$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/245fdf5a-151d-3dee-b279-65a5e20b184a.roa File: 245fdf5a-151d-3dee-b279-65a5e20b184a.roa (raw, json) Hash identifier: 7uIo0NrYn0gfb9fub9LzTREjhRQsUi0O43aERR44NOc= Subject key identifier: 28:18:22:37:60:90:8B:6E:C9:1A:29:AC:B4:C2:44:C9:42:36:57:66 Certificate issuer: /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd Certificate serial: 010D0C9F4328584978A2031D04C15A24E7DE0640 Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/245fdf5a-151d-3dee-b279-65a5e20b184a.roa Signing time: Wed 09 Apr 2025 17:57:16 +0000 ROA not before: Wed 09 Apr 2025 17:57:16 +0000 ROA not after: Tue 08 Jul 2025 17:57:16 +0000 asID: 14277 IP address blocks: 65.50.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:a2:03:1d:04:c1:5a:24:e7:de:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd Validity Not Before: Apr 9 17:57:16 2025 GMT Not After : Jul 8 17:57:16 2025 GMT Subject: CN=80a30add-0561-4373-bf98-93d36b61c7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:f7:6d:94:b5:96:95:32:27:9d:7c:a1:42: a7:30:ae:45:0b:9b:68:36:f0:a9:c5:46:d7:06:7f: 5f:14:8b:bf:e5:c0:c7:94:4d:e6:8b:ea:9c:50:c1: 72:08:47:d9:a5:2b:c1:59:a9:33:27:b7:8f:f9:14: 54:2d:45:ed:6b:23:c7:57:8d:e6:b2:07:f9:09:b9: 18:5d:d3:63:01:35:b4:74:de:5f:3c:ef:ee:77:da: ef:90:5e:b0:88:42:a5:b5:9c:ce:a3:a7:c8:e7:13: ff:59:05:f4:f1:26:bf:a0:d7:8f:c5:7c:8b:1c:5d: db:5f:d8:86:cc:42:3a:95:5a:8d:e9:dd:1d:43:e4: 60:db:f4:e3:64:08:ee:9b:8a:cf:76:bb:a6:d2:e6: f7:4a:b1:f5:06:cb:94:4d:18:63:2f:6d:09:d2:ab: 0c:f0:ba:e5:55:ce:0b:91:e8:11:26:56:75:5c:21: 52:3c:eb:f9:1e:f9:79:93:37:ac:d7:a0:a2:9b:10: 78:6b:b1:26:29:56:22:ba:c0:e7:fb:4a:f5:fe:6f: 12:be:35:aa:84:76:6b:6d:92:55:52:40:bc:e4:f0: 86:09:76:e9:ed:7a:19:de:8e:4b:cb:ee:96:a8:fd: 88:f6:83:89:48:b7:2b:0b:76:87:31:c5:1e:bc:13: e0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:18:22:37:60:90:8B:6E:C9:1A:29:AC:B4:C2:44:C9:42:36:57:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/245fdf5a-151d-3dee-b279-65a5e20b184a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl X509v3 Authority Key Identifier: keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer sbgp-ipAddrBlock: critical IPv4: 65.50.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:14:0f:63:a6:b1:cd:6f:92:fe:5f:cf:d2:5a:e7:69:a2:0c: 9a:9c:82:1f:5e:17:74:78:b9:40:8a:30:33:56:00:01:26:59: 49:14:40:7c:05:b4:04:a1:9f:ce:e0:05:3d:ad:17:d6:ee:97: 09:ca:8a:e5:6c:d6:99:61:7a:9b:4d:b3:d9:63:f8:d7:bf:2c: 7d:62:27:85:35:a6:2b:55:92:c7:ff:6d:d0:d9:f4:21:61:4c: 02:d6:37:5e:c4:f7:99:ca:41:6d:ff:d4:cc:c4:f7:0a:5d:26: 9d:3c:e0:74:20:a8:c8:61:89:12:ed:1c:67:cd:e1:1b:c1:ec: e3:53:01:0d:77:13:1d:7c:f8:0a:c6:b6:ea:b1:7c:8f:8e:5e: a4:23:ed:c2:eb:15:08:53:1a:3b:00:e4:a9:e3:b9:d6:d0:c8: 2d:0a:de:57:ad:ab:65:f0:05:0c:de:01:8d:14:11:52:c2:8f: 1d:63:20:c5:6e:e4:e4:27:cf:7a:ff:cb:27:21:0a:c6:1c:7d: 89:16:b4:fc:23:b5:7e:f1:45:b2:47:54:fb:00:ac:34:7f:cd: b0:e7:d9:2c:a0:02:a5:66:ab:d8:60:3d:f8:c9:92:bf:84:13: a0:97:b7:cc:fc:1b:78:81:35:b9:20:d4:a0:12:55:15:a1:70: ee:a4:d9:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4ogMdBMFaJOfeBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ5ZTU3ZmItMzk1NC00YzJiLWE1OTYtYTAwMWMzNGQy M2RkMB4XDTI1MDQwOTE3NTcxNloXDTI1MDcwODE3NTcxNlowLzEtMCsGA1UEAxMk ODBhMzBhZGQtMDU2MS00MzczLWJmOTgtOTNkMzZiNjFjN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQT3bZS1lpUyJ518oUKnMK5FC5toNvCpxUbX Bn9fFIu/5cDHlE3mi+qcUMFyCEfZpSvBWakzJ7eP+RRULUXtayPHV43msgf5CbkY XdNjATW0dN5fPO/ud9rvkF6wiEKltZzOo6fI5xP/WQX08Sa/oNePxXyLHF3bX9iG zEI6lVqN6d0dQ+Rg2/TjZAjum4rPdrum0ub3SrH1BsuUTRhjL20J0qsM8LrlVc4L kegRJlZ1XCFSPOv5Hvl5kzes16CimxB4a7EmKVYiusDn+0r1/m8SvjWqhHZrbZJV UkC85PCGCXbp7XoZ3o5Ly+6WqP2I9oOJSLcrC3aHMcUevBPgLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgYIjdgkItuyRoprLTCRMlCNldmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZDll NTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAxYzM0ZDIzZGQvMjQ1ZmRmNWEtMTUxZC0z ZGVlLWIyNzktNjVhNWUyMGIxODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmQ5ZTU3ZmItMzk1NC00YzJiLWE1 OTYtYTAwMWMzNGQyM2RkLzJkOWU1N2ZiLTM5NTQtNGMyYi1hNTk2LWEwMDFjMzRk MjNkZC5jcmwwHwYDVR0jBBgwFoAUrG+y7qJbrT9ofrhxYmZ7I7vCGDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZDllNTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAx YzM0ZDIzZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgUD2Omsc1vkv5fz9Ja52miDJqcgh9eF3R4uUCKMDNWAAEmWUkUQHwF tAShn87gBT2tF9bulwnKiuVs1plheptNs9lj+Ne/LH1iJ4U1pitVksf/bdDZ9CFh TALWN17E95nKQW3/1MzE9wpdJp084HQgqMhhiRLtHGfN4RvB7ONTAQ13Ex18+ArG tuqxfI+OXqQj7cLrFQhTGjsA5KnjudbQyC0K3letq2XwBQzeAY0UEVLCjx1jIMVu 5OQnz3r/yychCsYcfYkWtPwjtX7xRbJHVPsArDR/zbDn2SygAqVmq9hgPfjJkr+E E6CXt8z8G3iBNbkg1KASVRWhcO6k2V0= -----END CERTIFICATE-----Generated at Tue May 13 06:26:02 2025 by rpki-client