$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa File: 1f6da251-413c-3667-8773-4dc6a9dda959.roa (raw, json) Hash identifier: de7BHuSX6EVE4MZt7JL6dsQrkFjbuzX9UrCZKTanReQ= Subject key identifier: 1F:87:A6:03:F6:01:1B:2A:9C:B4:83:2A:5A:FE:16:1C:15:B5:A5:C2 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285849403944990466B8E653909E40 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 29802 IP address blocks: 192.211.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:44:99:04:66:b8:e6:53:90:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=1cb99e83-46e4-44fa-800a-c5a51dc42a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:4b:5f:2f:02:50:92:3b:15:dc:ad:e9:38: 61:0e:52:ab:9c:8a:bc:8d:22:0b:e3:56:37:48:d4: 26:ee:fe:1a:11:7c:75:2b:f9:79:3c:83:85:13:60: 6e:f7:8c:3d:6e:21:f8:de:8f:d1:cd:32:e2:fd:89: 4e:30:a5:27:fb:e1:85:33:8e:51:6c:bb:16:87:95: 04:e0:a2:f6:37:89:3e:93:7f:1e:e9:ac:0d:2c:cb: e9:b1:35:11:bc:db:63:06:ac:6f:db:39:04:71:cd: ae:76:ae:32:45:ac:22:6d:d1:1c:77:d4:f2:2b:c1: 48:11:2d:02:5e:86:35:45:e1:ce:cd:aa:c3:15:7f: 33:a4:67:95:43:bf:28:05:04:0f:cc:b8:d5:7e:fe: b3:f1:7e:78:27:ec:c2:bb:54:6b:0b:31:62:bb:8a: c9:0c:f6:c8:6b:49:f6:48:7f:f0:30:d6:0c:5b:cb: b2:ae:7c:28:a4:e5:10:51:38:16:f2:9f:64:b4:b9: 07:f0:b5:66:a6:18:00:f0:88:a2:72:ab:84:d0:83: af:fd:e9:54:37:05:7d:55:5f:12:cf:a1:28:82:53: d0:bd:b8:16:cc:5c:26:c9:02:4b:4a:d9:ee:f0:77: ba:08:7b:43:ff:b0:0f:37:3c:59:5b:10:1b:b4:1d: 1a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:87:A6:03:F6:01:1B:2A:9C:B4:83:2A:5A:FE:16:1C:15:B5:A5:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 192.211.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e4:1d:69:56:97:61:d6:13:55:2b:83:7c:49:ba:22:f4:c9: cf:41:76:96:44:f8:89:9c:02:d7:fe:86:93:53:e5:d3:f6:bd: 12:dd:22:95:4c:08:b3:21:05:43:d4:47:cb:5d:d7:51:fd:6e: 7d:51:1a:11:df:3b:bf:07:27:59:df:8b:f0:a5:06:f1:08:7d: 72:7a:50:3d:91:e8:79:f0:9a:80:33:51:10:4a:9b:1d:7f:00: 2d:d3:4e:5b:cb:bc:c5:e2:6c:3b:be:b5:84:d2:a5:69:9b:aa: ec:a2:96:6f:69:45:fe:ff:52:71:1b:19:4d:45:62:ee:8f:11: a4:e8:87:e6:9a:12:98:bd:d7:67:3e:e0:cf:9d:8a:cf:80:ba: 13:8d:eb:2e:47:47:2e:19:46:9a:dd:06:61:f4:7b:a5:0b:14: ac:92:ad:93:1e:6c:12:44:32:e7:d2:85:b5:1e:63:85:73:9f: 2c:f2:8a:a9:d9:65:0c:d1:78:1f:f2:58:ab:c6:5c:38:ab:8e: a8:dd:45:73:da:c8:71:76:38:96:5a:d1:b4:da:f4:b2:27:d1: aa:40:37:40:e7:46:9c:c0:c4:d6:63:d3:a5:0f:84:61:40:88: 2d:05:3b:8c:8c:62:f1:d0:9a:f4:d4:f3:cc:30:8e:a5:89:ab: da:a9:84:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUSZBGa45lOQnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MWNiOTllODMtNDZlNC00NGZhLTgwMGEtYzVhNTFkYzQyYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19pLXy8CUJI7Fdyt6ThhDlKrnIq8jSIL41Y3 SNQm7v4aEXx1K/l5PIOFE2Bu94w9biH43o/RzTLi/YlOMKUn++GFM45RbLsWh5UE 4KL2N4k+k38e6awNLMvpsTURvNtjBqxv2zkEcc2udq4yRawibdEcd9TyK8FIES0C XoY1ReHOzarDFX8zpGeVQ78oBQQPzLjVfv6z8X54J+zCu1RrCzFiu4rJDPbIa0n2 SH/wMNYMW8uyrnwopOUQUTgW8p9ktLkH8LVmphgA8IiicquE0IOv/elUNwV9VV8S z6EoglPQvbgWzFwmyQJLStnu8He6CHtD/7APNzxZWxAbtB0akQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+HpgP2ARsqnLSDKlr+FhwVtaXCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWY2ZGEyNTEtNDEzYy0z NjY3LTg3NzMtNGRjNmE5ZGRhOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwNMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLkHWlWl2HWE1Urg3xJuiL0yc9BdpZE+ImcAtf+hpNT5dP2vRLdIpVM CLMhBUPUR8td11H9bn1RGhHfO78HJ1nfi/ClBvEIfXJ6UD2R6HnwmoAzURBKmx1/ AC3TTlvLvMXibDu+tYTSpWmbquyilm9pRf7/UnEbGU1FYu6PEaToh+aaEpi912c+ 4M+dis+AuhON6y5HRy4ZRprdBmH0e6ULFKySrZMebBJEMufShbUeY4VznyzyiqnZ ZQzReB/yWKvGXDirjqjdRXPayHF2OJZa0bTa9LIn0apAN0DnRpzAxNZj06UPhGFA iC0FO4yMYvHQmvTU88wwjqWJq9qphJc= -----END CERTIFICATE-----Generated at Sat Apr 26 18:08:28 2025 by rpki-client