$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/704f0f0c-b909-3310-ab34-f29746d3966a.roa File: 704f0f0c-b909-3310-ab34-f29746d3966a.roa (raw, json) Hash identifier: s5gttBGpUwQBRWhsi0odDQtbwIu5UUACVsP3gq/9B48= Subject key identifier: CC:A1:16:DF:60:C6:22:6A:C7:35:71:21:4D:48:82:3E:40:83:66:4E Certificate issuer: /CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539 Certificate serial: 010D0C9F43285849446933F28F8FD8EFFEF29E00 Authority key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/704f0f0c-b909-3310-ab34-f29746d3966a.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 6327 IP address blocks: 50.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:33:f2:8f:8f:d8:ef:fe:f2:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=9a8d778a-8105-4870-b768-4c561f5c5475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:82:b2:85:51:8e:a5:57:49:be:e3:3c:b2: 51:67:a1:68:0e:26:00:a3:b5:b3:8e:30:48:47:65: c8:94:3b:56:ee:70:c3:fa:8f:ea:76:19:23:3c:52: 83:3e:ce:ae:e6:af:90:45:7c:29:78:64:be:e7:a4: bb:1e:69:3e:67:25:fc:09:2f:49:70:be:5d:96:e2: c8:18:74:e9:c3:0d:2e:bd:68:ef:1a:10:25:c2:0c: e3:cf:d5:c4:97:62:ae:16:f0:53:96:64:b5:fb:cf: e9:68:d4:16:61:48:65:a5:38:fa:2a:c0:e9:e6:3f: d9:2b:d2:e6:88:7e:11:ac:b0:fb:6a:c0:cf:27:e1: 19:42:3d:09:e7:72:81:17:da:e8:79:93:bd:4c:9f: 25:a1:6a:d2:32:c4:2e:93:4f:18:71:61:9f:44:8b: ec:96:4d:13:bc:ef:3f:ca:4c:7d:99:d1:ef:68:8d: 03:b2:7c:d9:d7:43:d5:38:3b:20:f8:35:4a:ff:79: d6:8e:c3:f3:4e:b8:08:df:11:d8:7c:45:12:08:cd: f0:e0:94:bf:e5:d4:3f:98:29:be:12:3f:73:a9:6a: a6:e6:56:6e:b8:d8:ef:57:3b:8a:3c:0e:6e:57:a6: 56:78:be:f8:7a:24:36:7a:ce:af:f9:f7:4b:0e:d3: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A1:16:DF:60:C6:22:6A:C7:35:71:21:4D:48:82:3E:40:83:66:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/704f0f0c-b909-3310-ab34-f29746d3966a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl X509v3 Authority Key Identifier: keyid:76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer sbgp-ipAddrBlock: critical IPv4: 50.72.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:72:04:e8:cd:a3:05:7d:48:57:52:10:6b:34:9f:42:d6:2a: 83:e3:07:d4:10:6f:ab:13:52:cd:2a:f6:01:92:3f:d1:15:ba: 41:40:0a:9c:44:e1:46:d8:2d:e1:f0:85:a3:36:c4:de:c6:c5: 6f:89:3c:6d:d5:4c:89:37:e7:19:65:40:ad:88:88:5a:52:33: 8d:e4:b1:4a:f7:26:52:5d:58:18:4b:19:92:9e:01:4a:10:27: 21:83:4b:58:24:ff:39:b6:5e:46:9b:79:ea:31:bf:b0:5d:a6: 11:ae:75:8c:b7:ca:ae:2a:25:7c:81:fe:06:df:e2:aa:f1:1c: e2:0f:46:f7:92:c3:97:f4:0f:72:dc:f4:5e:63:ef:69:e5:0e: a4:3e:1c:e4:b2:cc:7a:5e:e0:7c:60:08:f8:c3:99:08:4f:58: c5:88:45:a9:d8:6f:ce:f9:74:43:1a:d5:8f:79:32:d4:c6:5c: 80:e1:ad:9e:eb:10:95:f5:d3:8a:f3:83:12:13:0f:49:e7:03: 40:8b:68:17:75:44:07:c6:b8:75:1b:b0:13:f6:76:d6:fa:34: 7a:b3:f8:63:d0:2e:2e:71:13:21:4f:9a:b7:6d:d6:a7:d4:e2: d2:70:eb:7c:a5:bc:6c:a7:b2:6e:29:4f:df:2f:66:62:62:e4: 03:8b:e3:16 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElEaTPyj4/Y7/7yngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUwZjA2MTYtNmUwMy00OWRlLWI1ZjgtNGI4NzRlNmQ4 NTM5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk OWE4ZDc3OGEtODEwNS00ODcwLWI3NjgtNGM1NjFmNWM1NDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwWCsoVRjqVXSb7jPLJRZ6FoDiYAo7WzjjBI R2XIlDtW7nDD+o/qdhkjPFKDPs6u5q+QRXwpeGS+56S7Hmk+ZyX8CS9JcL5dluLI GHTpww0uvWjvGhAlwgzjz9XEl2KuFvBTlmS1+8/paNQWYUhlpTj6KsDp5j/ZK9Lm iH4RrLD7asDPJ+EZQj0J53KBF9roeZO9TJ8loWrSMsQuk08YcWGfRIvslk0TvO8/ ykx9mdHvaI0DsnzZ10PVODsg+DVK/3nWjsPzTrgI3xHYfEUSCM3w4JS/5dQ/mCm+ Ej9zqWqm5lZuuNjvVzuKPA5uV6ZWeL74eiQ2es6v+fdLDtN7aQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMyhFt9gxiJqxzVxIU1Igj5Ag2ZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZTBm MDYxNi02ZTAzLTQ5ZGUtYjVmOC00Yjg3NGU2ZDg1MzkvNzA0ZjBmMGMtYjkwOS0z MzEwLWFiMzQtZjI5NzQ2ZDM5NjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWUwZjA2MTYtNmUwMy00OWRlLWI1 ZjgtNGI4NzRlNmQ4NTM5LzFlMGYwNjE2LTZlMDMtNDlkZS1iNWY4LTRiODc0ZTZk ODUzOS5jcmwwHwYDVR0jBBgwFoAUdntXZLDIEgFgrrbz5LT5tnN6j5gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZTBmMDYxNi02ZTAzLTQ5ZGUtYjVmOC00Yjg3 NGU2ZDg1MzkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAMkgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALnIE6M2jBX1IV1IQazSfQtYqg+MH1BBvqxNSzSr2AZI/0RW6QUAKnETh Rtgt4fCFozbE3sbFb4k8bdVMiTfnGWVArYiIWlIzjeSxSvcmUl1YGEsZkp4BShAn IYNLWCT/ObZeRpt56jG/sF2mEa51jLfKriolfIH+Bt/iqvEc4g9G95LDl/QPctz0 XmPvaeUOpD4c5LLMel7gfGAI+MOZCE9YxYhFqdhvzvl0QxrVj3ky1MZcgOGtnusQ lfXTivODEhMPSecDQItoF3VEB8a4dRuwE/Z21vo0erP4Y9AuLnETIU+at23Wp9Ti 0nDrfKW8bKeybilP3y9mYmLkA4vjFg== -----END CERTIFICATE-----Generated at Mon Apr 28 15:13:44 2025 by rpki-client