$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67bfec9a-1a09-39ea-a81a-713a7880cf12.roa File: 67bfec9a-1a09-39ea-a81a-713a7880cf12.roa (raw, json) Hash identifier: 3DNWMn+CqzotXeVQs1pxm4bK/gpOlAQy1aaitI+/h2c= Subject key identifier: 83:A5:31:62:D0:C4:64:89:77:C7:07:88:FB:E7:45:43:DD:6E:B7:C1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5766F613BD5133B33775900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67bfec9a-1a09-39ea-a81a-713a7880cf12.roa Signing time: Tue 04 Feb 2025 13:39:46 +0000 ROA not before: Tue 04 Feb 2025 13:39:46 +0000 ROA not after: Mon 05 May 2025 12:39:46 +0000 asID: 30036 IP address blocks: 50.82.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:76:6f:61:3b:d5:13:3b:33:77:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:39:46 2025 GMT Not After : May 5 12:39:46 2025 GMT Subject: CN=7dd2f359-46c7-49a9-89ba-56a370bef525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:ba:47:3e:e7:c2:c9:cb:d5:b9:99:dd:6c: 8b:59:52:75:7f:1b:8c:a1:ec:9b:72:7f:78:75:46: 60:bd:99:78:94:cd:f7:6d:13:dc:de:e1:d5:81:7e: 8b:df:a8:4b:ae:9f:c6:74:1b:79:11:7a:d1:a9:42: 19:3c:aa:dd:ae:ea:70:76:d1:8b:84:f0:b9:d6:5f: e9:93:8e:4a:fa:20:42:ef:44:4f:52:8f:0d:22:16: 35:de:ef:a4:e9:f3:7f:27:11:5d:57:c4:46:41:2c: 90:d6:1e:8a:d8:c9:eb:5a:55:3e:51:23:91:25:a5: 7a:13:80:e4:8f:c6:0e:d4:03:1e:c7:ea:e2:ff:8b: 97:63:3e:44:d5:15:21:93:f1:b8:f0:72:4b:0a:00: f5:6b:c7:46:9d:ba:0f:47:51:f8:69:1f:22:fc:6f: 26:36:1b:3e:81:f6:93:b5:46:f7:58:ef:e9:ed:04: 5e:cf:a3:98:54:51:46:ea:8f:f6:3a:1f:cd:8a:f6: f1:c0:c3:54:94:ab:12:06:1b:80:01:40:a5:99:b1: 66:0d:e8:12:58:0a:b4:fa:9e:b3:a8:3e:22:f0:e5: 35:14:52:85:a6:a9:68:ab:10:6f:09:2d:1f:a8:7b: 89:7e:8f:0c:49:42:d8:b2:4b:63:26:0a:21:56:e8: 72:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A5:31:62:D0:C4:64:89:77:C7:07:88:FB:E7:45:43:DD:6E:B7:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67bfec9a-1a09-39ea-a81a-713a7880cf12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.82.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:80:3c:47:55:c6:d0:f6:61:dd:eb:4c:f8:03:f1:07:e9:af: f2:f7:13:bf:3a:1b:54:0a:8b:ec:10:a8:4f:29:d8:d4:a1:75: 93:1c:81:b5:c5:11:b2:1b:6c:90:89:a3:b1:ae:4a:74:71:7f: f1:47:35:3a:14:10:0e:39:9b:35:12:c1:c4:6c:b5:86:36:14: 3c:95:7c:2a:dd:8e:e1:06:4b:df:95:7e:76:1e:55:55:80:b4: e7:e9:27:64:fa:e0:d8:60:b5:12:c5:a5:ed:53:d9:77:ab:20: 24:34:d8:89:31:3b:7c:a1:35:2e:0b:c1:59:24:81:57:90:45: 0e:e9:5a:cf:e1:e0:5c:f5:06:6d:92:ba:81:83:15:9b:4d:35: 94:14:97:ac:63:f3:7c:13:b7:40:2c:d0:be:cd:72:5d:9d:52: a7:d7:a4:a8:71:33:0c:8e:34:c3:22:67:78:4b:62:05:fe:34: 46:ea:6b:89:3d:f5:4e:42:dc:0a:3f:9d:0d:c4:9f:0e:49:3f: ad:ea:60:2d:c9:4a:31:5b:0c:ac:93:70:84:a5:9c:5c:1f:4e: 52:b5:a4:3e:cb:4e:5d:67:f7:8e:4a:ed:9d:91:9f:76:80:39: c0:0e:a5:05:57:e8:8f:99:73:e8:1f:ba:46:82:9a:ac:72:74: 64:7b:ab:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdm9hO9UTOzN3WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzMzk0NloXDTI1MDUwNTEyMzk0NlowLzEtMCsGA1UEAxMk N2RkMmYzNTktNDZjNy00OWE5LTg5YmEtNTZhMzcwYmVmNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEu6Rz7nwsnL1bmZ3WyLWVJ1fxuMoeybcn94 dUZgvZl4lM33bRPc3uHVgX6L36hLrp/GdBt5EXrRqUIZPKrdrupwdtGLhPC51l/p k45K+iBC70RPUo8NIhY13u+k6fN/JxFdV8RGQSyQ1h6K2MnrWlU+USORJaV6E4Dk j8YO1AMex+ri/4uXYz5E1RUhk/G48HJLCgD1a8dGnboPR1H4aR8i/G8mNhs+gfaT tUb3WO/p7QRez6OYVFFG6o/2Oh/NivbxwMNUlKsSBhuAAUClmbFmDegSWAq0+p6z qD4i8OU1FFKFpqloqxBvCS0fqHuJfo8MSULYsktjJgohVuhyswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOlMWLQxGSJd8cHiPvnRUPdbrfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjdiZmVjOWEtMWEwOS0z OWVhLWE4MWEtNzEzYTc4ODBjZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlI7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCAPEdVxtD2Yd3rTPgD8Qfpr/L3E786G1QKi+wQqE8p2NShdZMcgbXF EbIbbJCJo7GuSnRxf/FHNToUEA45mzUSwcRstYY2FDyVfCrdjuEGS9+VfnYeVVWA tOfpJ2T64NhgtRLFpe1T2XerICQ02IkxO3yhNS4LwVkkgVeQRQ7pWs/h4Fz1Bm2S uoGDFZtNNZQUl6xj83wTt0As0L7Ncl2dUqfXpKhxMwyONMMiZ3hLYgX+NEbqa4k9 9U5C3Ao/nQ3Enw5JP63qYC3JSjFbDKyTcISlnFwfTlK1pD7LTl1n945K7Z2Rn3aA OcAOpQVX6I+Zc+gfukaCmqxydGR7q+Y= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:50 2025 by rpki-client