$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/dabc599b-f02c-348a-9e29-c1aa2d26ba37.roa File: dabc599b-f02c-348a-9e29-c1aa2d26ba37.roa (raw, json) Hash identifier: ML3AY0giIPPGCGWhttW1tz1zlYUOKzFG+2KvNW8uZN0= Subject key identifier: BD:59:2E:0E:F4:4A:99:71:32:CC:A4:B0:3C:FF:A6:40:C1:5D:2F:8F Certificate issuer: /CN=221cdd91-10e9-41bb-8765-69edc6f1e631 Certificate serial: 010D0C9F43285848F65BDD9367700295F3DD3960 Authority key identifier: D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/dabc599b-f02c-348a-9e29-c1aa2d26ba37.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 14618 IP address blocks: 130.50.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:dd:93:67:70:02:95:f3:dd:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221cdd91-10e9-41bb-8765-69edc6f1e631 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=d8e90029-362e-46a5-89c3-2f18f40a50e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:44:67:8c:c3:92:b7:07:ef:01:e8:e9:9d:d9: ca:37:9d:e5:b2:0e:02:e3:01:d9:d4:42:d0:bd:23: 43:af:2b:ff:a2:b3:f8:81:eb:64:e0:eb:96:94:1f: 67:20:c5:88:69:44:02:5a:85:d7:5a:43:78:10:66: f4:86:f2:cb:49:28:f7:14:94:30:15:e0:cd:be:8f: e5:e0:80:c3:87:10:01:00:43:99:4b:26:36:e9:fc: 7f:f7:44:7a:b5:35:fb:57:8f:5f:7b:10:b9:60:73: 2d:36:3b:93:0c:00:74:2a:71:7d:59:d2:4a:8d:03: 16:db:48:f5:85:bf:bb:87:2f:51:ee:ab:6b:01:02: f6:13:46:e0:a9:4b:3e:aa:e3:e8:8f:c9:d6:e8:10: 3b:34:14:e1:40:a4:04:35:b1:75:05:6b:4d:f1:0f: 61:ca:1c:96:8b:62:bd:b6:b5:98:6a:97:86:db:93: c9:13:e2:c0:6b:ee:92:d2:b5:b1:1a:2f:d7:6c:81: 9c:41:9a:c6:95:3f:98:64:18:e8:2f:e6:c0:16:b1: 77:b2:ee:cb:40:86:dc:bd:c5:14:be:36:92:7b:74: 23:95:b5:a8:3b:95:39:ec:86:09:ca:b2:f4:69:cc: e4:b4:6b:9a:94:a6:bd:83:7c:66:1e:4e:11:8d:2b: 01:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:59:2E:0E:F4:4A:99:71:32:CC:A4:B0:3C:FF:A6:40:C1:5D:2F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/dabc599b-f02c-348a-9e29-c1aa2d26ba37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl X509v3 Authority Key Identifier: keyid:D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer sbgp-ipAddrBlock: critical IPv4: 130.50.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:95:55:62:cf:3e:04:ae:c7:51:7f:76:82:f0:d5:92:9d:ae: 1a:90:d0:b3:8d:2b:9d:20:22:41:a5:74:8a:e4:c1:ee:90:29: 12:80:9c:bb:ea:d4:3b:ba:6d:af:5c:ee:9b:87:fb:ba:aa:0a: 2e:f0:2c:cb:09:b4:51:48:b9:32:e8:df:df:52:72:d0:31:e7: 5e:9d:67:19:c7:55:99:17:9e:89:53:72:8a:5a:88:74:da:cc: 40:77:e2:da:a9:e1:b1:d3:96:d5:58:8e:6a:27:b2:c6:34:a4: ad:4f:0b:b1:2e:17:be:4c:2f:c7:38:40:63:4f:e5:17:9e:33: fb:39:16:cf:6c:04:bd:77:e4:89:dd:29:8b:81:97:69:40:6b: f5:de:25:c2:9b:60:32:8e:0e:28:52:7f:b9:4b:0d:a7:d4:41: 3e:a3:21:1a:9b:87:d4:ce:5a:dc:af:48:8c:0e:f9:d8:ca:b0: 02:46:b9:69:4d:48:cb:62:5d:96:f3:1f:91:22:8b:0a:9f:5d: 55:43:69:71:e6:37:87:ab:e2:2c:a8:37:77:00:6d:88:1b:9e: 8d:0d:57:90:d0:d7:eb:a0:02:1b:61:c3:20:05:67:94:d8:90: c6:5a:3c:73:13:f1:d7:7a:da:33:4b:bc:18:0f:da:d9:2e:a2: 62:8a:51:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W92TZ3AClfPdOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxY2RkOTEtMTBlOS00MWJiLTg3NjUtNjllZGM2ZjFl NjMxMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZDhlOTAwMjktMzYyZS00NmE1LTg5YzMtMmYxOGY0MGE1MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40RnjMOStwfvAejpndnKN53lsg4C4wHZ1ELQ vSNDryv/orP4getk4OuWlB9nIMWIaUQCWoXXWkN4EGb0hvLLSSj3FJQwFeDNvo/l 4IDDhxABAEOZSyY26fx/90R6tTX7V49fexC5YHMtNjuTDAB0KnF9WdJKjQMW20j1 hb+7hy9R7qtrAQL2E0bgqUs+quPoj8nW6BA7NBThQKQENbF1BWtN8Q9hyhyWi2K9 trWYapeG25PJE+LAa+6S0rWxGi/XbIGcQZrGlT+YZBjoL+bAFrF3su7LQIbcvcUU vjaSe3QjlbWoO5U57IYJyrL0aczktGualKa9g3xmHk4RjSsB9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1ZLg70SplxMsyksDz/pkDBXS+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFj ZGQ5MS0xMGU5LTQxYmItODc2NS02OWVkYzZmMWU2MzEvZGFiYzU5OWItZjAyYy0z NDhhLTllMjktYzFhYTJkMjZiYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxY2RkOTEtMTBlOS00MWJiLTg3 NjUtNjllZGM2ZjFlNjMxLzIyMWNkZDkxLTEwZTktNDFiYi04NzY1LTY5ZWRjNmYx ZTYzMS5jcmwwHwYDVR0jBBgwFoAU1Ay9UnQgBkyh+gSLfQLSi26fIUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjFjZGQ5MS0xMGU5LTQxYmItODc2NS02OWVk YzZmMWU2MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjIyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWVVWLPPgSux1F/doLw1ZKdrhqQ0LONK50gIkGldIrkwe6QKRKAnLvq 1Du6ba9c7puH+7qqCi7wLMsJtFFIuTLo399SctAx516dZxnHVZkXnolTcopaiHTa zEB34tqp4bHTltVYjmonssY0pK1PC7EuF75ML8c4QGNP5ReeM/s5Fs9sBL135Ind KYuBl2lAa/XeJcKbYDKODihSf7lLDafUQT6jIRqbh9TOWtyvSIwO+djKsAJGuWlN SMtiXZbzH5EiiwqfXVVDaXHmN4er4iyoN3cAbYgbno0NV5DQ1+ugAhthwyAFZ5TY kMZaPHMT8dd62jNLvBgP2tkuomKKUeY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:26 2025 by rpki-client