$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6996aeb-64c2-302a-a41a-e255d12a2451.roa File: b6996aeb-64c2-302a-a41a-e255d12a2451.roa (raw, json) Hash identifier: TYfkEogVp/rIxJqH6fQ5V5vAKmsuywMzDSI0Nhp+s70= Subject key identifier: 34:4A:6D:17:2C:C9:CC:45:36:C7:88:19:B5:C5:94:1C:26:F0:6B:0C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4CF3A1FFA84E29DD23C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6996aeb-64c2-302a-a41a-e255d12a2451.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 21508 IP address blocks: 50.219.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:cf:3a:1f:fa:84:e2:9d:d2:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=98e9b3dd-4248-461f-a61b-095ae75034b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:3c:2e:58:71:55:c3:8b:4a:3a:5a:be:54: f7:db:34:b2:02:a3:5a:bc:ef:22:80:ba:1b:48:a8: 0e:4a:bf:dc:19:8d:d8:76:a3:ee:05:7c:52:b8:cf: 57:31:cb:ea:54:c4:ba:ae:07:6b:ae:39:e3:83:e9: c9:8a:94:4f:6b:9d:c2:0d:d4:a3:8d:fb:73:0a:97: c7:86:8c:65:86:1b:e1:1e:b1:82:78:69:33:74:92: a1:57:01:e9:91:86:25:b2:82:91:c9:06:89:87:98: 52:57:20:13:ea:7c:a4:56:54:5f:83:d5:d5:b1:7b: 6f:bc:bd:a5:80:dc:e6:eb:4e:b9:65:81:01:88:07: f1:2d:1a:db:24:aa:82:2d:bc:52:4a:c8:2e:82:4c: d1:7e:71:52:a4:9b:4a:8b:e1:80:d3:da:45:ab:63: d0:50:84:d2:3a:9c:44:d4:6e:ad:4a:48:e6:ba:64: 88:4e:53:32:2e:18:20:c1:11:34:e2:bd:a4:81:cf: eb:c5:9c:38:31:6c:96:01:3d:98:d8:88:61:4f:d8: f0:50:be:65:71:35:6b:de:5a:66:27:00:b0:35:0b: 8a:2c:49:b8:06:ee:43:95:5c:f9:09:fe:19:76:04: 0c:5b:ee:01:21:35:f8:95:78:d5:a7:52:d7:3c:11: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4A:6D:17:2C:C9:CC:45:36:C7:88:19:B5:C5:94:1C:26:F0:6B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6996aeb-64c2-302a-a41a-e255d12a2451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.219.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:88:64:ec:2c:f5:f3:b9:d1:32:30:51:73:3e:7d:fa:38:36: e2:94:41:a9:23:49:ce:af:55:15:ec:6e:28:3b:95:b5:fe:d5: 3c:d2:c3:74:27:5b:74:66:6b:df:49:40:6e:00:54:cf:0e:8b: 99:94:d5:75:6e:c0:de:ed:de:cf:7a:0a:34:17:37:a6:94:a5: 99:29:71:c6:dc:c1:f3:e7:ac:df:25:9e:f9:e5:4c:18:e4:74: 0c:3f:8f:a4:b6:39:31:50:95:7c:52:f6:a5:bc:a0:0a:d2:6c: 68:25:98:a7:fc:49:e4:3a:02:2e:dd:9e:c1:0c:b6:72:98:f6: 50:a3:f4:a3:ce:14:a8:6b:f4:66:e7:6f:cd:fc:4c:33:38:b5: 1c:68:b2:16:4b:d2:64:0c:54:8a:e2:78:a8:86:9b:41:39:57: 5a:55:19:00:97:d8:e3:77:42:1e:4f:03:12:de:f6:cc:fc:fc: 3c:15:83:91:c1:9c:79:e2:3b:93:76:3e:f8:c9:a3:5e:a3:0a: 3c:54:0c:2d:46:43:0c:9b:82:e5:f6:5a:41:a9:14:9f:47:28: 38:28:68:0e:89:90:6a:a9:06:78:31:82:fc:b3:8d:10:3b:41: 60:c2:2e:d1:49:3e:10:d7:0a:78:73:3f:0e:a6:b7:f5:31:fa: b1:b1:a4:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pM86H/qE4p3SPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk OThlOWIzZGQtNDI0OC00NjFmLWE2MWItMDk1YWU3NTAzNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLw8LlhxVcOLSjpavlT32zSyAqNavO8igLob SKgOSr/cGY3YdqPuBXxSuM9XMcvqVMS6rgdrrjnjg+nJipRPa53CDdSjjftzCpfH hoxlhhvhHrGCeGkzdJKhVwHpkYYlsoKRyQaJh5hSVyAT6nykVlRfg9XVsXtvvL2l gNzm6065ZYEBiAfxLRrbJKqCLbxSSsgugkzRfnFSpJtKi+GA09pFq2PQUITSOpxE 1G6tSkjmumSITlMyLhggwRE04r2kgc/rxZw4MWyWAT2Y2IhhT9jwUL5lcTVr3lpm JwCwNQuKLEm4Bu5DlVz5Cf4ZdgQMW+4BITX4lXjVp1LXPBGz2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRKbRcsycxFNseIGbXFlBwm8GsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY5OTZhZWItNjRjMi0z MDJhLWE0MWEtZTI1NWQxMmEyNDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMtvlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOIZOws9fO50TIwUXM+ffo4NuKUQakjSc6vVRXsbig7lbX+1TzSw3Qn W3Rma99JQG4AVM8Oi5mU1XVuwN7t3s96CjQXN6aUpZkpccbcwfPnrN8lnvnlTBjk dAw/j6S2OTFQlXxS9qW8oArSbGglmKf8SeQ6Ai7dnsEMtnKY9lCj9KPOFKhr9Gbn b838TDM4tRxoshZL0mQMVIrieKiGm0E5V1pVGQCX2ON3Qh5PAxLe9sz8/DwVg5HB nHniO5N2PvjJo16jCjxUDC1GQwybguX2WkGpFJ9HKDgoaA6JkGqpBngxgvyzjRA7 QWDCLtFJPhDXCnhzPw6mt/Ux+rGxpPg= -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:11 2025 by rpki-client