$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/43913e22-6d62-3fae-aa20-d6cdc5070066.roa File: 43913e22-6d62-3fae-aa20-d6cdc5070066.roa (raw, json) Hash identifier: q+KjZDSKVrr8APR1ECL8WwmwvgDXechrTg2P4kCM3wE= Subject key identifier: FA:C9:29:6B:CA:66:67:ED:40:0A:20:DA:84:4A:C0:CD:E7:66:A7:F7 Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F43285849806F1B4EF9D11D3D81A04240 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/43913e22-6d62-3fae-aa20-d6cdc5070066.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 398216 IP address blocks: 50.21.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:1b:4e:f9:d1:1d:3d:81:a0:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=af04eb0d-d9b5-4773-a211-f873f8042e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:40:03:07:c2:ee:ee:27:f4:5f:1d:03:01: 64:a1:23:f5:50:d3:fd:17:48:83:7d:85:2f:b9:e6: c8:3b:73:bc:cb:11:b4:79:bc:52:44:4f:e4:95:3f: 5a:44:77:26:c6:83:38:5f:dc:97:58:d7:6d:23:dc: d7:57:ed:19:b6:3d:ae:cc:39:cd:0b:55:45:44:7d: a9:40:8a:9d:49:2a:56:3b:5a:6b:6c:e4:a0:8d:6b: 5c:4b:db:8b:b3:c3:66:b2:47:f5:9e:03:3c:a7:33: 7c:2f:1f:26:10:98:27:00:f3:a4:86:fb:90:84:4b: ca:da:1c:02:9e:2b:5b:9a:b7:63:1d:81:00:b6:38: ab:36:84:6c:ee:1b:0c:2c:8d:57:b6:8f:27:e4:d3: f8:c8:6d:ac:e2:0e:c2:92:cb:2e:85:6d:6d:0b:b2: de:6c:d7:ad:5a:a9:04:4d:d1:f2:a7:1b:86:29:83: dc:5c:ba:cb:a4:d8:87:6b:6c:c5:a1:50:46:fa:3c: 96:e9:f2:45:0d:25:98:50:aa:13:fa:96:58:2d:de: af:9b:c3:5a:a6:3f:93:41:34:97:f0:69:6d:c0:a2: 47:d2:a6:c0:d2:dc:67:20:ab:a4:45:b4:bc:ef:90: d4:32:0a:a6:be:66:93:ad:e2:2d:b7:c5:f6:f4:77: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C9:29:6B:CA:66:67:ED:40:0A:20:DA:84:4A:C0:CD:E7:66:A7:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/43913e22-6d62-3fae-aa20-d6cdc5070066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 50.21.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c0:85:88:bb:e9:71:88:d3:bd:f7:53:05:73:03:3d:83:0e: 32:c2:87:89:26:ce:7d:8b:5d:e4:68:14:b9:ff:2c:10:26:6f: f6:84:8c:27:3b:08:a2:f6:d8:a5:1d:58:a6:93:66:1a:39:08: 1d:f2:be:b4:da:cd:7a:de:3c:1f:a1:a9:5c:33:63:f7:51:d5: c1:0c:f6:74:2c:5f:28:21:69:77:cb:fa:b5:01:27:81:e6:5e: a3:9a:2d:47:38:c5:40:8e:7d:26:5d:de:ae:54:b2:d4:21:ab: ce:7c:b8:6c:6a:d0:ae:a4:3f:66:56:91:d1:00:b8:d5:8c:88: d8:1e:b5:4a:68:8b:1d:d5:04:9b:b5:2d:87:40:62:53:23:12: 6a:75:db:9f:fe:5a:fe:c1:3c:1d:4a:8b:42:27:84:cb:e6:63: 20:9b:3c:22:8e:43:83:00:81:c0:fd:e0:4a:3d:a1:6b:fb:1b: a5:78:95:8a:38:92:ac:24:65:38:f2:b7:ce:a1:8c:14:31:42: 0f:68:19:8c:97:c5:43:dd:b0:59:7f:2c:19:91:50:f9:75:cf: 2c:0e:3d:86:ba:73:cb:3b:36:2c:a3:90:3b:72:16:7c:0c:7d: 22:cc:ac:fa:a8:22:61:eb:e8:b0:b0:1e:04:93:30:13:be:66: c1:67:7c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbxtO+dEdPYGgQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk YWYwNGViMGQtZDliNS00NzczLWEyMTEtZjg3M2Y4MDQyZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTpAAwfC7u4n9F8dAwFkoSP1UNP9F0iDfYUv uebIO3O8yxG0ebxSRE/klT9aRHcmxoM4X9yXWNdtI9zXV+0Ztj2uzDnNC1VFRH2p QIqdSSpWO1prbOSgjWtcS9uLs8Nmskf1ngM8pzN8Lx8mEJgnAPOkhvuQhEvK2hwC nitbmrdjHYEAtjirNoRs7hsMLI1Xto8n5NP4yG2s4g7CkssuhW1tC7LebNetWqkE TdHypxuGKYPcXLrLpNiHa2zFoVBG+jyW6fJFDSWYUKoT+pZYLd6vm8Napj+TQTSX 8GltwKJH0qbA0txnIKukRbS875DUMgqmvmaTreItt8X29HfyzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrJKWvKZmftQAog2oRKwM3nZqf3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvNDM5MTNlMjItNmQ2Mi0z ZmFlLWFhMjAtZDZjZGM1MDcwMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMhWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrAhYi76XGI0733UwVzAz2DDjLCh4kmzn2LXeRoFLn/LBAmb/aEjCc7 CKL22KUdWKaTZho5CB3yvrTazXrePB+hqVwzY/dR1cEM9nQsXyghaXfL+rUBJ4Hm XqOaLUc4xUCOfSZd3q5UstQhq858uGxq0K6kP2ZWkdEAuNWMiNgetUpoix3VBJu1 LYdAYlMjEmp125/+Wv7BPB1Ki0InhMvmYyCbPCKOQ4MAgcD94Eo9oWv7G6V4lYo4 kqwkZTjyt86hjBQxQg9oGYyXxUPdsFl/LBmRUPl1zywOPYa6c8s7NiyjkDtyFnwM fSLMrPqoImHr6LCwHgSTMBO+ZsFnfFo= -----END CERTIFICATE-----Generated at Tue Apr 29 08:27:18 2025 by rpki-client