$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa95645b-c8ee-33d5-a8b3-d15f4c13d941.roa File: fa95645b-c8ee-33d5-a8b3-d15f4c13d941.roa (raw, json) Hash identifier: oapaAH2JXu1oB3sPs1pZZ5qrx5zS6orNBG+h1Czs8DI= Subject key identifier: 59:BE:92:B7:4D:F6:D6:C3:16:DF:B6:E7:18:6E:48:B9:4F:6A:1C:EA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4F4B774A12D7E35946500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa95645b-c8ee-33d5-a8b3-d15f4c13d941.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33660 IP address blocks: 50.168.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:f4:b7:74:a1:2d:7e:35:94:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=24e447e9-d7a0-49ff-8ac0-5cfc8b199bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ce:30:0e:9f:8c:4e:c6:7e:c3:74:24:09:54: 1a:fa:23:17:bf:38:80:c0:f1:31:46:77:e9:1e:88: ea:5b:4d:a9:93:2d:0a:79:b6:30:dc:c6:a7:64:ea: 89:5f:07:da:61:5f:4e:ea:90:2d:c5:84:ab:4d:65: 34:5d:1a:e4:af:a3:d9:1b:c6:20:a1:c7:d5:58:8f: dd:dc:62:e0:31:c6:66:9e:e0:7a:39:81:95:10:31: 89:8c:47:8c:64:fd:3d:bf:50:3f:7e:67:29:c6:22: 6a:5e:19:7c:fe:23:ef:4f:5b:d5:66:91:3d:a5:a1: aa:f5:0d:80:fc:3c:42:48:69:aa:e0:9a:01:e5:cc: 4e:9b:eb:a9:52:67:f0:cb:50:5f:2c:90:8f:35:2a: 18:e3:3e:82:b6:4f:52:ee:54:bf:26:c2:25:09:20: 06:38:4f:14:b3:a0:44:33:45:0e:1b:0f:f4:4c:ab: 2a:7c:10:24:35:b6:07:3f:5a:26:76:d5:e5:d8:1e: 86:5d:2a:11:45:76:8b:d8:7b:82:86:51:c4:8d:52: 99:a2:c9:e5:bb:1a:41:8a:db:37:85:d2:d6:0b:75: e4:31:dd:0e:6d:5e:89:ce:aa:f6:e7:d2:4f:72:5c: 08:67:b3:fb:69:4a:e0:fd:d2:88:03:da:7f:cf:d9: ff:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BE:92:B7:4D:F6:D6:C3:16:DF:B6:E7:18:6E:48:B9:4F:6A:1C:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa95645b-c8ee-33d5-a8b3-d15f4c13d941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.168.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:84:6f:47:df:6d:5f:89:de:e3:91:60:ca:4b:fe:8a:2a:9e: 1e:e3:ca:c7:50:b8:33:8d:00:9b:bf:87:23:8c:98:c4:3a:b6: 7d:2a:f3:89:87:59:7b:9d:e0:33:e7:9e:0c:31:95:a2:bb:e2: 2c:c4:79:6a:70:49:1e:6a:64:63:ec:48:30:65:74:70:51:a1: ca:e2:ed:2a:e2:c2:c9:de:46:9b:20:30:f7:e1:7c:33:4b:25: 23:e3:21:56:a1:75:e0:7e:ff:1c:e7:97:19:2f:5b:48:57:c5: 1f:0e:99:88:59:da:35:d9:b1:fb:81:0b:54:26:10:f7:86:05: 3c:8b:ad:b9:bc:a2:de:44:07:9e:7a:0b:fa:fe:b0:25:16:54: 4c:a0:e2:64:0b:68:e7:2e:df:f9:57:a0:16:4c:f0:78:d9:43: 84:76:74:58:d3:73:d0:f1:1a:76:7e:e3:d9:8b:05:c2:33:c3: cd:d7:4d:6c:58:2b:00:27:b2:a1:f0:ec:6c:03:95:34:22:67: d5:c0:b3:d4:51:ca:31:e4:61:ba:67:f5:5f:ac:46:8a:7b:83: ec:09:6d:68:3c:48:4a:14:e5:7e:28:bb:19:cf:46:8f:a6:e1: 00:8a:40:49:fa:67:29:33:82:ee:b2:35:49:fc:54:d7:82:e3: 17:c9:fc:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pPS3dKEtfjWUZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjRlNDQ3ZTktZDdhMC00OWZmLThhYzAtNWNmYzhiMTk5YmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos4wDp+MTsZ+w3QkCVQa+iMXvziAwPExRnfp HojqW02pky0KebYw3ManZOqJXwfaYV9O6pAtxYSrTWU0XRrkr6PZG8YgocfVWI/d 3GLgMcZmnuB6OYGVEDGJjEeMZP09v1A/fmcpxiJqXhl8/iPvT1vVZpE9paGq9Q2A /DxCSGmq4JoB5cxOm+upUmfwy1BfLJCPNSoY4z6Ctk9S7lS/JsIlCSAGOE8Us6BE M0UOGw/0TKsqfBAkNbYHP1omdtXl2B6GXSoRRXaL2HuChlHEjVKZosnluxpBits3 hdLWC3XkMd0ObV6Jzqr259JPclwIZ7P7aUrg/dKIA9p/z9n/qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFm+krdN9tbDFt+25xhuSLlPahzqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmE5NTY0NWItYzhlZS0z M2Q1LWE4YjMtZDE1ZjRjMTNkOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMqhCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqEb0ffbV+J3uORYMpL/ooqnh7jysdQuDONAJu/hyOMmMQ6tn0q84mH WXud4DPnngwxlaK74izEeWpwSR5qZGPsSDBldHBRocri7SriwsneRpsgMPfhfDNL JSPjIVahdeB+/xznlxkvW0hXxR8OmYhZ2jXZsfuBC1QmEPeGBTyLrbm8ot5EB556 C/r+sCUWVEyg4mQLaOcu3/lXoBZM8HjZQ4R2dFjTc9DxGnZ+49mLBcIzw83XTWxY KwAnsqHw7GwDlTQiZ9XAs9RRyjHkYbpn9V+sRop7g+wJbWg8SEoU5X4ouxnPRo+m 4QCKQEn6Zykzgu6yNUn8VNeC4xfJ/G0= -----END CERTIFICATE-----Generated at Sun Apr 27 12:53:33 2025 by rpki-client