$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/835eaff1-7a96-3ad2-99d4-20f4a5bbb350.roa File: 835eaff1-7a96-3ad2-99d4-20f4a5bbb350.roa (raw, json) Hash identifier: 4PqDcINTC4RGeGx93ST6BjI69z7XBHkAY4yB/MdJFDs= Subject key identifier: 6D:E5:CB:49:6D:9C:62:3E:95:B8:76:83:75:DC:7F:01:09:F4:36:B8 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858499829D06FB460606ECBC66780 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/835eaff1-7a96-3ad2-99d4-20f4a5bbb350.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 174 IP address blocks: 50.7.120.0/22 maxlen: 22 67.159.6.0/23 maxlen: 23 2001:49f0:d01b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d0:6f:b4:60:60:6e:cb:c6:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=39aa7780-a3a2-49f9-9d56-504043a27f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:18:cf:37:04:a5:81:cb:98:65:ce:34:9c:ec: a3:d5:30:91:cf:39:92:bb:d4:bd:76:aa:da:7f:da: da:7d:b0:f7:d6:72:0c:9d:10:19:95:50:e9:5d:60: 14:fa:80:9a:9b:d1:8f:13:90:88:99:a1:8f:c0:11: f4:2a:8e:06:dc:99:03:23:cf:8b:60:86:a4:63:83: 46:96:97:5e:a8:7e:5b:eb:5f:bf:62:72:02:f9:0e: cd:0c:85:54:b4:2c:31:4c:59:21:e4:3a:81:dc:43: 15:98:b6:50:62:cc:7b:d3:77:fb:bf:21:16:1d:8c: e9:93:32:a4:bf:63:19:33:58:57:e8:e7:7b:22:af: 68:8e:78:e1:4f:b6:f2:3b:a5:59:c6:02:dc:e7:a7: e3:68:98:00:68:cc:a7:be:27:9c:7b:d9:e3:60:23: e9:ea:98:6d:fe:48:ba:19:09:ad:60:3d:4a:95:3e: d7:40:f0:11:48:2e:97:51:2f:27:b9:de:4a:d2:bc: 65:a6:f3:4e:24:31:39:9d:c3:14:6a:00:41:e2:19: e1:0d:28:c0:3d:77:a7:79:c3:6e:52:f0:68:42:d8: 95:ae:67:61:36:62:05:49:f2:64:02:da:f5:25:30: c2:cc:ae:b8:03:ec:e9:e4:b4:99:7a:44:b3:8b:ac: a4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E5:CB:49:6D:9C:62:3E:95:B8:76:83:75:DC:7F:01:09:F4:36:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/835eaff1-7a96-3ad2-99d4-20f4a5bbb350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.120.0/22 67.159.6.0/23 IPv6: 2001:49f0:d01b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:39:1b:96:ea:18:63:78:17:40:18:d6:79:0b:f0:6e:54:ef: 07:54:c6:c5:8e:a6:4d:bc:85:8e:68:60:d0:99:62:79:78:67: f3:cb:f6:ab:d7:3a:10:47:11:25:d8:41:b0:1c:61:f8:51:35: b5:42:43:e4:62:b0:67:b1:ef:cd:bd:df:55:b7:0b:f9:03:38: 85:62:b9:a2:3d:d7:cc:81:27:52:d0:b6:d7:71:3f:d9:c3:1f: 44:c1:dc:fa:b1:9a:27:b0:d5:e8:f8:c3:95:ab:c4:8d:f7:b9: 47:78:86:50:2b:f2:f5:b7:b5:35:a1:32:a2:19:39:3d:e4:57: 16:a3:6d:14:8c:de:5d:37:3f:ea:57:61:e5:00:b8:7c:89:10: 00:db:4e:9d:04:eb:8a:ec:b2:cf:0c:5a:fb:d8:f0:62:cd:c1: 4d:32:24:f8:9e:96:7b:de:ed:14:59:b3:7c:d0:40:48:0b:07: 75:8c:3a:fd:2e:30:4a:60:e9:1d:89:f9:ff:4d:28:06:9b:60: 41:2a:f1:48:e5:35:36:16:13:de:35:c7:06:fe:21:e4:30:42: da:78:7e:d7:7b:0c:b6:b2:4b:90:0c:6f:1c:0b:5d:65:d5:11: 1e:b5:75:95:c1:b6:7a:89:26:5a:71:41:27:91:0d:69:01:91: 28:81:9e:73 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEmYKdBvtGBgbsvGZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MzlhYTc3ODAtYTNhMi00OWY5LTlkNTYtNTA0MDQzYTI3ZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xjPNwSlgcuYZc40nOyj1TCRzzmSu9S9dqra f9rafbD31nIMnRAZlVDpXWAU+oCam9GPE5CImaGPwBH0Ko4G3JkDI8+LYIakY4NG lpdeqH5b61+/YnIC+Q7NDIVUtCwxTFkh5DqB3EMVmLZQYsx703f7vyEWHYzpkzKk v2MZM1hX6Od7Iq9ojnjhT7byO6VZxgLc56fjaJgAaMynviece9njYCPp6pht/ki6 GQmtYD1KlT7XQPARSC6XUS8nud5K0rxlpvNOJDE5ncMUagBB4hnhDSjAPXenecNu UvBoQtiVrmdhNmIFSfJkAtr1JTDCzK64A+zp5LSZekSzi6yk8wIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFG3ly0ltnGI+lbh2g3XcfwEJ9Da4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvODM1ZWFmZjEtN2E5Ni0z YWQyLTk5ZDQtMjBmNGE1YmJiMzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCMgd4AwQB Q58GMA8EAgACMAkDBwAgAUnw0BswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIDkbluoYY3gXQBjWeQvwblTv B1TGxY6mTbyFjmhg0JlieXhn88v2q9c6EEcRJdhBsBxh+FE1tUJD5GKwZ7Hvzb3f VbcL+QM4hWK5oj3XzIEnUtC213E/2cMfRMHc+rGaJ7DV6PjDlavEjfe5R3iGUCvy 9be1NaEyohk5PeRXFqNtFIzeXTc/6ldh5QC4fIkQANtOnQTriuyyzwxa+9jwYs3B TTIk+J6We97tFFmzfNBASAsHdYw6/S4wSmDpHYn5/00oBptgQSrxSOU1NhYT3jXH Bv4h5DBC2nh+13sMtrJLkAxvHAtdZdURHrV1lcG2eokmWnFBJ5ENaQGRKIGecw== -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:34 2025 by rpki-client