$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9fb4780-c0dc-3a96-9e10-7a9f1ae6af40.roa File: a9fb4780-c0dc-3a96-9e10-7a9f1ae6af40.roa (raw, json) Hash identifier: 6/HsBOJYwHabibK8JwWqjgR7yGKYsskDaQZl9R7hdJE= Subject key identifier: 20:84:45:7E:4F:C8:72:0B:71:F3:C8:8B:05:AC:FD:CD:1C:39:CA:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6D3B7491DED9E45964E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9fb4780-c0dc-3a96-9e10-7a9f1ae6af40.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 12152 IP address blocks: 50.202.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:d3:b7:49:1d:ed:9e:45:96:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=e2922a43-8383-4fe1-bced-09a474473bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:06:2f:5d:f9:db:19:f9:b3:eb:d9:f1:0d:3b: c9:67:c5:2e:c3:13:37:28:10:3d:e1:6a:51:b5:12: 24:8b:42:d5:a9:00:d8:fa:ee:53:b0:8a:06:ce:a0: 3f:73:96:8a:f0:10:1f:ab:84:73:02:21:84:cd:04: d6:d1:df:16:16:28:6c:a7:c1:4c:9d:0f:a4:5f:ef: cb:15:52:1e:81:b7:7f:95:e3:87:1b:96:d9:43:86: 2a:18:c0:d8:87:6a:74:8f:b5:74:b3:31:52:b3:66: 16:01:5e:62:20:ca:30:6b:b5:f9:a6:fc:41:41:d8: 8b:02:c6:13:7e:95:1c:db:a3:b6:db:20:09:2e:45: 16:6c:00:54:a2:52:95:ee:15:48:bb:ab:a3:81:ab: 88:29:f0:ab:41:c1:0b:ff:79:76:9c:5d:a7:7e:03: 02:85:5e:9c:f5:87:94:dc:a6:47:1e:21:4a:e3:d2: c9:a2:d4:33:69:ba:e2:78:6b:78:59:eb:06:89:8c: 85:bc:94:9e:3e:24:2a:b3:e6:b3:53:ca:8a:31:22: 04:80:30:ba:05:4c:80:9d:e4:c0:de:29:e4:d8:65: 93:93:03:d5:0a:69:18:c8:a5:cb:17:be:ce:b4:87: 15:d9:8c:26:13:2d:2c:23:56:55:1b:f5:26:3e:a0: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:84:45:7E:4F:C8:72:0B:71:F3:C8:8B:05:AC:FD:CD:1C:39:CA:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9fb4780-c0dc-3a96-9e10-7a9f1ae6af40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.202.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:96:47:3e:3d:0c:01:f9:52:16:0b:e1:17:b7:b0:96:0b:20: a9:df:d6:f4:ab:94:72:b0:57:1a:35:c6:19:90:23:2d:a4:b8: be:5d:f0:b3:a2:aa:4a:ee:a4:00:02:4a:36:77:83:21:b7:ad: e3:31:7e:57:e9:0e:60:fb:8e:cc:ea:09:39:7c:10:fe:a3:b7: c6:8e:3a:42:f0:cc:e8:93:a2:19:0c:dc:8f:4b:bd:25:76:d6: 52:47:98:33:15:68:33:ed:b9:47:0c:dc:d8:a5:40:84:18:b1: 43:5c:42:0e:b8:42:47:05:6f:83:ae:ba:d3:ac:d1:a8:cf:21: 4b:b2:0f:2e:f6:84:22:91:76:e9:42:71:59:db:66:e6:fb:bb: 9c:0e:fe:14:f3:8a:f2:ec:df:5d:c1:5d:be:18:0c:9b:91:de: 14:43:c5:01:ce:e9:1b:db:38:52:a0:e9:6d:c7:2f:17:a3:3f: 75:06:a9:c7:6b:90:07:4d:5f:af:f5:fd:f6:ae:b9:0b:52:8b: 62:e7:e9:06:15:41:8c:3c:a5:06:d9:6e:9c:10:aa:2f:65:e9: dd:65:e3:e2:d5:71:43:ab:d1:7c:fc:62:9d:0a:e0:ce:ad:11: 3b:40:f6:ab:85:3a:59:3b:24:f8:25:c6:b3:81:d0:42:9b:30: a6:89:3d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9ptO3SR3tnkWWTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTI5MjJhNDMtODM4My00ZmUxLWJjZWQtMDlhNDc0NDczYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwYvXfnbGfmz69nxDTvJZ8UuwxM3KBA94WpR tRIki0LVqQDY+u5TsIoGzqA/c5aK8BAfq4RzAiGEzQTW0d8WFihsp8FMnQ+kX+/L FVIegbd/leOHG5bZQ4YqGMDYh2p0j7V0szFSs2YWAV5iIMowa7X5pvxBQdiLAsYT fpUc26O22yAJLkUWbABUolKV7hVIu6ujgauIKfCrQcEL/3l2nF2nfgMChV6c9YeU 3KZHHiFK49LJotQzabrieGt4WesGiYyFvJSePiQqs+azU8qKMSIEgDC6BUyAneTA 3ink2GWTkwPVCmkYyKXLF77OtIcV2YwmEy0sI1ZVG/UmPqDJcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCERX5PyHILcfPIiwWs/c0cOcrTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTlmYjQ3ODAtYzBkYy0z YTk2LTllMTAtN2E5ZjFhZTZhZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMspGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+WRz49DAH5UhYL4Re3sJYLIKnf1vSrlHKwVxo1xhmQIy2kuL5d8LOi qkrupAACSjZ3gyG3reMxflfpDmD7jszqCTl8EP6jt8aOOkLwzOiTohkM3I9LvSV2 1lJHmDMVaDPtuUcM3NilQIQYsUNcQg64QkcFb4OuutOs0ajPIUuyDy72hCKRdulC cVnbZub7u5wO/hTzivLs313BXb4YDJuR3hRDxQHO6RvbOFKg6W3HLxejP3UGqcdr kAdNX6/1/fauuQtSi2Ln6QYVQYw8pQbZbpwQqi9l6d1l4+LVcUOr0Xz8Yp0K4M6t ETtA9quFOlk7JPglxrOB0EKbMKaJPZI= -----END CERTIFICATE-----Generated at Mon Apr 28 01:58:26 2025 by rpki-client