$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d7e99b17-bd1e-3606-9805-62837feec2a0.roa File: d7e99b17-bd1e-3606-9805-62837feec2a0.roa (raw, json) Hash identifier: d9bdeC+u2fXfpGtgEgOnyFXUZb0Ers12EbYPXW5zRVI= Subject key identifier: 38:D1:35:54:C8:8B:E5:21:1B:1B:60:02:2A:CC:DB:F1:E8:B8:16:92 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858492CB22C43DD4AB8191449D180 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d7e99b17-bd1e-3606-9805-62837feec2a0.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 174 IP address blocks: 50.7.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:2c:43:dd:4a:b8:19:14:49:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a2c7a621-a50b-4ef5-9d24-954a73dd0ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ac:48:27:20:d0:ad:12:0c:96:56:5c:09:76: c1:2d:2c:f4:0d:89:f9:f4:72:1a:0e:1a:96:4a:33: af:ed:2b:79:12:21:46:68:59:44:59:8d:d4:bf:81: c2:53:f1:6a:e6:ce:81:43:32:cb:50:9c:26:6d:44: fe:a5:10:72:eb:21:b2:be:49:93:9b:3e:9f:7a:65: 47:e6:f2:71:2c:8d:9b:11:4d:06:a8:04:12:97:99: f0:d5:43:25:ca:23:e4:80:fb:5e:88:6d:b1:c5:cd: 9e:61:f1:62:52:76:24:a4:af:b9:fb:4c:56:2d:15: 78:9f:a4:c0:d7:ce:01:f0:6a:b0:7f:a3:4e:7b:10: 93:ae:c6:56:30:74:72:de:38:00:8c:72:97:2b:1f: 9f:15:05:c7:bf:14:24:45:68:e7:d2:af:43:2a:63: 2e:a5:7a:4b:3e:6f:59:94:08:f0:2b:3b:5e:02:56: 1c:b0:6c:bd:5c:15:2c:b7:55:03:6c:12:6d:8d:8c: ac:8d:ce:41:3f:cc:00:5a:f5:5b:8c:76:e7:31:31: e5:5a:cd:88:7e:86:35:58:ec:e6:90:9a:71:81:3f: 90:a3:bb:0c:6a:63:e2:f4:8a:3d:90:3f:18:de:08: 50:23:8a:00:13:42:78:e8:2e:34:c8:1a:b2:fc:7d: 5a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D1:35:54:C8:8B:E5:21:1B:1B:60:02:2A:CC:DB:F1:E8:B8:16:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d7e99b17-bd1e-3606-9805-62837feec2a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e6:66:0f:a3:57:9f:3e:06:bc:a4:1a:69:08:61:94:f9:7d: 7d:4b:a5:0e:92:96:a8:66:ea:0c:10:fa:65:34:ae:12:e3:ee: 7b:8e:d4:fa:31:1f:a9:0c:20:5f:c8:66:26:a0:e1:35:34:f1: 30:02:8e:31:70:7a:a7:da:51:f1:66:53:dc:c2:aa:7f:d4:2b: 29:ca:48:48:c3:b7:93:97:1a:0f:7e:87:78:b9:2d:79:5c:1a: 4c:54:2a:21:65:46:b2:7f:cf:bb:38:c8:c7:92:06:06:8b:c2: ec:b0:c5:43:49:8d:d8:66:5a:29:1d:d9:e9:96:79:25:34:76: c5:e0:e4:5d:35:2a:39:69:57:a2:9c:10:4c:12:ec:cc:82:fe: 42:53:85:33:86:4c:1c:fa:d4:79:a4:5a:b6:8d:2f:fa:af:77: 5f:4f:cb:39:2b:6e:41:0d:a8:62:31:18:b0:f5:a8:78:84:21: d6:3c:75:32:3f:1a:91:58:f2:ac:d6:67:81:74:f9:c8:7b:73: 27:6c:58:44:98:f4:c7:bb:88:4c:e5:5b:5e:05:7e:d1:c7:20: 45:46:22:bd:53:b3:d8:62:33:97:50:d7:58:ac:e1:fb:2c:20: 2c:2a:48:03:71:bf:67:76:5e:d7:3c:1a:7c:38:26:53:50:68: e6:39:d8:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssixD3Uq4GRRJ0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTJjN2E2MjEtYTUwYi00ZWY1LTlkMjQtOTU0YTczZGQwZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaxIJyDQrRIMllZcCXbBLSz0DYn59HIaDhqW SjOv7St5EiFGaFlEWY3Uv4HCU/Fq5s6BQzLLUJwmbUT+pRBy6yGyvkmTmz6femVH 5vJxLI2bEU0GqAQSl5nw1UMlyiPkgPteiG2xxc2eYfFiUnYkpK+5+0xWLRV4n6TA 184B8Gqwf6NOexCTrsZWMHRy3jgAjHKXKx+fFQXHvxQkRWjn0q9DKmMupXpLPm9Z lAjwKzteAlYcsGy9XBUst1UDbBJtjYysjc5BP8wAWvVbjHbnMTHlWs2IfoY1WOzm kJpxgT+Qo7sMamPi9Io9kD8Y3ghQI4oAE0J46C40yBqy/H1ayQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjRNVTIi+UhGxtgAirM2/HouBaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZDdlOTliMTctYmQxZS0z NjA2LTk4MDUtNjI4MzdmZWVjMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPmZg+jV58+BrykGmkIYZT5fX1LpQ6Slqhm6gwQ+mU0rhLj7nuO1Pox H6kMIF/IZiag4TU08TACjjFweqfaUfFmU9zCqn/UKynKSEjDt5OXGg9+h3i5LXlc GkxUKiFlRrJ/z7s4yMeSBgaLwuywxUNJjdhmWikd2emWeSU0dsXg5F01KjlpV6Kc EEwS7MyC/kJThTOGTBz61HmkWraNL/qvd19PyzkrbkENqGIxGLD1qHiEIdY8dTI/ GpFY8qzWZ4F0+ch7cydsWESY9Me7iEzlW14FftHHIEVGIr1Ts9hiM5dQ11is4fss ICwqSANxv2d2Xtc8Gnw4JlNQaOY52Cc= -----END CERTIFICATE-----Generated at Sat Apr 26 13:21:07 2025 by rpki-client