$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/44cd5d7c-22e1-3925-825b-4e5c8531d1df.roa File: 44cd5d7c-22e1-3925-825b-4e5c8531d1df.roa (raw, json) Hash identifier: MRjauMC+qBotIehuBIYFhccrJRZtd1GtCRfdzsiD2Co= Subject key identifier: 32:1E:E5:90:8E:0C:43:12:CB:BC:1D:C7:1C:6D:86:B0:4D:7A:BE:82 Certificate issuer: /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd Certificate serial: 010D0C9F432858497C7CDCEDAAD33DF8A6C39D00 Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/44cd5d7c-22e1-3925-825b-4e5c8531d1df.roa Signing time: Fri 11 Apr 2025 03:05:39 +0000 ROA not before: Fri 11 Apr 2025 03:05:39 +0000 ROA not after: Thu 10 Jul 2025 03:05:39 +0000 asID: 14277 IP address blocks: 65.50.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:7c:dc:ed:aa:d3:3d:f8:a6:c3:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd Validity Not Before: Apr 11 03:05:39 2025 GMT Not After : Jul 10 03:05:39 2025 GMT Subject: CN=b6867c14-daaf-4a99-bb4b-772fff117738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:92:65:70:b3:22:0f:51:94:e2:e8:01:e7: 6d:78:b5:58:b5:1e:29:72:ed:0a:b9:b8:32:ca:70: 16:82:f1:8f:be:2c:36:a7:9c:e0:8c:a4:eb:25:2a: aa:d1:a7:a9:ed:87:3e:31:81:12:ee:49:07:34:36: 66:14:98:01:46:20:e7:4f:ed:a3:b3:ca:d3:29:f8: b1:9c:f7:4b:9c:f4:62:92:97:92:b0:4e:8c:e3:b7: a2:4e:97:0b:b9:5a:b1:2f:86:fc:6d:b2:aa:71:e5: 8a:28:cf:6a:8e:24:8a:b1:0c:28:c4:c8:ed:e8:0c: 5e:b4:0e:d8:a5:d0:e9:0d:26:a9:77:ca:c2:a3:15: b0:6f:a9:83:94:4b:30:0a:29:d5:12:da:78:45:f5: 0b:ef:f5:f1:b0:4e:39:8f:25:27:2c:c6:53:ea:06: e4:7f:d0:a1:5d:23:d9:83:91:9b:1e:52:0b:dc:b1: c6:b1:2a:f4:0d:4c:c8:13:f1:f7:66:1b:70:8a:d5: 19:35:4f:31:63:3c:8a:3c:26:6a:36:2f:c3:a6:c3: 8c:81:c2:70:d5:ee:44:cd:35:4f:ac:b9:fa:de:5c: 5b:18:6b:42:a7:13:5f:ba:a0:f9:40:86:2c:49:93: a5:ae:dd:b9:8d:9c:b0:bc:36:18:55:65:87:b2:f2: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1E:E5:90:8E:0C:43:12:CB:BC:1D:C7:1C:6D:86:B0:4D:7A:BE:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/44cd5d7c-22e1-3925-825b-4e5c8531d1df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl X509v3 Authority Key Identifier: keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer sbgp-ipAddrBlock: critical IPv4: 65.50.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:50:b1:2f:0c:dc:e1:83:68:c9:25:11:dc:5a:8b:2f:50:d6: c9:17:0a:a3:91:43:5e:87:c7:2d:1b:02:d1:49:0d:bf:1a:f0: e1:1b:6a:2f:f6:8b:cf:36:87:50:ba:63:cc:88:11:97:f8:28: e6:6a:6d:32:d2:e5:83:14:1e:38:8f:b6:4c:e2:6b:63:82:42: 69:ba:66:27:f9:64:c0:bd:89:7f:d4:35:91:5a:e4:f9:36:2d: ec:02:f7:6a:56:3c:15:2b:d6:22:e4:99:a9:aa:50:e7:cb:99: 01:0e:0a:12:87:6c:1f:86:67:0c:96:45:c4:c8:d4:2d:83:5f: 7c:8d:9b:33:f2:75:51:c5:a7:67:53:69:a8:be:e3:df:ac:40: dd:b3:2b:8c:fc:f4:b5:e2:97:cc:94:eb:f4:29:4e:96:8f:64: cc:af:35:1b:3f:82:c2:af:5d:53:59:41:c7:54:34:a7:4d:10: 81:60:ae:45:29:0e:fa:8a:28:2d:c7:59:3e:06:d3:a4:d9:33: 8c:2a:d9:eb:e5:ed:a0:a4:0f:80:6f:c5:49:46:9a:24:8b:6f: e0:89:bc:24:b7:6f:be:81:d3:5c:50:2a:86:18:52:45:41:cb: 7d:55:c2:4b:f8:e7:e1:e6:ca:cd:1d:25:68:b3:24:0a:74:4b: ca:6f:66:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8fNztqtM9+KbDnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ5ZTU3ZmItMzk1NC00YzJiLWE1OTYtYTAwMWMzNGQy M2RkMB4XDTI1MDQxMTAzMDUzOVoXDTI1MDcxMDAzMDUzOVowLzEtMCsGA1UEAxMk YjY4NjdjMTQtZGFhZi00YTk5LWJiNGItNzcyZmZmMTE3NzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhaSZXCzIg9RlOLoAedteLVYtR4pcu0Kubgy ynAWgvGPviw2p5zgjKTrJSqq0aep7Yc+MYES7kkHNDZmFJgBRiDnT+2js8rTKfix nPdLnPRikpeSsE6M47eiTpcLuVqxL4b8bbKqceWKKM9qjiSKsQwoxMjt6AxetA7Y pdDpDSapd8rCoxWwb6mDlEswCinVEtp4RfUL7/XxsE45jyUnLMZT6gbkf9ChXSPZ g5GbHlIL3LHGsSr0DUzIE/H3ZhtwitUZNU8xYzyKPCZqNi/DpsOMgcJw1e5EzTVP rLn63lxbGGtCpxNfuqD5QIYsSZOlrt25jZywvDYYVWWHsvK4hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIe5ZCODEMSy7wdxxxthrBNer6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZDll NTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAxYzM0ZDIzZGQvNDRjZDVkN2MtMjJlMS0z OTI1LTgyNWItNGU1Yzg1MzFkMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmQ5ZTU3ZmItMzk1NC00YzJiLWE1 OTYtYTAwMWMzNGQyM2RkLzJkOWU1N2ZiLTM5NTQtNGMyYi1hNTk2LWEwMDFjMzRk MjNkZC5jcmwwHwYDVR0jBBgwFoAUrG+y7qJbrT9ofrhxYmZ7I7vCGDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZDllNTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAx YzM0ZDIzZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQTKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9QsS8M3OGDaMklEdxaiy9Q1skXCqORQ16Hxy0bAtFJDb8a8OEbai/2 i882h1C6Y8yIEZf4KOZqbTLS5YMUHjiPtkzia2OCQmm6Zif5ZMC9iX/UNZFa5Pk2 LewC92pWPBUr1iLkmamqUOfLmQEOChKHbB+GZwyWRcTI1C2DX3yNmzPydVHFp2dT aai+49+sQN2zK4z89LXil8yU6/QpTpaPZMyvNRs/gsKvXVNZQcdUNKdNEIFgrkUp DvqKKC3HWT4G06TZM4wq2evl7aCkD4BvxUlGmiSLb+CJvCS3b76B01xQKoYYUkVB y31Vwkv45+Hmys0dJWizJAp0S8pvZhc= -----END CERTIFICATE-----Generated at Tue May 13 06:24:10 2025 by rpki-client