$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa File: 504a2c0b-e942-3392-a51f-7d8c0fe34915.roa (raw, json) Hash identifier: YbHPdvZbfdJxHqrcCC/OpEVR4oIoxFKi636AFb9MOBY= Subject key identifier: 65:F8:36:18:01:09:AC:C9:52:D8:6B:64:BF:C9:9C:97:C1:7C:DF:88 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858493C0929814A4E270B7870CE00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 29802 IP address blocks: 66.165.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:29:81:4a:4e:27:0b:78:70:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=41af4959-5609-4f62-8327-098ef1f06b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:64:fd:8f:c0:09:d4:bc:f5:49:9e:d1:f8:f3: 74:df:03:07:ce:59:4e:a3:f6:d0:91:98:a0:13:cb: 64:db:5a:27:56:a1:41:5c:30:09:26:12:f8:cf:d0: 11:7b:97:33:6d:99:fe:6b:ca:e9:c7:bf:97:c5:65: 2c:80:65:a7:cb:10:d4:9e:58:4b:4f:e4:19:d4:52: 52:fb:6e:34:fb:7b:24:11:75:d3:4e:68:9f:e0:df: a0:73:e6:fd:b5:9d:f3:fb:42:53:02:f5:65:62:65: fd:a9:63:ab:4d:eb:22:f2:f9:97:06:b9:e5:dd:c8: 76:cd:ad:f4:c1:94:71:de:42:d4:c9:c1:5d:a0:ac: 00:81:7c:0c:62:28:17:67:9d:fa:96:61:5f:ca:01: e1:3c:14:79:b5:4b:b4:f7:56:57:36:2e:3d:c8:8d: 20:de:a9:bb:1d:93:90:e0:0b:4a:18:8d:68:f4:63: c2:54:c7:7e:fc:0f:24:59:25:ff:a1:7f:a3:b4:d2: fb:c5:b4:53:37:a9:ed:d3:59:92:20:c9:e4:5b:28: 18:9d:a3:bb:3e:56:e2:ac:e4:1a:30:4c:3c:43:9f: e2:4b:95:e6:ec:43:b2:0d:fc:4c:fb:c8:88:65:96: 28:cc:41:6f:53:b6:07:ce:e8:e1:21:3f:10:89:1b: 45:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F8:36:18:01:09:AC:C9:52:D8:6B:64:BF:C9:9C:97:C1:7C:DF:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.165.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:cf:52:86:37:9e:a7:14:78:54:be:5a:d1:80:3e:23:e6:e1: 05:5a:a3:70:55:d5:39:f1:8b:a9:9c:ab:33:25:0d:24:dd:7d: b2:1d:98:2c:42:53:e4:19:46:31:52:ff:9e:65:39:95:45:90: 9f:a1:12:bf:ca:a2:36:e5:75:69:3a:00:01:70:47:fc:02:71: 32:81:04:41:f6:e2:07:1d:a3:37:46:74:58:fa:66:79:ab:64: 9a:b4:db:a3:4b:47:eb:ac:88:a5:c5:1d:34:ea:b0:78:bc:b3: 65:af:2e:f7:8d:56:8e:f1:40:62:a0:64:e1:7b:a4:cb:a0:20: 33:20:71:39:57:fe:2d:e5:29:31:a3:c8:91:a4:d1:04:ff:12: 77:d0:5e:06:12:48:83:76:16:15:ed:90:7d:87:22:9c:72:0d: 4e:75:08:d4:44:a4:dd:62:51:ec:7b:48:58:3b:17:08:b9:81: fe:a2:38:9a:74:ec:5a:e0:4e:d7:29:01:05:a8:f3:33:62:99: 48:40:9f:94:f9:48:70:39:11:f6:26:be:3e:6d:5f:e2:12:aa: 5c:8c:7b:10:a1:13:8b:35:ab:b7:41:23:6e:14:ad:4e:ec:ea: 5a:e6:d8:78:cb:48:89:c9:52:b5:22:74:f8:59:86:1d:6d:ec: 43:1a:b5:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSmBSk4nC3hwzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk NDFhZjQ5NTktNTYwOS00ZjYyLTgzMjctMDk4ZWYxZjA2YjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22T9j8AJ1Lz1SZ7R+PN03wMHzllOo/bQkZig E8tk21onVqFBXDAJJhL4z9ARe5czbZn+a8rpx7+XxWUsgGWnyxDUnlhLT+QZ1FJS +240+3skEXXTTmif4N+gc+b9tZ3z+0JTAvVlYmX9qWOrTesi8vmXBrnl3ch2za30 wZRx3kLUycFdoKwAgXwMYigXZ536lmFfygHhPBR5tUu091ZXNi49yI0g3qm7HZOQ 4AtKGI1o9GPCVMd+/A8kWSX/oX+jtNL7xbRTN6nt01mSIMnkWygYnaO7PlbirOQa MEw8Q5/iS5Xm7EOyDfxM+8iIZZYozEFvU7YHzujhIT8QiRtFoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX4NhgBCazJUthrZL/JnJfBfN+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNTA0YTJjMGItZTk0Mi0z MzkyLWE1MWYtN2Q4YzBmZTM0OTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzPUoY3nqcUeFS+WtGAPiPm4QVao3BV1Tnxi6mcqzMlDSTdfbIdmCxC U+QZRjFS/55lOZVFkJ+hEr/KojbldWk6AAFwR/wCcTKBBEH24gcdozdGdFj6Znmr ZJq026NLR+usiKXFHTTqsHi8s2WvLveNVo7xQGKgZOF7pMugIDMgcTlX/i3lKTGj yJGk0QT/EnfQXgYSSIN2FhXtkH2HIpxyDU51CNREpN1iUex7SFg7Fwi5gf6iOJp0 7FrgTtcpAQWo8zNimUhAn5T5SHA5EfYmvj5tX+ISqlyMexChE4s1q7dBI24UrU7s 6lrm2HjLSInJUrUidPhZhh1t7EMatdQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:24 2025 by rpki-client