$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d017b0d1-5b17-3f0b-a9d3-48c111130e14.roa File: d017b0d1-5b17-3f0b-a9d3-48c111130e14.roa (raw, json) Hash identifier: I6TGYjVq3X38M9obQ/P3hszBEtkcceSyq8l1wP6eZtc= Subject key identifier: A4:59:DF:F3:C0:CE:C9:28:D5:C8:F3:C0:F3:ED:D0:65:E5:4B:E7:EA Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285849BF3F585F930AE44BE9658A80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d017b0d1-5b17-3f0b-a9d3-48c111130e14.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 40244 IP address blocks: 66.96.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:58:5f:93:0a:e4:4b:e9:65:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=e6ccd2fb-996c-49eb-a658-70004b9fa782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:64:47:2c:99:6b:07:26:16:e7:4f:73:3e:cf: aa:78:d1:a2:7a:89:dc:fa:9e:fa:36:63:4e:3e:3d: 81:3c:5f:86:da:61:10:07:c4:58:6b:af:a9:d9:a0: 3e:82:07:0f:75:23:69:9a:11:ee:ae:04:ac:64:1b: 9f:f7:b2:fa:41:e4:11:6e:45:71:85:0a:7e:3b:ba: 0d:0d:3a:f4:09:63:fb:13:a6:80:93:2e:e2:c0:2c: 5d:1c:7d:45:65:67:97:40:00:ab:9a:32:e2:29:28: 7d:34:c0:e9:0c:ad:f7:32:e2:de:fb:1a:ab:80:37: f2:88:f5:51:52:da:e9:6e:5d:27:b8:e2:bf:c0:f7: a3:24:83:bb:db:9e:bf:85:44:11:19:7e:58:02:9a: 2a:28:cc:33:57:ce:55:da:a3:ab:5c:35:9d:9b:52: 1d:76:29:49:cc:12:fc:ea:38:e3:cb:32:c4:61:22: 94:1e:aa:49:f1:b5:e4:34:c8:8e:00:47:ee:d9:27: 9c:f5:73:c1:a5:34:1f:52:44:aa:bb:d2:6f:70:45: 6b:2b:3a:8a:95:a6:ab:78:b9:7b:02:0b:ad:20:ba: df:84:a0:bb:94:8e:32:d9:05:91:a8:8d:21:0f:1e: 29:0c:18:94:e0:9e:90:7c:ee:b8:9e:2c:c6:3a:09: 90:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:59:DF:F3:C0:CE:C9:28:D5:C8:F3:C0:F3:ED:D0:65:E5:4B:E7:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d017b0d1-5b17-3f0b-a9d3-48c111130e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.96.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0e:80:e4:4a:b8:77:97:61:0c:88:ae:87:15:3e:7c:b3:d7: fe:99:4f:53:32:ad:81:c4:bd:33:77:a7:db:73:34:15:b4:53: 6f:f2:f2:03:65:da:42:36:31:90:ae:7a:ab:0f:5b:57:2b:44: 63:65:0b:6e:54:34:73:a5:75:7d:20:d4:ec:63:f3:32:60:af: d4:ce:a8:0f:e3:51:cc:82:45:69:44:a4:e3:27:22:77:e8:fa: e3:58:9c:6a:46:e0:ce:7c:22:a7:13:cb:11:5d:d5:d9:75:99: 18:12:fd:d4:b3:38:6e:29:29:44:c7:ec:c6:16:50:0e:8c:dd: 64:58:04:8c:91:29:4d:f8:5b:99:66:8e:2f:84:36:a1:db:bf: b9:88:25:bd:5e:e1:03:cb:fe:24:16:c0:35:2a:de:3d:e1:7d: 6f:3b:28:ed:dc:78:e6:91:ca:f6:71:3a:26:d5:66:2a:e4:22: c1:3b:e7:22:50:e2:d3:04:e1:2d:f7:13:9d:5b:31:56:ec:10: dd:d9:1a:82:f7:7b:d0:49:9c:85:71:23:89:df:b1:d2:7b:81: 47:01:03:74:dc:2a:81:cc:83:cf:84:65:45:c3:ee:96:bf:af: 03:87:94:20:68:42:9f:3d:2e:e5:dd:88:43:03:7a:2e:ee:ec: 33:bf:5f:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P1hfkwrkS+llioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZTZjY2QyZmItOTk2Yy00OWViLWE2NTgtNzAwMDRiOWZhNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmRHLJlrByYW509zPs+qeNGieonc+p76NmNO Pj2BPF+G2mEQB8RYa6+p2aA+ggcPdSNpmhHurgSsZBuf97L6QeQRbkVxhQp+O7oN DTr0CWP7E6aAky7iwCxdHH1FZWeXQACrmjLiKSh9NMDpDK33MuLe+xqrgDfyiPVR Utrpbl0nuOK/wPejJIO7256/hUQRGX5YApoqKMwzV85V2qOrXDWdm1IddilJzBL8 6jjjyzLEYSKUHqpJ8bXkNMiOAEfu2Sec9XPBpTQfUkSqu9JvcEVrKzqKlaareLl7 AgutILrfhKC7lI4y2QWRqI0hDx4pDBiU4J6QfO64nizGOgmQNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRZ3/PAzsko1cjzwPPt0GXlS+fqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDAxN2IwZDEtNWIxNy0z ZjBiLWE5ZDMtNDhjMTExMTMwZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmBVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUOgORKuHeXYQyIrocVPnyz1/6ZT1MyrYHEvTN3p9tzNBW0U2/y8gNl 2kI2MZCueqsPW1crRGNlC25UNHOldX0g1Oxj8zJgr9TOqA/jUcyCRWlEpOMnInfo +uNYnGpG4M58IqcTyxFd1dl1mRgS/dSzOG4pKUTH7MYWUA6M3WRYBIyRKU34W5lm ji+ENqHbv7mIJb1e4QPL/iQWwDUq3j3hfW87KO3ceOaRyvZxOibVZirkIsE75yJQ 4tME4S33E51bMVbsEN3ZGoL3e9BJnIVxI4nfsdJ7gUcBA3TcKoHMg8+EZUXD7pa/ rwOHlCBoQp89LuXdiEMDei7u7DO/XxU= -----END CERTIFICATE-----Generated at Sat May 10 10:38:31 2025 by rpki-client