$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95881e9f-f38d-3be4-ab28-5acabe54e2be.roa File: 95881e9f-f38d-3be4-ab28-5acabe54e2be.roa (raw, json) Hash identifier: Uae7vHSkPY7/bYokIe0P9SnjJKi6sHytSFEsOlLuDoA= Subject key identifier: AC:A0:F4:AA:88:FB:50:5A:10:D1:E6:F4:AF:88:65:AC:E7:A0:D0:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5F9FACA7A32379393C2C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95881e9f-f38d-3be4-ab28-5acabe54e2be.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 7016 IP address blocks: 50.199.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:f9:fa:ca:7a:32:37:93:93:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=56d5592d-120b-48fd-90ae-72863c228d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:84:24:45:0e:1a:97:27:9f:36:65:b7:3e:b0: 84:21:fe:36:64:a3:25:21:56:bd:e9:a5:06:a4:3d: 48:52:4a:55:5f:87:c8:64:e2:23:97:ac:4f:ab:2d: a9:dc:00:f5:58:cd:62:56:d6:f9:14:3e:71:17:ce: e4:16:06:e9:1b:9a:9a:08:c1:5d:74:fe:97:a5:47: 61:2c:1a:03:31:80:f0:56:53:72:d2:bd:2a:1b:e6: 02:14:5c:25:37:ee:f5:69:b4:50:0d:07:d6:49:de: bc:76:04:00:62:2a:28:40:ba:59:49:71:e9:cc:e3: b8:81:61:de:ef:ec:ab:17:0c:4c:1e:f4:d3:ac:0f: 44:2b:6c:a5:51:15:b2:5f:3b:8e:80:45:f6:21:78: d9:9e:e7:de:89:5e:b4:ce:e6:e8:13:65:8a:25:8a: 31:a3:16:ec:13:0b:69:d5:32:c9:96:ec:8a:1d:5c: fa:bd:72:bc:aa:fd:5c:cf:4c:db:e9:d6:d1:f4:40: ee:00:d5:1a:a6:79:a3:cb:f4:30:ed:a6:df:bc:21: d4:20:98:cc:b4:74:82:aa:ba:ac:c5:e2:dc:d5:71: 40:ff:82:70:26:69:ff:e0:94:a0:27:d1:38:e0:45: 5d:31:1f:93:8f:66:01:aa:a1:b2:b1:eb:23:34:3f: 7b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A0:F4:AA:88:FB:50:5A:10:D1:E6:F4:AF:88:65:AC:E7:A0:D0:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95881e9f-f38d-3be4-ab28-5acabe54e2be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.199.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:be:90:e9:4c:37:9c:d0:a1:a0:ee:d5:f6:e3:1e:09:6d:d6: 0e:fe:19:0a:cc:3f:91:d8:a9:14:77:f2:d3:5c:6e:3f:34:7a: 42:2b:60:5a:0a:57:6d:22:0c:f1:61:a6:a0:de:79:00:d2:aa: c8:84:6e:38:5f:78:07:5d:4d:bc:b0:cc:00:e0:17:9c:26:00: 73:17:f3:31:22:b2:f7:2b:9c:97:4c:45:b2:ab:b7:2b:a2:3a: ef:2e:91:e2:34:2b:be:c8:94:27:f6:41:9a:37:a3:40:c4:6f: d9:3f:09:15:91:31:e3:76:77:e0:5d:7b:94:fd:f5:ca:88:56: 6d:ba:1f:2f:f0:04:2b:a0:96:c7:5f:8b:b1:f3:88:f6:3a:02: 02:5c:7e:de:7a:c0:22:ce:c6:db:e7:24:8a:d0:62:71:be:1b: c7:8d:1d:e7:60:06:84:ad:17:2a:2f:87:89:12:5c:34:b7:70: 66:99:9f:3b:26:a0:4a:f1:75:cd:93:54:0e:38:8e:b6:1b:bf: 4b:32:cb:59:57:1f:29:10:90:37:37:87:d8:71:dc:eb:f4:d8: 32:ea:95:af:5f:4d:4f:b8:c4:b0:be:d0:ce:d0:23:35:07:36: 8f:0b:b7:76:7f:0e:d2:6b:9c:cd:de:e4:95:75:d8:c7:a1:47: 2d:4a:18:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pfn6ynoyN5OTwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NTZkNTU5MmQtMTIwYi00OGZkLTkwYWUtNzI4NjNjMjI4ZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoQkRQ4alyefNmW3PrCEIf42ZKMlIVa96aUG pD1IUkpVX4fIZOIjl6xPqy2p3AD1WM1iVtb5FD5xF87kFgbpG5qaCMFddP6XpUdh LBoDMYDwVlNy0r0qG+YCFFwlN+71abRQDQfWSd68dgQAYiooQLpZSXHpzOO4gWHe 7+yrFwxMHvTTrA9EK2ylURWyXzuOgEX2IXjZnufeiV60zuboE2WKJYoxoxbsEwtp 1TLJluyKHVz6vXK8qv1cz0zb6dbR9EDuANUapnmjy/Qw7abfvCHUIJjMtHSCqrqs xeLc1XFA/4JwJmn/4JSgJ9E44EVdMR+Tj2YBqqGysesjND97pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyg9KqI+1BaENHm9K+IZaznoNAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU4ODFlOWYtZjM4ZC0z YmU0LWFiMjgtNWFjYWJlNTRlMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMseAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2+kOlMN5zQoaDu1fbjHglt1g7+GQrMP5HYqRR38tNcbj80ekIrYFoK V20iDPFhpqDeeQDSqsiEbjhfeAddTbywzADgF5wmAHMX8zEisvcrnJdMRbKrtyui Ou8ukeI0K77IlCf2QZo3o0DEb9k/CRWRMeN2d+Bde5T99cqIVm26Hy/wBCuglsdf i7HziPY6AgJcft56wCLOxtvnJIrQYnG+G8eNHedgBoStFyovh4kSXDS3cGaZnzsm oErxdc2TVA44jrYbv0syy1lXHykQkDc3h9hx3Ov02DLqla9fTU+4xLC+0M7QIzUH No8Lt3Z/DtJrnM3e5JV12MehRy1KGEU= -----END CERTIFICATE-----Generated at Sun Apr 27 16:34:01 2025 by rpki-client