$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa File: 2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa (raw, json) Hash identifier: FIxfe2Gg4PPCWEVU+tbTRCm6PQondRz/lJEUpldY0zY= Subject key identifier: 34:8D:64:FF:91:E6:EA:1B:B8:4F:76:79:65:4F:EE:A4:22:A7:10:38 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858494039445AAD63345839EF2980 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 29802 IP address blocks: 162.220.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:44:5a:ad:63:34:58:39:ef:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=5e783cf3-14ba-481b-8ca6-9b6c75b8c65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:21:76:9e:dd:31:dc:37:28:6b:03:84:d3:d4: 10:2f:24:e3:0c:a1:3e:b9:4f:34:a3:26:5c:d3:9d: c7:3d:8f:fc:aa:8e:eb:e4:25:85:5c:31:a1:72:ad: 63:81:2a:af:44:1d:46:d6:10:9d:48:08:5f:f6:f7: 30:6c:a6:35:ac:06:80:eb:d5:41:cd:91:30:57:af: fd:50:86:9d:9e:3a:e7:41:44:9e:ac:98:9c:8b:a5: 4c:c1:2d:aa:54:7f:ba:58:0d:e6:5f:f1:67:29:a4: f0:94:3d:d5:80:dc:ca:56:aa:40:dc:80:c0:d9:cd: 88:a1:f2:a0:90:fc:3c:a8:59:7b:cb:6d:56:85:31: 06:f3:39:c6:91:cc:ef:96:49:30:19:4a:c3:8b:0c: 82:16:f7:88:ce:7b:27:c6:f4:07:02:db:71:61:0f: 27:02:79:5b:42:fd:f4:56:76:fa:02:49:73:02:c3: f1:c1:f7:b2:77:19:35:53:dd:a8:f2:67:1a:39:02: 70:2a:c7:4f:c7:71:07:47:6e:64:90:4e:ce:6f:90: c9:f3:47:0e:e3:19:89:96:36:82:96:71:c5:79:02: 6a:ba:a5:5f:42:30:5b:ae:29:13:29:8e:0b:fa:af: 28:b5:77:e3:a5:4d:f7:a9:3d:99:bc:36:be:1c:5e: 74:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8D:64:FF:91:E6:EA:1B:B8:4F:76:79:65:4F:EE:A4:22:A7:10:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 162.220.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c8:52:62:ae:9b:26:e0:52:86:3a:53:cb:1c:1b:46:e2:3c: b5:21:1b:9c:bb:2d:08:88:06:41:cd:88:89:fd:c4:18:f3:ef: 10:d9:32:33:f8:69:c2:9f:1c:e0:81:17:14:cc:c7:12:af:bb: f2:a2:cb:ae:e9:f1:48:0f:1b:ab:d6:34:4f:6e:87:f6:76:e2: 63:99:f8:18:62:e3:d4:87:94:59:39:ec:e1:a2:88:a0:43:f1: cc:50:41:19:c0:a0:52:b5:d1:68:36:41:5b:46:3e:9f:eb:4c: b6:0b:9a:2e:5c:0a:4d:f8:59:c8:37:1a:dd:21:45:b9:a8:11: 26:b4:8a:ff:2b:ad:41:01:97:74:4b:0c:41:3e:41:17:f4:07: d5:09:fc:b7:ec:ad:41:b4:13:0d:e8:e6:3d:c5:b1:a5:d9:53: 61:d5:0b:54:72:09:c7:63:6a:dd:9a:6c:dc:7a:83:c4:ef:4d: 07:d7:56:de:e8:02:41:c1:7d:44:d6:f9:1d:25:fb:b4:c8:1d: 39:cc:bf:12:d3:16:3e:2e:0e:06:ce:03:38:77:b9:40:f2:60: b7:76:db:72:0b:fd:4f:dc:47:d3:87:fc:05:62:f3:ed:55:a0: be:d7:b8:f0:00:c0:37:8f:ee:a0:64:35:f1:75:94:b1:72:eb: e1:52:5b:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOURarWM0WDnvKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NWU3ODNjZjMtMTRiYS00ODFiLThjYTYtOWI2Yzc1YjhjNjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiF2nt0x3DcoawOE09QQLyTjDKE+uU80oyZc 053HPY/8qo7r5CWFXDGhcq1jgSqvRB1G1hCdSAhf9vcwbKY1rAaA69VBzZEwV6/9 UIadnjrnQUSerJici6VMwS2qVH+6WA3mX/FnKaTwlD3VgNzKVqpA3IDA2c2IofKg kPw8qFl7y21WhTEG8znGkczvlkkwGUrDiwyCFveIznsnxvQHAttxYQ8nAnlbQv30 Vnb6AklzAsPxwfeydxk1U92o8mcaOQJwKsdPx3EHR25kkE7Ob5DJ80cO4xmJljaC lnHFeQJquqVfQjBbrikTKY4L+q8otXfjpU33qT2ZvDa+HF50nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSNZP+R5uobuE92eWVP7qQipxA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMmFmMGQxZWUtYTRlZi0z ZTY5LWI4MzMtYTA5MjA5NzY4YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDIUmKumybgUoY6U8scG0biPLUhG5y7LQiIBkHNiIn9xBjz7xDZMjP4 acKfHOCBFxTMxxKvu/Kiy67p8UgPG6vWNE9uh/Z24mOZ+Bhi49SHlFk57OGiiKBD 8cxQQRnAoFK10Wg2QVtGPp/rTLYLmi5cCk34Wcg3Gt0hRbmoESa0iv8rrUEBl3RL DEE+QRf0B9UJ/LfsrUG0Ew3o5j3FsaXZU2HVC1RyCcdjat2abNx6g8TvTQfXVt7o AkHBfUTW+R0l+7TIHTnMvxLTFj4uDgbOAzh3uUDyYLd223IL/U/cR9OH/AVi8+1V oL7XuPAAwDeP7qBkNfF1lLFy6+FSW9g= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:47 2025 by rpki-client