$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa File: c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa (raw, json) Hash identifier: pcRINWCRb/PCTtFLuJk6e4f+k9/iu42T6y/UavxPds8= Subject key identifier: 04:68:04:EB:8F:D9:4B:7E:8F:BB:CF:10:C9:CC:1C:FD:D7:B4:25:44 Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F43285849806F1B2E7040330EE10D0E00 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 29909 IP address blocks: 50.21.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:1b:2e:70:40:33:0e:e1:0d:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=d9e84b0f-db8a-4e01-ba2a-16b44a26c989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:a4:00:2e:b5:f7:ee:f8:02:fb:79:9f:35: fe:8a:e5:03:19:eb:b0:e0:ea:c7:66:b5:ba:de:09: ff:ba:cd:81:89:1e:f2:64:60:91:20:b7:30:cb:7c: 7a:a1:46:73:95:88:d6:e2:be:b7:b7:8d:19:31:17: 31:18:cf:58:b2:36:3c:65:5e:ce:39:99:11:e3:e4: 09:41:c2:77:c8:93:cc:b7:6b:47:46:f9:5a:4e:84: 0d:07:23:0b:d0:3f:b5:06:4a:34:e8:03:01:48:7f: 68:29:da:b7:33:9d:80:bc:ce:e0:73:49:e5:75:2c: d9:b5:51:09:f8:90:89:37:37:23:0f:82:45:4e:d9: ac:75:ad:54:d2:a5:10:22:f0:a3:55:fd:6b:b1:47: 5d:a2:2a:8a:26:94:58:32:15:7e:f1:59:bd:b8:99: 04:d2:b2:c3:0a:a7:32:00:3a:f2:07:2f:14:79:38: 49:13:21:52:46:ab:b6:b9:b4:4e:95:5a:fb:f6:cb: 77:8d:53:5b:27:85:8e:3f:c9:9a:96:7f:e6:cc:99: 41:85:21:70:f2:33:c8:c6:a3:6d:7e:c4:7a:cd:51: 99:1e:19:a5:96:62:35:10:5a:06:8d:4b:13:33:36: 24:40:d4:e2:69:8a:42:44:27:06:e3:9a:d1:c8:34: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:04:EB:8F:D9:4B:7E:8F:BB:CF:10:C9:CC:1C:FD:D7:B4:25:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/c58a825f-6738-3ad4-8a77-9cc77df22cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 50.21.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:51:63:68:5a:e5:47:ad:f5:a1:51:89:c3:f5:0e:c7:6f:64: 36:25:5c:af:d7:82:e2:e1:be:53:1e:b2:4a:59:06:ea:e3:2f: 81:c4:da:b9:4f:c1:ed:94:4a:e3:8e:fb:49:a5:69:67:42:1b: e1:ad:20:e2:23:b0:34:06:13:ae:9f:b1:b1:d5:79:8e:68:06: 13:8f:c8:62:5d:50:17:56:10:62:84:1f:1e:26:49:dc:37:3c: da:6b:d7:fa:27:d4:09:dd:f8:3e:1e:7a:a0:1d:d2:8d:b1:85: 07:35:75:7a:1f:66:0e:10:26:87:01:8f:44:c0:ec:f3:0d:17: 7c:29:10:ea:12:ab:5c:f9:9d:8f:84:f3:f8:2d:e4:a1:6b:a0: 5c:be:ce:eb:4f:0d:d1:54:cd:bb:26:d1:81:94:6f:e9:c6:7c: 18:44:78:ba:cf:ec:69:ea:ad:42:74:e0:6b:86:d9:df:cd:c0: 63:71:d4:46:7c:b0:4f:4d:25:f6:4e:cb:20:ec:d7:f0:0b:57: 92:53:6f:14:df:9a:b4:27:3f:84:e5:d0:91:bf:60:0b:7d:4e: 56:67:fa:d6:b9:15:20:15:d7:e1:07:36:b3:0d:b1:4d:05:2e: 3d:2c:eb:89:d9:6e:e2:d3:8f:b7:a6:c4:d4:73:86:72:96:88: 56:ee:a5:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbxsucEAzDuENDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZDllODRiMGYtZGI4YS00ZTAxLWJhMmEtMTZiNDRhMjZjOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroKkAC619+74Avt5nzX+iuUDGeuw4OrHZrW6 3gn/us2BiR7yZGCRILcwy3x6oUZzlYjW4r63t40ZMRcxGM9YsjY8ZV7OOZkR4+QJ QcJ3yJPMt2tHRvlaToQNByML0D+1Bko06AMBSH9oKdq3M52AvM7gc0nldSzZtVEJ +JCJNzcjD4JFTtmsda1U0qUQIvCjVf1rsUddoiqKJpRYMhV+8Vm9uJkE0rLDCqcy ADryBy8UeThJEyFSRqu2ubROlVr79st3jVNbJ4WOP8maln/mzJlBhSFw8jPIxqNt fsR6zVGZHhmllmI1EFoGjUsTMzYkQNTiaYpCRCcG45rRyDSn3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARoBOuP2Ut+j7vPEMnMHP3XtCVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvYzU4YTgyNWYtNjczOC0z YWQ0LThhNzctOWNjNzdkZjIyY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMhWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJRY2ha5Uet9aFRicP1DsdvZDYlXK/XguLhvlMeskpZBurjL4HE2rlP we2USuOO+0mlaWdCG+GtIOIjsDQGE66fsbHVeY5oBhOPyGJdUBdWEGKEHx4mSdw3 PNpr1/on1And+D4eeqAd0o2xhQc1dXofZg4QJocBj0TA7PMNF3wpEOoSq1z5nY+E 8/gt5KFroFy+zutPDdFUzbsm0YGUb+nGfBhEeLrP7GnqrUJ04GuG2d/NwGNx1EZ8 sE9NJfZOyyDs1/ALV5JTbxTfmrQnP4Tl0JG/YAt9TlZn+ta5FSAV1+EHNrMNsU0F Lj0s64nZbuLTj7emxNRzhnKWiFbupSU= -----END CERTIFICATE-----Generated at Tue Apr 29 12:50:01 2025 by rpki-client