f6:7c:88:14:11:05:d4: b2:ea:9e:71:11:94:12:2a:cd:b7:94:d9:0f:e5:8c:4c:61:bc: 61:ce:71:ee:43:70:d9:ea:95:dd:81:32:6f:90:40:b1:7e:45: f6:c3:3c:9c:7a:70:af:32:83:5a:1a:61:38:ce:eb:70:4e:09: 95:b7:be:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pa05QJB6u+mnrNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDZkNTA2YjgtYmMxNC00MTIzLWI3YTQtZjdkYTgyMDlkOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+MXnp3OaYXQi/vfy3t4JWWZFulRyWMUXMkj Qkd47u7gafbrknAeyJ7Iy6Kr1SI8ePPoQGVYn4ydpSTpYaEgdVrzjuKnleWQWxZt VtEtOu8TFbkRwqs0nEGNm7VQl9sOrXomNn/N4SV1nEZJnYhymK7Ddrp5jGb6EUC6 4LH9hbzuWp+zgR8WQ+GGMFoCfBN9m9MISsxO3/U5lUntQY3gfNIQpfdb1VUx9sxH Q3wJiinMbryrBWtpeqtRKzw4ZOF2hONuXgox2BpN9iUoGvGxbxrRqOV9MTYq8I4y aK1X9YKNQp9gugicADlr5PRQfYkwV2Uh1xiiqnblXnE/56RfswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlMfsCcDRiJLI3JY9n5DR3kNt1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODg2Nzg1M2YtM2YwZC0z YzYwLTk3ZDItYzgyNjZkZTNlMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMqpWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM7j/d97OmdgfKDjUW8hrogAaEc5i4k0OK9Y6eJ77QB2J1lhrEJ0Hwjo WhMhemNLxdwc77r+di2oTrTegYv/11hYL+F4dQAVzIvXm7xL9mtXRB4Vx+mC3z3k WpsysqiKs5XkO9Lv0sY4L6RRgs7sZAEH1PuE4CdVP5YZwnm396Be/dWlPE4+7vbx gUSEEkufF4NQltQfGxJSVHctCmjywe+oGnKhMr63A5zrldjSYfDZiIP4u9JYtSk+ Vhh4d7Up9nyIFBEF1LLqnnERlBIqzbeU2Q/ljExhvGHOce5DcNnqld2BMm+QQLF+ RfbDPJx6cK8yg1oaYTjO63BOCZW3vgY= -----END CERTIFICATE-----Generated at Sun Apr 27 06:31:31 2025 by rpki-client