$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8571e90-af09-3def-ae7f-0a9c0bd15b36.roa File: d8571e90-af09-3def-ae7f-0a9c0bd15b36.roa (raw, json) Hash identifier: siBVPNo8xNJrRiN1ryxd0t7bJxBaL/bh1JqtuP6g8dg= Subject key identifier: 03:3D:F8:B2:1B:A4:07:AF:85:F9:EF:1A:72:43:34:01:4B:DD:58:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5069BAE4EB28765419580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8571e90-af09-3def-ae7f-0a9c0bd15b36.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33668 IP address blocks: 50.202.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:06:9b:ae:4e:b2:87:65:41:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=4ea340e9-660e-4e01-bb52-a833f498aeaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9e:16:4a:fc:a2:24:07:a2:73:fa:33:58:da: 3d:5b:99:94:79:b4:f9:0e:7c:e0:1e:38:2c:df:ed: ab:46:93:4c:30:cb:9a:8e:87:af:a9:58:e2:5b:a7: 82:c8:fa:a1:b7:53:4f:3b:97:3c:92:30:86:7a:28: 84:af:4c:28:89:2d:6e:74:d7:fc:3d:22:71:bb:2e: d2:b5:17:03:87:de:4c:2b:c8:b4:88:b3:07:b6:b5: ee:7d:b5:a3:69:6c:db:df:41:02:d1:49:bf:9d:07: 67:ac:e7:9b:ef:85:fd:01:c2:fa:5c:f4:98:05:91: e8:fc:51:48:ac:95:a2:dd:09:be:6d:ec:11:e2:91: 11:e9:88:ca:72:c9:a8:18:dd:be:48:82:9c:1f:50: a2:19:a8:83:dc:cb:4f:43:cc:9e:47:b5:35:3b:ff: 21:41:b8:c4:e4:e3:66:79:57:ee:70:3b:47:12:b9: ab:13:4f:74:bc:c2:04:2c:41:0d:a5:9b:13:6c:c1: 3a:d2:91:e0:7c:8f:3e:ff:6a:e5:5f:73:55:41:af: 0f:6f:ad:7b:47:ac:0a:95:8c:65:20:4a:6e:00:49: 16:aa:fe:af:6c:90:63:71:d4:97:02:8f:96:a6:08: ab:86:5a:ff:a9:86:07:a1:98:71:68:49:ed:d4:0d: 20:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3D:F8:B2:1B:A4:07:AF:85:F9:EF:1A:72:43:34:01:4B:DD:58:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8571e90-af09-3def-ae7f-0a9c0bd15b36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.202.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:76:a4:2a:e8:7f:6c:39:f1:03:04:8e:a5:27:1c:b3:c9:b2: f4:b5:f9:36:7c:bd:12:3f:3f:4e:86:a1:da:9d:75:f1:8a:47: 09:4c:b3:25:53:53:42:91:c9:f8:6b:8f:ad:e5:54:71:52:76: 65:fc:dd:cf:4b:47:a9:8f:d3:3c:8f:9b:88:87:12:80:b1:84: 35:7c:ca:8e:92:d0:e3:cd:5a:2e:6e:61:85:4b:95:8d:54:4a: e9:c1:1c:d6:07:56:f5:62:80:b0:e0:c7:cd:f7:ee:30:9d:6f: ee:65:88:05:ca:69:3a:0e:6a:12:31:56:41:10:30:19:cb:0f: 66:91:0d:50:73:4b:e5:23:e5:3c:b9:f2:7b:97:ac:e7:2f:f4: 26:c9:65:be:f8:dd:ec:71:5f:bb:43:61:68:5a:7c:cd:23:4a: ff:7a:a4:be:4f:a3:85:e4:6e:da:4d:3d:15:fc:16:f2:65:44: dd:ca:d2:36:fd:b4:0f:93:88:3a:d2:44:bd:4b:3f:0b:76:0c: 2c:08:dd:c9:e4:a0:c2:dc:44:55:0a:00:0e:8d:68:0e:26:ab: 07:78:7a:70:9b:78:b1:3d:c2:e1:aa:27:d4:14:b2:a0:90:80: 7d:b9:86:f6:90:7f:27:b7:a2:ab:f4:31:7a:47:66:b5:20:0e: ac:f7:08:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pQabrk6yh2VBlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NGVhMzQwZTktNjYwZS00ZTAxLWJiNTItYTgzM2Y0OThhZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ4WSvyiJAeic/ozWNo9W5mUebT5DnzgHjgs 3+2rRpNMMMuajoevqVjiW6eCyPqht1NPO5c8kjCGeiiEr0woiS1udNf8PSJxuy7S tRcDh95MK8i0iLMHtrXufbWjaWzb30EC0Um/nQdnrOeb74X9AcL6XPSYBZHo/FFI rJWi3Qm+bewR4pER6YjKcsmoGN2+SIKcH1CiGaiD3MtPQ8yeR7U1O/8hQbjE5ONm eVfucDtHErmrE090vMIELEENpZsTbME60pHgfI8+/2rlX3NVQa8Pb617R6wKlYxl IEpuAEkWqv6vbJBjcdSXAo+Wpgirhlr/qYYHoZhxaEnt1A0g6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAM9+LIbpAevhfnvGnJDNAFL3VjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDg1NzFlOTAtYWYwOS0z ZGVmLWFlN2YtMGE5YzBiZDE1YjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMsp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJ2pCrof2w58QMEjqUnHLPJsvS1+TZ8vRI/P06GodqddfGKRwlMsyVT U0KRyfhrj63lVHFSdmX83c9LR6mP0zyPm4iHEoCxhDV8yo6S0OPNWi5uYYVLlY1U SunBHNYHVvVigLDgx8337jCdb+5liAXKaToOahIxVkEQMBnLD2aRDVBzS+Uj5Ty5 8nuXrOcv9CbJZb743exxX7tDYWhafM0jSv96pL5Po4XkbtpNPRX8FvJlRN3K0jb9 tA+TiDrSRL1LPwt2DCwI3cnkoMLcRFUKAA6NaA4mqwd4enCbeLE9wuGqJ9QUsqCQ gH25hvaQfye3oqv0MXpHZrUgDqz3CDA= -----END CERTIFICATE-----Generated at Mon Apr 28 00:32:03 2025 by rpki-client