$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a461ba7-42f9-31e3-94c7-e8f14a7af18a.roa File: 2a461ba7-42f9-31e3-94c7-e8f14a7af18a.roa (raw, json) Hash identifier: AyAX+4B7MiGMDtw1R6gvwhpFiBzBHq64VzZEf3ESQRo= Subject key identifier: 4E:9D:74:7B:E0:08:0D:CA:A4:78:68:71:58:B6:63:76:4F:C8:DB:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCE6392CDC0780D47298D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a461ba7-42f9-31e3-94c7-e8f14a7af18a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7725 IP address blocks: 50.79.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:e6:39:2c:dc:07:80:d4:72:98:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=c53010da-1015-4539-ad94-8570f5c6a802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:39:43:2d:6a:2d:60:4c:0b:e7:73:1e:97:27: 1f:f7:7b:c7:dd:1e:ce:9a:cf:c8:df:66:93:1b:d1: 80:4f:bf:cd:72:fd:30:38:ca:26:6c:1f:09:05:f9: 94:6c:d9:07:eb:ef:4d:23:bf:54:4b:47:af:ff:65: 8b:5f:b2:ef:74:b7:0e:ad:10:07:af:bb:ef:00:aa: 06:8d:99:78:f3:f3:4e:31:5e:a4:76:92:c4:62:78: 92:b8:ff:91:6d:41:53:ae:95:55:e6:7e:1d:6f:45: 9b:80:3a:38:b5:ed:f1:4d:99:4e:77:ed:7e:66:84: 7e:e7:f5:b5:3b:4f:4e:80:2c:ba:17:48:8f:03:22: be:86:bf:1e:7a:df:f6:85:57:da:10:65:aa:ec:99: d5:29:47:ed:75:f3:e4:5c:01:21:00:af:30:f5:ac: 03:50:34:cd:e7:1d:5d:ef:27:e7:c8:3d:66:0d:54: 34:3b:80:60:86:60:14:47:43:df:18:79:40:cf:a5: 08:0f:47:85:41:13:e0:55:16:e6:1e:1e:f5:21:65: 9b:b2:d5:19:f8:93:b6:0e:00:a6:05:8a:10:72:11: 41:fe:94:69:87:c2:32:e4:e9:f9:2c:4a:4a:ed:51: 0c:f7:eb:38:69:c1:06:5c:0b:8d:32:6e:92:86:e1: 22:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9D:74:7B:E0:08:0D:CA:A4:78:68:71:58:B6:63:76:4F:C8:DB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a461ba7-42f9-31e3-94c7-e8f14a7af18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 50.79.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d8:df:c7:d2:ea:d8:e0:eb:5a:ba:a9:5b:ca:df:f1:a4:d9: cc:36:66:bb:3b:a0:76:3d:a4:c6:38:b4:27:c7:6d:7b:82:9b: 72:33:fd:48:ef:dd:49:e8:8a:d3:d5:2d:3f:79:28:b3:3d:de: 86:da:c0:69:9e:98:e5:bd:12:72:2a:d3:ef:f0:b7:18:b8:f5: 69:cd:8a:92:f2:fc:18:6e:a4:b1:2e:3d:31:d7:f6:86:a8:ef: 07:73:76:c3:3b:60:a9:93:4b:89:57:f1:74:05:4a:79:d7:9d: e1:89:1e:b8:59:69:e0:03:4f:85:bc:36:96:20:c9:5d:a3:ec: d0:45:a2:be:3b:91:01:24:bd:3a:5f:25:da:8a:a7:8b:2c:14: 54:25:31:20:0a:e2:d8:1f:37:82:75:b4:31:ba:d8:a9:7e:be: 64:19:3e:40:7e:78:8f:dc:da:e9:68:15:c7:78:45:0f:2c:75: e1:1f:29:d7:6e:c7:8b:96:74:b5:74:66:4a:cd:9b:b1:6d:24: c2:b8:fc:98:72:4b:b8:b5:c9:17:51:f0:90:ac:b9:f3:71:09: 19:61:4a:e9:67:d5:ba:d4:fa:69:25:c2:b0:69:b7:00:52:80: 3e:24:ff:2d:f1:70:ee:c8:1a:7e:74:22:46:f2:30:2b:cd:c8: 0b:af:fe:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/OY5LNwHgNRymNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YzUzMDEwZGEtMTAxNS00NTM5LWFkOTQtODU3MGY1YzZhODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDlDLWotYEwL53Melycf93vH3R7Oms/I32aT G9GAT7/Ncv0wOMombB8JBfmUbNkH6+9NI79US0ev/2WLX7LvdLcOrRAHr7vvAKoG jZl48/NOMV6kdpLEYniSuP+RbUFTrpVV5n4db0WbgDo4te3xTZlOd+1+ZoR+5/W1 O09OgCy6F0iPAyK+hr8eet/2hVfaEGWq7JnVKUftdfPkXAEhAK8w9awDUDTN5x1d 7yfnyD1mDVQ0O4BghmAUR0PfGHlAz6UID0eFQRPgVRbmHh71IWWbstUZ+JO2DgCm BYoQchFB/pRph8Iy5On5LEpK7VEM9+s4acEGXAuNMm6ShuEiyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6ddHvgCA3KpHhocVi2Y3ZPyNv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmE0NjFiYTctNDJmOS0z MWUzLTk0YzctZThmMTRhN2FmMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMk+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3Y38fS6tjg61q6qVvK3/Gk2cw2Zrs7oHY9pMY4tCfHbXuCm3Iz/Ujv 3UnoitPVLT95KLM93obawGmemOW9EnIq0+/wtxi49WnNipLy/BhupLEuPTHX9oao 7wdzdsM7YKmTS4lX8XQFSnnXneGJHrhZaeADT4W8NpYgyV2j7NBFor47kQEkvTpf JdqKp4ssFFQlMSAK4tgfN4J1tDG62Kl+vmQZPkB+eI/c2uloFcd4RQ8sdeEfKddu x4uWdLV0ZkrNm7FtJMK4/JhyS7i1yRdR8JCsufNxCRlhSuln1brU+mklwrBptwBS gD4k/y3xcO7IGn50IkbyMCvNyAuv/pA= -----END CERTIFICATE-----Generated at Sun Jul 20 21:17:36 2025 by rpki-client