$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f433d20f-78cd-381b-aef0-3474333057b3.roa File: f433d20f-78cd-381b-aef0-3474333057b3.roa (raw, json) Hash identifier: z1CJOG/GpY01/r7r4y7B3dcxqSKdtNumlUTtnCWnmS4= Subject key identifier: 23:3D:6D:9B:E1:3D:05:F6:B8:83:D2:64:00:19:DB:0B:18:C2:C1:7A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858498CFF28CBD1D5DFBF87E30040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f433d20f-78cd-381b-aef0-3474333057b3.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 401312 IP address blocks: 50.223.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:28:cb:d1:d5:df:bf:87:e3:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=988ea5b9-db20-4530-a14b-87fd2f34567b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:0d:ab:95:4a:95:7a:9e:ec:bf:2c:a4:c0: c1:e8:42:7e:38:6f:74:79:46:3f:c8:39:16:98:1e: a2:5a:25:de:fe:ef:69:98:61:84:50:36:ae:5c:70: eb:9d:e8:4c:6e:ff:88:49:40:a8:2e:90:df:e0:66: c6:8e:fa:de:64:e9:e8:8f:c8:ba:9a:64:15:5f:b3: dd:4f:b1:2a:f3:a0:a3:c1:4b:69:58:c9:f8:a8:58: fc:e9:2e:77:04:02:79:73:0e:cf:dc:f0:fc:6e:a7: 45:55:72:44:b5:e4:ac:dd:f4:e8:cc:95:cd:f0:13: 49:36:ce:d8:8c:62:6d:dd:59:bc:50:75:94:58:53: d3:c3:54:4b:0e:f2:39:f5:26:fb:8b:a9:7d:fc:e4: 24:0e:cd:32:fd:7c:f1:04:6b:fe:f8:c7:32:7c:33: 3c:1c:7c:f9:57:90:c5:4c:57:7b:e9:d6:36:b9:f4: 95:6d:24:ba:33:3b:94:4d:95:cb:60:a1:92:68:d6: 50:52:b9:3a:ae:94:5b:44:17:14:a3:97:d0:fb:c3: 11:34:bc:9a:0a:f4:91:fc:81:7d:a8:fa:ae:14:ef: 22:ba:5e:75:36:b2:af:62:f7:ff:f8:f5:45:78:ff: 97:53:0b:1e:1b:7d:16:d5:9b:5d:00:62:ac:ac:54: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3D:6D:9B:E1:3D:05:F6:B8:83:D2:64:00:19:DB:0B:18:C2:C1:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f433d20f-78cd-381b-aef0-3474333057b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.223.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ef:fa:b9:96:1a:44:71:ec:62:18:00:ff:b4:14:0e:c1:15: 00:d0:4a:1d:86:29:08:49:4e:7a:bd:b0:64:24:a7:3c:c7:78: 26:09:0c:e6:24:bb:5b:af:79:44:45:23:8d:5a:74:ee:1a:02: cc:a9:d7:69:ac:c3:74:6e:98:ec:af:60:8a:06:b5:de:ef:53: 0b:a5:0a:fb:50:e5:93:4a:4f:81:9d:0d:c2:c6:1e:ba:1d:a9: 86:01:3d:35:93:e0:f5:b2:64:a4:77:36:36:70:4d:1f:d3:68: cb:72:a3:7a:a6:c6:04:26:b7:74:82:38:f0:b7:8a:f9:40:a3: ed:bc:48:d5:02:69:9a:ef:69:98:74:be:a1:5c:58:ae:63:b3: 14:b0:0a:e7:c0:2b:e0:ec:1a:4d:82:34:bc:9d:72:f6:27:2f: e0:c8:35:20:e5:28:31:4e:02:1f:00:88:ef:52:01:92:87:e7: 98:30:89:0c:d7:94:fa:fa:4c:4d:25:3c:aa:a8:62:b7:3c:8f: 51:8e:19:59:84:58:95:68:cc:50:7d:bb:40:a6:fa:19:29:cd: 5b:4a:25:75:0c:7d:79:15:ec:25:a2:05:db:c7:33:48:0a:db: e9:7f:6b:f1:d3:05:b3:bb:ed:5d:a8:48:3b:e2:bf:73:15:ed: a2:c5:d3:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/yjL0dXfv4fjAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OTg4ZWE1YjktZGIyMC00NTMwLWExNGItODdmZDJmMzQ1NjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzgNq5VKlXqe7L8spMDB6EJ+OG90eUY/yDkW mB6iWiXe/u9pmGGEUDauXHDrnehMbv+ISUCoLpDf4GbGjvreZOnoj8i6mmQVX7Pd T7Eq86CjwUtpWMn4qFj86S53BAJ5cw7P3PD8bqdFVXJEteSs3fTozJXN8BNJNs7Y jGJt3Vm8UHWUWFPTw1RLDvI59Sb7i6l9/OQkDs0y/XzxBGv++McyfDM8HHz5V5DF TFd76dY2ufSVbSS6MzuUTZXLYKGSaNZQUrk6rpRbRBcUo5fQ+8MRNLyaCvSR/IF9 qPquFO8iul51NrKvYvf/+PVFeP+XUwseG30W1ZtdAGKsrFTiPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM9bZvhPQX2uIPSZAAZ2wsYwsF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQzM2QyMGYtNzhjZC0z ODFiLWFlZjAtMzQ3NDMzMzA1N2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMt/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITv+rmWGkRx7GIYAP+0FA7BFQDQSh2GKQhJTnq9sGQkpzzHeCYJDOYk u1uveURFI41adO4aAsyp12msw3RumOyvYIoGtd7vUwulCvtQ5ZNKT4GdDcLGHrod qYYBPTWT4PWyZKR3NjZwTR/TaMtyo3qmxgQmt3SCOPC3ivlAo+28SNUCaZrvaZh0 vqFcWK5jsxSwCufAK+DsGk2CNLydcvYnL+DINSDlKDFOAh8AiO9SAZKH55gwiQzX lPr6TE0lPKqoYrc8j1GOGVmEWJVozFB9u0Cm+hkpzVtKJXUMfXkV7CWiBdvHM0gK 2+l/a/HTBbO77V2oSDviv3MV7aLF04E= -----END CERTIFICATE-----Generated at Mon Apr 28 03:25:53 2025 by rpki-client