$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa File: 5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa (raw, json) Hash identifier: E4qRQicuy2Zp8PFAl/lvOXKUjPrkadZpeShHuz4Dzg8= Subject key identifier: 3A:06:A0:A9:C0:A7:41:3A:BB:0A:D7:A5:4B:49:78:DD:75:1E:AE:36 Certificate issuer: /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f Certificate serial: 010D0C9F432858496A19A9D1A398BA0550ABEE00 Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 64227 IP address blocks: 50.20.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:a9:d1:a3:98:ba:05:50:ab:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=9d898bf6-b0ce-4daf-9e87-52c7b0fd5c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:59:fa:c4:b8:49:f8:32:33:73:d1:24:b5: 1b:16:bd:6f:13:ed:1b:5f:13:d2:77:bb:8f:99:56: fb:a3:ed:1a:4b:91:b4:4d:98:d5:c9:72:40:83:cf: 92:31:01:db:9b:12:e3:53:f7:90:f0:53:ff:48:b0: 81:ab:97:12:02:44:99:61:99:13:4e:c1:fe:b9:63: 65:ff:36:db:0e:29:4e:8b:9e:e0:0f:6a:3b:63:c1: c9:2c:00:9a:31:e1:a8:a1:68:25:a7:8a:f2:1c:d0: b3:54:b1:92:1f:3d:18:dd:dc:25:af:d1:69:5f:74: f8:0e:32:25:da:72:f2:e1:47:98:2b:e6:eb:67:da: 94:a2:66:a0:b9:33:d7:cd:15:cd:58:88:d7:9c:49: e6:b2:c0:3a:d5:97:aa:3d:11:84:e5:23:50:0d:2a: ce:35:9a:e3:33:25:89:e4:dd:b5:d2:75:96:64:07: 6b:16:b4:92:c9:1f:ba:7c:a9:a7:8f:c0:ee:d6:79: af:70:31:21:2f:a8:08:69:39:af:e8:16:1f:23:6a: bf:2c:c5:9c:c1:f2:74:39:c8:97:de:b4:33:f8:81: c6:61:33:00:86:cf:3c:47:cc:75:43:4a:0d:78:63: ed:94:32:49:29:4e:e8:a6:8f:39:e7:fe:b7:b8:e7: db:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:06:A0:A9:C0:A7:41:3A:BB:0A:D7:A5:4B:49:78:DD:75:1E:AE:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl X509v3 Authority Key Identifier: keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer sbgp-ipAddrBlock: critical IPv4: 50.20.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:da:ed:1a:f1:93:d7:cd:c1:2f:2f:12:3a:c4:ef:3f:43:d8: c1:d5:e9:39:d5:86:ab:87:bb:41:4c:b3:61:13:97:c0:f1:70: 92:f9:78:e1:c4:05:38:0f:89:f1:5a:9a:60:e3:d7:b7:83:ab: 02:cb:33:b6:da:bb:94:20:97:ea:fd:89:57:bc:35:7c:e4:74: dd:ae:75:63:62:8d:0d:28:e2:37:41:77:19:6f:f9:32:62:16: 89:cc:aa:92:07:fa:ac:77:b5:8f:d8:df:1f:5e:82:be:b0:41: 4e:7d:f3:94:b0:5c:0f:2c:35:07:aa:8e:b5:47:18:d3:73:df: 86:ee:5c:24:1e:e2:8f:f2:2e:cc:e4:e2:49:b3:d7:12:a4:a3: a2:a5:9a:06:73:36:cc:f7:19:15:04:53:3e:54:d8:ee:a4:6c: 5e:27:6d:00:f9:f2:1e:e0:81:80:b3:16:dd:2e:74:2e:f7:ab: 30:31:7b:88:71:d4:e2:54:4b:37:eb:dc:ce:49:ea:92:48:53: 8a:45:67:71:7b:b0:e9:a0:af:2f:1c:82:47:02:91:53:42:1a: bc:c7:03:d9:be:a5:d7:0a:cd:91:f1:01:7f:0b:a3:4e:2d:c2: 69:0f:43:ee:a8:a0:a1:f4:a9:52:fb:ef:e4:f3:df:4a:78:ea: 34:a4:4d:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGanRo5i6BVCr7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcwYjg2ZjUtMGFlNy00ZTZjLWEzMmUtMDgzMTAxNTZk ZjNmMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk OWQ4OThiZjYtYjBjZS00ZGFmLTllODctNTJjN2IwZmQ1YzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0elZ+sS4SfgyM3PRJLUbFr1vE+0bXxPSd7uP mVb7o+0aS5G0TZjVyXJAg8+SMQHbmxLjU/eQ8FP/SLCBq5cSAkSZYZkTTsH+uWNl /zbbDilOi57gD2o7Y8HJLACaMeGooWglp4ryHNCzVLGSHz0Y3dwlr9FpX3T4DjIl 2nLy4UeYK+brZ9qUomaguTPXzRXNWIjXnEnmssA61ZeqPRGE5SNQDSrONZrjMyWJ 5N210nWWZAdrFrSSyR+6fKmnj8Du1nmvcDEhL6gIaTmv6BYfI2q/LMWcwfJ0OciX 3rQz+IHGYTMAhs88R8x1Q0oNeGPtlDJJKU7opo855/63uOfbmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoGoKnAp0E6uwrXpUtJeN11Hq42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBi ODZmNS0wYWU3LTRlNmMtYTMyZS0wODMxMDE1NmRmM2YvNWFmNmMzYTQtZGU0Yy0z NTUzLTgxYzYtNjAwNDFiMGEyYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzcwYjg2ZjUtMGFlNy00ZTZjLWEz MmUtMDgzMTAxNTZkZjNmLzM3MGI4NmY1LTBhZTctNGU2Yy1hMzJlLTA4MzEwMTU2 ZGYzZi5jcmwwHwYDVR0jBBgwFoAUKnBuVYRj4+5yYJDqTSbO8pwumNAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBiODZmNS0wYWU3LTRlNmMtYTMyZS0wODMx MDE1NmRmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMhTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFba7Rrxk9fNwS8vEjrE7z9D2MHV6TnVhquHu0FMs2ETl8DxcJL5eOHE BTgPifFammDj17eDqwLLM7bau5Qgl+r9iVe8NXzkdN2udWNijQ0o4jdBdxlv+TJi FonMqpIH+qx3tY/Y3x9egr6wQU5985SwXA8sNQeqjrVHGNNz34buXCQe4o/yLszk 4kmz1xKko6KlmgZzNsz3GRUEUz5U2O6kbF4nbQD58h7ggYCzFt0udC73qzAxe4hx 1OJUSzfr3M5J6pJIU4pFZ3F7sOmgry8cgkcCkVNCGrzHA9m+pdcKzZHxAX8Lo04t wmkPQ+6ooKH0qVL77+Tz30p46jSkTdE= -----END CERTIFICATE-----Generated at Wed May 7 00:32:23 2025 by rpki-client