$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d0d1d989-5494-396c-9f5d-aa0c4103d1d4.roa File: d0d1d989-5494-396c-9f5d-aa0c4103d1d4.roa (raw, json) Hash identifier: G1l1xjw1uxvN9TtLDbBt2qodU5g5TthHdlRE1pg8Jqg= Subject key identifier: F3:13:C1:32:56:9B:D7:E6:55:6E:6B:34:9E:72:D4:8F:AF:37:FC:EE Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285849BDDA2170CE3406B3E02F2500 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d0d1d989-5494-396c-9f5d-aa0c4103d1d4.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 61317 IP address blocks: 94.72.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:21:70:ce:34:06:b3:e0:2f:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=c9bcff8e-30f3-4d02-b741-f8f73a0c74c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:ee:09:11:24:a0:4e:e1:b2:eb:f8:26:bf: 36:4c:b6:7c:a4:76:fc:d3:b7:cf:5c:53:92:73:68: 25:54:31:01:82:13:4b:8f:10:53:fb:6a:52:49:2c: 20:b3:54:4f:85:ae:29:20:3a:54:05:dd:8c:ac:1e: 28:36:4c:ec:05:b9:b0:1d:af:31:fc:a1:15:80:34: d0:87:8d:33:c8:36:7f:cf:2a:ff:3f:86:c3:93:1d: 3d:42:c9:f2:5b:c9:76:8e:b7:a1:aa:f8:2b:c0:48: 01:03:b0:8a:1a:22:7f:35:fa:c5:f3:37:07:f5:f1: 1c:37:34:01:59:c3:1f:84:ed:b6:d7:3b:77:fe:55: 4f:ce:9c:f6:77:d6:b9:4a:fe:03:7a:97:bb:9c:7f: 19:9d:06:a2:a7:9a:2b:30:e5:e5:ad:7d:3c:3f:f2: 26:f9:cb:ef:fe:ee:f9:b9:43:c7:c6:9f:a8:cb:ee: 3e:3c:1b:23:fe:a5:b2:b6:82:f4:a7:7d:4c:22:84: a6:c7:8f:a1:65:06:52:28:bc:e5:ce:9f:48:21:9c: 88:00:55:0a:b2:ff:be:e0:d7:9f:2a:df:c9:16:2f: a7:95:95:71:53:c5:f6:29:54:75:7d:c6:0d:9a:fd: a3:43:8c:15:2d:07:09:30:4e:d4:18:72:ee:c5:88: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:13:C1:32:56:9B:D7:E6:55:6E:6B:34:9E:72:D4:8F:AF:37:FC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d0d1d989-5494-396c-9f5d-aa0c4103d1d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 94.72.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c5:7c:23:1e:3d:31:5a:a3:86:ac:17:a4:b0:e3:a3:3a:ea: ec:a3:aa:38:42:19:d9:38:1c:ed:bf:bb:2e:be:3a:91:55:d5: cf:32:be:2a:bf:75:37:36:0f:0c:75:cd:94:ab:04:b8:82:5e: 43:1e:f8:df:1b:c8:13:a8:2a:73:9d:5c:12:cb:e8:93:96:9e: cb:6e:79:6a:1f:c9:9b:f6:81:13:ec:ae:a6:11:2f:1a:98:36: 36:0d:72:6e:12:5f:01:f9:73:f8:8e:fe:dc:53:30:e6:bb:c5: 84:b4:f4:7e:c1:5a:9b:08:85:03:a2:f4:41:68:96:31:86:61: 6b:67:df:69:d1:94:26:a1:2f:8a:38:7d:05:e0:bd:f0:0d:da: 13:71:19:c6:01:8d:e1:59:f8:ea:da:0e:b5:b5:5a:84:19:c5: 54:5e:9f:3b:cb:76:27:ef:ed:83:f3:50:43:87:68:60:e3:e5: 3d:45:19:18:f1:bb:d0:e5:66:ea:45:4a:32:1a:97:58:17:e1: a5:5e:82:e3:2e:e7:6a:60:d5:a0:dd:d0:d0:1a:fb:2c:04:cc: 93:3e:fd:60:06:33:1c:20:44:a1:c7:5e:84:20:e3:bb:bc:01: e0:e4:4b:d7:0b:c2:26:53:b9:4f:d6:94:aa:b2:03:b8:45:c3: 58:37:a3:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iFwzjQGs+AvJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk YzliY2ZmOGUtMzBmMy00ZDAyLWI3NDEtZjhmNzNhMGM3NGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8fuCREkoE7hsuv4Jr82TLZ8pHb807fPXFOS c2glVDEBghNLjxBT+2pSSSwgs1RPha4pIDpUBd2MrB4oNkzsBbmwHa8x/KEVgDTQ h40zyDZ/zyr/P4bDkx09QsnyW8l2jrehqvgrwEgBA7CKGiJ/NfrF8zcH9fEcNzQB WcMfhO221zt3/lVPzpz2d9a5Sv4Depe7nH8ZnQaip5orMOXlrX08P/Im+cvv/u75 uUPHxp+oy+4+PBsj/qWytoL0p31MIoSmx4+hZQZSKLzlzp9IIZyIAFUKsv++4Nef Kt/JFi+nlZVxU8X2KVR1fcYNmv2jQ4wVLQcJME7UGHLuxYgSzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMTwTJWm9fmVW5rNJ5y1I+vN/zuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZDBkMWQ5ODktNTQ5NC0z OTZjLTlmNWQtYWEwYzQxMDNkMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXki0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbFfCMePTFao4asF6Sw46M66uyjqjhCGdk4HO2/uy6+OpFV1c8yviq/ dTc2Dwx1zZSrBLiCXkMe+N8byBOoKnOdXBLL6JOWnstueWofyZv2gRPsrqYRLxqY NjYNcm4SXwH5c/iO/txTMOa7xYS09H7BWpsIhQOi9EFoljGGYWtn32nRlCahL4o4 fQXgvfAN2hNxGcYBjeFZ+OraDrW1WoQZxVRenzvLdifv7YPzUEOHaGDj5T1FGRjx u9DlZupFSjIal1gX4aVeguMu52pg1aDd0NAa+ywEzJM+/WAGMxwgRKHHXoQg47u8 AeDkS9cLwiZTuU/WlKqyA7hFw1g3oxg= -----END CERTIFICATE-----Generated at Sun May 11 04:08:19 2025 by rpki-client