$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/88e6957f-64d0-389f-bd52-5325b53c0682.roa File: 88e6957f-64d0-389f-bd52-5325b53c0682.roa (raw, json) Hash identifier: r4mQt/UyvVwFvd17QyEsQfTIaTUPPMzbhvU03OMHX1Q= Subject key identifier: 5A:C5:28:81:B0:C7:73:2B:E0:F9:86:F5:CD:17:A0:21:E0:33:37:24 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584993F9E37B3DC0079504236CF0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/88e6957f-64d0-389f-bd52-5325b53c0682.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 174 IP address blocks: 50.7.22.0/23 maxlen: 23 50.7.240.0/23 maxlen: 23 66.90.102.0/24 maxlen: 24 67.159.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e3:7b:3d:c0:07:95:04:23:6c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=bfe34480-54a0-4a14-8615-9f656f58861a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:25:2e:d4:d8:f0:51:a3:0c:c9:fb:c4:62:05: ab:b0:dd:ef:bd:43:7e:2c:d4:bc:91:df:04:0c:aa: b0:89:be:36:f3:77:2b:8a:f2:f4:94:bd:1f:df:90: af:00:31:47:43:b0:d3:fb:97:d2:60:3b:80:5c:6b: 11:b6:07:4a:9d:fa:6d:93:03:d0:4c:49:b1:8b:dc: 5b:1b:e1:06:6a:00:d1:a5:a2:14:54:68:a2:a7:1e: 0c:77:e5:3d:65:f8:f4:7a:a0:6e:b4:2a:11:2d:9d: b9:24:65:3b:f6:aa:9e:5b:b1:7c:d6:f0:81:8f:c3: 01:3f:a8:59:e2:ed:34:1d:6d:93:09:11:51:6b:99: e7:d4:4a:9e:f4:a9:e8:39:03:47:0d:02:a9:12:71: 79:83:77:14:b9:91:95:11:a1:1c:b8:d1:a5:9f:e0: 93:b0:3c:85:70:47:80:ec:70:4e:f9:ae:50:d4:da: d4:dd:10:02:b1:75:05:c6:f3:3c:4d:13:35:d3:59: fb:ff:aa:a2:e2:d3:20:68:e4:a4:fe:7c:bd:03:24: 3c:79:0b:d7:86:b6:6c:5f:74:9e:86:2c:6f:84:93: 57:81:86:1b:09:6c:82:65:a2:a3:d1:52:98:2f:12: e9:e5:6b:3f:bf:e4:69:39:4e:b0:0f:73:67:31:7d: d9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C5:28:81:B0:C7:73:2B:E0:F9:86:F5:CD:17:A0:21:E0:33:37:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/88e6957f-64d0-389f-bd52-5325b53c0682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.22.0/23 50.7.240.0/23 66.90.102.0/24 67.159.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:ce:56:99:86:3b:f5:b4:52:e8:e8:88:b3:af:1e:04:ec:6b: 7a:61:02:65:2b:41:2c:61:0c:f4:fe:21:69:e0:42:46:d9:9f: dd:1c:0e:1a:2d:91:7e:9c:5a:9a:60:23:79:8e:88:a5:b7:68: f4:9e:68:95:22:86:33:60:2f:e2:1a:fe:ad:fe:68:35:05:77: 61:da:d1:3f:6a:4c:40:42:b1:3b:a7:2d:13:33:5b:4b:dc:f7: 82:16:01:0d:df:bb:63:0f:d5:bd:86:67:d6:3c:a3:ce:c6:8d: 91:79:e7:df:ff:95:7a:f7:c4:d0:5b:2e:9b:db:a3:4d:ec:2f: ac:3d:91:f7:97:a7:30:d0:23:eb:bd:ef:f6:63:3b:7d:e2:58: 69:30:55:86:5b:a8:83:20:8a:fc:be:a1:91:58:bf:3b:8f:f5: aa:aa:3c:97:80:62:b0:04:91:f3:b4:12:b3:c3:f5:4b:fc:4c: 42:a9:d3:7f:d2:65:82:82:e6:b2:35:89:5e:53:b1:f8:95:fb: ed:d6:ce:64:d8:d0:da:00:4a:4b:a7:49:bf:81:9e:a2:bd:1b: bc:76:04:6f:70:ec:36:b5:39:0c:51:33:79:63:8e:bc:22:63: d2:69:a0:8b:5f:34:e0:00:19:f9:48:e5:92:7e:3d:85:be:b4: 3b:47:e4:86 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEmT+eN7PcAHlQQjbPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YmZlMzQ0ODAtNTRhMC00YTE0LTg2MTUtOWY2NTZmNTg4NjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyUu1NjwUaMMyfvEYgWrsN3vvUN+LNS8kd8E DKqwib4283crivL0lL0f35CvADFHQ7DT+5fSYDuAXGsRtgdKnfptkwPQTEmxi9xb G+EGagDRpaIUVGiipx4Md+U9Zfj0eqButCoRLZ25JGU79qqeW7F81vCBj8MBP6hZ 4u00HW2TCRFRa5nn1Eqe9KnoOQNHDQKpEnF5g3cUuZGVEaEcuNGln+CTsDyFcEeA 7HBO+a5Q1NrU3RACsXUFxvM8TRM101n7/6qi4tMgaOSk/ny9AyQ8eQvXhrZsX3Se hixvhJNXgYYbCWyCZaKj0VKYLxLp5Ws/v+RpOU6wD3NnMX3ZyQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFFrFKIGwx3Mr4PmG9c0XoCHgMzckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvODhlNjk1N2YtNjRkMC0z ODlmLWJkNTItNTMyNWI1M2MwNjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBMgcWAwQB MgfwAwQAQlpmAwQBQ58IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKPOVpmGO/W0UujoiLOvHgTsa3phAmUr QSxhDPT+IWngQkbZn90cDhotkX6cWppgI3mOiKW3aPSeaJUihjNgL+Ia/q3+aDUF d2Ha0T9qTEBCsTunLRMzW0vc94IWAQ3fu2MP1b2GZ9Y8o87GjZF559//lXr3xNBb Lpvbo03sL6w9kfeXpzDQI+u97/ZjO33iWGkwVYZbqIMgivy+oZFYvzuP9aqqPJeA YrAEkfO0ErPD9Uv8TEKp03/SZYKC5rI1iV5TsfiV++3WzmTY0NoASkunSb+BnqK9 G7x2BG9w7Da1OQxRM3ljjrwiY9JpoItfNOAAGflI5ZJ+PYW+tDtH5IY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:28 2025 by rpki-client