$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f0bf0382-21ed-3a77-938b-12a45d4d7c78.roa File: f0bf0382-21ed-3a77-938b-12a45d4d7c78.roa (raw, json) Hash identifier: 5u5Jj+9nQRbv1oG4HYwSoQri0Nvm4feklXvsC7zYcXs= Subject key identifier: 73:99:60:7A:EA:B0:77:DA:CD:4D:0A:2D:37:48:1B:A4:48:95:14:D2 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849780F137E7B78A6132B6BBC00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f0bf0382-21ed-3a77-938b-12a45d4d7c78.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 174 IP address blocks: 50.7.128.0/22 maxlen: 22 50.7.132.0/22 maxlen: 22 50.7.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:13:7e:7b:78:a6:13:2b:6b:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=46711b6a-bcfc-4bb0-9a1e-fed39bdfd013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:a1:d7:43:ce:06:44:53:d9:61:df:9f:67: 42:d6:c5:b4:35:ff:a2:e0:bc:ef:70:c1:50:60:67: 05:87:b1:4f:8b:4a:4b:a1:60:27:a3:07:14:96:ff: 9d:d1:01:01:3c:dd:77:f5:03:53:2d:ff:b1:ea:c7: df:a3:be:1d:4d:4b:1e:8d:c2:ba:48:2d:e0:91:95: 4d:de:b5:4a:a7:31:04:23:5b:9f:df:8d:d5:1a:a8: 5c:e0:ad:a5:67:fe:66:32:5d:9e:f4:34:3a:b4:77: a2:3b:12:65:b6:6f:fe:6d:08:7a:eb:5f:f1:12:34: 72:4b:68:4d:b3:5c:b7:1b:be:af:b2:c2:f7:60:e5: 27:e0:c2:23:09:f4:dc:6b:f3:a8:1d:5b:a0:4e:e8: 56:5a:fa:c8:b6:26:a3:6a:b5:f9:e9:b7:b3:e5:f5: ce:5c:18:aa:65:bf:37:24:36:01:39:f2:5d:71:9f: b7:70:13:59:6f:1b:16:bf:f5:32:da:96:03:e7:5f: 74:10:9c:a2:8a:75:09:1d:a6:2f:61:ac:0d:75:4d: 7e:c9:71:ed:ac:43:1f:8f:c5:2e:a3:8b:eb:a0:d3: 49:91:86:c2:33:b1:7e:0c:20:06:3b:10:a6:32:4e: 53:bd:b6:b4:aa:6d:67:1e:ee:49:b0:ae:f7:6e:63: 63:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:99:60:7A:EA:B0:77:DA:CD:4D:0A:2D:37:48:1B:A4:48:95:14:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f0bf0382-21ed-3a77-938b-12a45d4d7c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.128.0-50.7.139.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:fb:e7:9a:ad:ae:a7:db:21:86:9d:19:ee:d8:8a:bf:63:66: 19:58:fc:2e:a5:df:4d:a5:bb:c1:05:ea:b9:fa:43:fa:ce:c3: ec:72:9a:5d:a4:d3:84:90:11:d4:d8:54:86:9c:18:3e:a9:bd: 4e:e3:16:4e:72:20:02:77:e2:6e:de:43:19:18:f2:2b:91:79: 03:52:46:be:93:b1:c4:da:08:f7:70:fe:13:ca:3a:87:c8:a6: 0b:67:d0:58:21:c7:cf:c2:17:fe:5e:5b:a9:41:5c:c4:c7:7b: 18:3e:61:03:5f:17:f6:ab:d5:96:8b:28:5b:ab:99:21:e2:64: 75:51:2a:7b:db:7f:94:bb:7e:d2:36:25:67:79:fe:49:9d:19: c4:b2:cb:5b:b3:fa:61:8d:ae:7c:c3:41:12:3b:19:69:1f:63: 5f:9a:c0:e9:e2:04:4e:35:3c:8a:3c:72:7a:d4:87:c3:9e:18: e3:87:aa:6d:9a:8f:fb:a8:b2:f5:77:4b:e9:07:bf:0f:9f:68: 2b:43:22:1b:e4:6e:9b:e1:6d:c6:bc:bf:4d:88:eb:ae:67:e4: 7f:8e:7b:41:96:2e:ae:a4:b5:3e:fb:f0:dd:26:ef:e0:cf:ec: 58:18:47:01:58:46:a3:9e:70:7f:fd:d0:57:6d:68:d6:ca:46: fb:fa:ea:ce -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEl4DxN+e3imEytrvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk NDY3MTFiNmEtYmNmYy00YmIwLTlhMWUtZmVkMzliZGZkMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Bah10POBkRT2WHfn2dC1sW0Nf+i4LzvcMFQ YGcFh7FPi0pLoWAnowcUlv+d0QEBPN139QNTLf+x6sffo74dTUsejcK6SC3gkZVN 3rVKpzEEI1uf343VGqhc4K2lZ/5mMl2e9DQ6tHeiOxJltm/+bQh661/xEjRyS2hN s1y3G76vssL3YOUn4MIjCfTca/OoHVugTuhWWvrItiajarX56bez5fXOXBiqZb83 JDYBOfJdcZ+3cBNZbxsWv/Uy2pYD5190EJyiinUJHaYvYawNdU1+yXHtrEMfj8Uu o4vroNNJkYbCM7F+DCAGOxCmMk5Tvba0qm1nHu5JsK73bmNj5wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHOZYHrqsHfazU0KLTdIG6RIlRTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZjBiZjAzODItMjFlZC0z YTc3LTkzOGItMTJhNDVkNGQ3Yzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAcyB4AD BAIyB4gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJfvnmq2up9shhp0Z7tiKv2NmGVj8LqXfTaW7wQXqufpD +s7D7HKaXaTThJAR1NhUhpwYPqm9TuMWTnIgAnfibt5DGRjyK5F5A1JGvpOxxNoI 93D+E8o6h8imC2fQWCHHz8IX/l5bqUFcxMd7GD5hA18X9qvVlosoW6uZIeJkdVEq e9t/lLt+0jYlZ3n+SZ0ZxLLLW7P6YY2ufMNBEjsZaR9jX5rA6eIETjU8ijxyetSH w54Y44eqbZqP+6iy9XdL6Qe/D59oK0MiG+Rum+Ftxry/TYjrrmfkf457QZYurqS1 Pvvw3Sbv4M/sWBhHAVhGo55wf/3QV21o1spG+/rqzg== -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:25 2025 by rpki-client