$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a00b4b-6270-38d2-bf61-1785422a400c.roa File: d3a00b4b-6270-38d2-bf61-1785422a400c.roa (raw, json) Hash identifier: YhAbObcH9FoOxJghQHcHPTgxIeA4APpw7iyE6Pdg56M= Subject key identifier: 03:9E:C7:62:FC:C5:A1:D0:7B:0B:B9:75:EE:8A:D9:C8:1F:E1:CC:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6E199D09DF66982BB2080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a00b4b-6270-38d2-bf61-1785422a400c.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 395691 IP address blocks: 50.234.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:e1:99:d0:9d:f6:69:82:bb:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=293b3a35-9eb9-45c4-95c1-28a14e9e9dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0f:68:e6:72:c5:68:c6:59:95:1c:7a:c1:6c: f0:55:85:7f:93:13:07:c5:0f:76:2a:2c:9c:b6:fd: 15:b6:02:0b:7c:5d:69:24:61:72:3b:50:85:2a:6f: 62:7f:f3:48:74:2a:14:f9:17:7e:d1:c9:7d:ef:a1: 0c:a6:4d:59:70:8e:69:2a:43:81:90:98:bf:94:e3: bb:ad:91:8b:ec:04:99:a0:4d:fd:05:2d:69:c5:d0: 3e:0e:76:40:ac:9e:b0:2a:8a:e9:7f:eb:bc:70:95: 0c:37:c8:a1:f2:57:a4:cc:f6:95:74:c5:f8:1a:9c: 8b:23:aa:0c:0a:b4:96:ab:92:8c:f9:bb:1f:63:93: 03:fd:00:c4:23:4b:ae:2a:6f:bb:f4:23:42:08:4e: ad:0b:ab:94:fe:08:4b:8e:3d:67:6e:aa:39:b8:35: 87:ce:c0:72:f4:48:47:30:02:d9:54:1d:89:e1:29: 7f:fe:38:53:51:c2:50:ec:04:b1:3d:7c:71:45:47: a1:7f:6c:57:5f:a8:1b:27:d3:48:0b:9b:90:02:0c: dd:71:cc:41:54:fe:de:59:23:cc:69:90:c5:5e:47: d0:c7:65:45:94:b7:10:27:61:25:33:51:09:38:59: 7c:2f:34:88:e3:6c:37:29:19:d2:ab:57:dc:30:61: dc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:C7:62:FC:C5:A1:D0:7B:0B:B9:75:EE:8A:D9:C8:1F:E1:CC:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a00b4b-6270-38d2-bf61-1785422a400c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.234.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:91:56:9e:2c:f8:69:62:37:54:f0:2b:99:83:7a:3c:58:ed: a1:58:99:ab:1a:c9:b0:42:85:82:71:1a:ae:d9:95:34:1b:ea: 73:e9:44:90:93:f6:a9:79:6c:3d:db:dc:3e:cf:79:35:c3:43: 0d:1b:49:bc:44:5b:96:49:17:48:8e:b7:0e:b3:3c:5d:55:c6: fd:c8:b0:54:60:ee:7d:c8:f3:5c:21:ca:16:66:2d:60:3c:10: de:55:b1:80:62:f2:1b:6f:05:6b:fa:19:f6:86:ec:fc:86:bf: f7:6e:f2:49:23:4e:38:64:f1:04:e8:6e:1b:ba:96:34:e1:c9: cd:fe:4d:c4:c7:0b:24:70:15:d7:4a:56:a6:3c:f4:05:48:00: bc:28:65:6f:4c:97:54:61:13:7d:33:4e:24:82:3e:49:21:3c: 97:85:1e:24:c1:b5:f7:25:21:4b:59:e0:77:80:ad:67:a8:28: d8:e5:cc:f0:6f:06:e8:b1:91:bd:89:f4:71:95:44:e2:b4:e9: 4f:87:9f:36:76:9c:e9:0a:2c:18:f5:5e:3f:e4:95:8e:90:1f: 95:ab:a3:a4:0f:35:ed:63:06:5a:a3:fe:c1:43:19:78:75:42: aa:78:6f:d7:61:15:a5:c0:7c:d9:a7:7f:4d:55:f8:9a:7d:cc: bf:92:a2:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9puGZ0J32aYK7IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjkzYjNhMzUtOWViOS00NWM0LTk1YzEtMjhhMTRlOWU5ZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA9o5nLFaMZZlRx6wWzwVYV/kxMHxQ92Kiyc tv0VtgILfF1pJGFyO1CFKm9if/NIdCoU+Rd+0cl976EMpk1ZcI5pKkOBkJi/lOO7 rZGL7ASZoE39BS1pxdA+DnZArJ6wKorpf+u8cJUMN8ih8lekzPaVdMX4GpyLI6oM CrSWq5KM+bsfY5MD/QDEI0uuKm+79CNCCE6tC6uU/ghLjj1nbqo5uDWHzsBy9EhH MALZVB2J4Sl//jhTUcJQ7ASxPXxxRUehf2xXX6gbJ9NIC5uQAgzdccxBVP7eWSPM aZDFXkfQx2VFlLcQJ2ElM1EJOFl8LzSI42w3KRnSq1fcMGHcQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOex2L8xaHQewu5de6K2cgf4cy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNhMDBiNGItNjI3MC0z OGQyLWJmNjEtMTc4NTQyMmE0MDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuqSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeRVp4s+GliN1TwK5mDejxY7aFYmasaybBChYJxGq7ZlTQb6nPpRJCT 9ql5bD3b3D7PeTXDQw0bSbxEW5ZJF0iOtw6zPF1Vxv3IsFRg7n3I81whyhZmLWA8 EN5VsYBi8htvBWv6GfaG7PyGv/du8kkjTjhk8QTobhu6ljThyc3+TcTHCyRwFddK VqY89AVIALwoZW9Ml1RhE30zTiSCPkkhPJeFHiTBtfclIUtZ4HeArWeoKNjlzPBv Buixkb2J9HGVROK06U+HnzZ2nOkKLBj1Xj/klY6QH5Wro6QPNe1jBlqj/sFDGXh1 Qqp4b9dhFaXAfNmnf01V+Jp9zL+SopY= -----END CERTIFICATE-----Generated at Sun Apr 27 11:29:50 2025 by rpki-client