$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa File: 46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa (raw, json) Hash identifier: li3dDRbJr+TlFqLJqB9U01sbxEpQ/X3ptiQC6S3GZIw= Subject key identifier: 21:02:37:D0:A0:E7:6D:4E:10:88:4E:E3:B5:74:22:90:3C:DA:8E:93 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858493ED3D2B61EB4554FEAEE61CC Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 29802 IP address blocks: 144.168.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d2:b6:1e:b4:55:4f:ea:ee:61:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=0224a993-4b53-4103-9463-09f4b314de13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:96:d2:a9:44:cd:e1:41:e6:72:77:24:62: f3:0a:a6:96:bd:ec:08:9f:ed:48:08:8e:7c:75:b4: fa:f8:20:74:6c:48:e3:fc:4d:61:3e:4f:cf:04:d2: ac:c4:9d:ba:40:9b:0b:50:52:37:cf:aa:d3:4b:2c: 51:95:5b:5a:e6:15:ae:e0:9e:4d:61:e3:7b:ce:89: 44:fd:2c:d0:a3:9b:dd:cf:45:3a:d6:20:4b:47:f7: be:6c:66:97:86:13:83:be:bc:5b:20:54:9b:1d:17: 18:7a:7e:c3:4f:d8:a9:16:1b:71:06:fa:2b:25:14: dc:d3:b7:af:75:fc:9c:69:ea:c7:ad:66:45:1b:eb: 12:a4:3d:2d:2a:35:c3:9e:84:fe:50:f0:24:a4:12: e0:9d:0f:dc:a8:4a:2a:ad:6e:ca:e3:01:6f:0d:ef: 2a:9d:21:d3:ac:90:03:99:5c:f0:5a:a4:eb:a7:06: d8:29:c6:13:d6:9c:5c:60:b0:45:a3:8b:fe:39:3a: ce:d8:ab:40:23:fc:8a:24:48:e6:78:85:79:1f:d5: 87:1a:9e:5f:01:5f:33:26:d3:f5:28:d4:b7:84:24: 29:b7:0e:be:86:75:4d:d0:2d:a9:c0:2e:6a:e6:4e: 9b:cf:46:30:b1:10:cf:ee:e6:6c:20:d7:1a:f0:26: b0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:02:37:D0:A0:E7:6D:4E:10:88:4E:E3:B5:74:22:90:3C:DA:8E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 144.168.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b9:97:c3:8e:1b:9a:fb:86:f6:c8:8f:72:68:6c:3a:89:43: 45:86:9d:a0:f2:ee:a6:4a:8f:a3:c6:c6:00:a0:88:7f:2a:a6: 21:c6:8f:eb:6c:b3:7c:ed:2d:ff:8c:5d:a3:68:e0:52:f4:b4: b5:66:8e:70:9d:c8:4e:18:28:2d:99:8f:b7:0c:4c:24:86:79: 2e:3e:7f:98:eb:7a:56:c9:57:a4:b9:5f:82:6a:7a:c3:8c:2a: 8f:0b:ff:e7:ac:cd:63:b5:b5:8b:dc:99:60:b1:d7:8b:03:6e: c9:a3:0a:d9:af:e2:7f:2a:0a:98:69:53:c5:46:fa:6e:06:47: 0d:07:9c:47:f6:c4:38:67:b4:48:f5:03:cf:f4:91:d8:22:3a: a8:87:f4:b1:6f:7f:3e:20:ce:71:d1:71:a3:5e:4e:75:cd:b9: c9:6a:82:b7:14:3d:f3:e5:df:1a:71:a6:43:43:75:93:48:73: 6a:d8:94:ca:0a:e9:8d:f9:18:df:ed:e3:60:82:a9:2a:b1:fb: c3:c9:47:6f:3d:1d:dc:38:fb:d4:59:21:6c:7e:66:51:2a:c6: d1:f6:4e:44:3f:28:94:51:29:74:68:4d:e7:29:06:4e:20:7c: 9f:e8:dc:99:e0:7c:29:d3:d0:df:fa:92:8f:63:c3:e8:8f:de: de:a4:56:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09K2HrRVT+ruYcwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MDIyNGE5OTMtNGI1My00MTAzLTk0NjMtMDlmNGIzMTRkZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLaW0qlEzeFB5nJ3JGLzCqaWvewIn+1ICI58 dbT6+CB0bEjj/E1hPk/PBNKsxJ26QJsLUFI3z6rTSyxRlVta5hWu4J5NYeN7zolE /SzQo5vdz0U61iBLR/e+bGaXhhODvrxbIFSbHRcYen7DT9ipFhtxBvorJRTc07ev dfycaerHrWZFG+sSpD0tKjXDnoT+UPAkpBLgnQ/cqEoqrW7K4wFvDe8qnSHTrJAD mVzwWqTrpwbYKcYT1pxcYLBFo4v+OTrO2KtAI/yKJEjmeIV5H9WHGp5fAV8zJtP1 KNS3hCQptw6+hnVN0C2pwC5q5k6bz0YwsRDP7uZsINca8CawnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCECN9Cg521OEIhO47V0IpA82o6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNDZiOTNmM2QtYTYzOS0z ZGFlLTgxMjUtZTRhYzBmY2RmNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkKggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu5l8OOG5r7hvbIj3JobDqJQ0WGnaDy7qZKj6PGxgCgiH8qpiHGj+ts s3ztLf+MXaNo4FL0tLVmjnCdyE4YKC2Zj7cMTCSGeS4+f5jrelbJV6S5X4JqesOM Ko8L/+eszWO1tYvcmWCx14sDbsmjCtmv4n8qCphpU8VG+m4GRw0HnEf2xDhntEj1 A8/0kdgiOqiH9LFvfz4gznHRcaNeTnXNuclqgrcUPfPl3xpxpkNDdZNIc2rYlMoK 6Y35GN/t42CCqSqx+8PJR289Hdw4+9RZIWx+ZlEqxtH2TkQ/KJRRKXRoTecpBk4g fJ/o3JngfCnT0N/6ko9jw+iP3t6kVkM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:13:37 2025 by rpki-client