$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89c86af8-a3bb-350c-80f6-f1632f8d1fd6.roa File: 89c86af8-a3bb-350c-80f6-f1632f8d1fd6.roa (raw, json) Hash identifier: bNZI3vm/3BmsGt9vQujo2XZFstGnLZ8JOE7e8HFVxBk= Subject key identifier: 12:49:D2:F9:8B:8A:EC:67:04:3A:B7:86:D7:80:4E:A5:88:78:9C:D6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B50D432BF779484D70700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89c86af8-a3bb-350c-80f6-f1632f8d1fd6.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 50.82.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:50:d4:32:bf:77:94:84:d7:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=3cade4d6-e210-4139-9166-4e89666743a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:6e:7b:a4:60:21:b9:55:cf:2e:37:d1:4b: 6b:57:68:62:f5:8c:b0:66:b0:0c:bd:5c:10:fe:53: 5c:28:48:10:eb:05:40:ed:ba:c7:80:2b:e0:dd:8f: f7:08:cd:26:30:1c:5f:a5:8a:01:57:dc:49:dc:6d: e2:55:9a:2b:05:e0:16:ed:77:ee:09:80:a3:f8:7e: 2f:99:9d:a1:c5:42:42:33:c8:52:93:5a:7f:32:16: 48:44:bb:23:6c:00:b2:9b:6d:19:13:e5:c0:df:2d: 7e:5c:d8:c7:a8:79:e3:c2:9e:92:b4:9e:21:d5:94: d4:bb:19:65:8b:e0:88:37:de:88:8e:32:c8:58:01: 8f:2d:5c:3d:43:05:4b:c3:19:e8:c7:d4:a2:ab:7a: 7e:0d:cb:d1:af:b7:5b:15:fc:6a:f7:03:d6:fb:0e: 63:05:9d:bd:60:c2:99:6b:8a:60:f6:e4:10:86:cb: 36:23:d6:47:b8:be:37:6f:ea:f3:dc:ab:95:60:28: f5:83:c4:79:0d:c5:dc:f4:01:d7:6b:de:1a:0c:4a: 9c:35:ea:d3:5a:77:90:b8:5c:02:db:29:93:b0:37: 5e:78:e9:af:6b:57:6f:8b:12:c2:ee:4d:bc:81:66: 1d:15:cb:61:0b:61:4d:09:39:2e:64:88:24:7c:8b: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:49:D2:F9:8B:8A:EC:67:04:3A:B7:86:D7:80:4E:A5:88:78:9C:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89c86af8-a3bb-350c-80f6-f1632f8d1fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.82.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b1:67:0a:1d:73:8e:74:b0:8a:b6:0b:75:7a:b3:17:69:b3: b2:20:4a:cc:1e:68:45:94:79:a3:ca:bb:4d:65:b0:b8:10:d7: 42:f4:9e:71:db:ec:34:38:2a:1e:c1:34:36:de:34:fb:ab:b7: 03:fe:fb:56:3a:9c:82:a3:a7:d7:5f:20:3d:12:93:92:fb:25: 75:82:94:9b:ed:7f:99:fc:48:4c:93:c8:29:db:43:b9:11:93: af:83:5d:9b:24:1d:44:81:18:e9:79:86:94:d8:b4:8f:d7:e9: 33:dd:aa:63:60:de:b3:b8:8d:63:ba:bc:e2:86:65:54:96:05: 67:77:f9:dd:8e:22:72:14:d3:d6:b5:fd:a7:99:e5:01:32:90: e9:04:81:3b:98:e5:f0:da:43:f9:33:af:d4:59:09:83:dc:08: c9:7f:01:98:93:2a:a4:1f:b7:74:a7:b8:c6:9a:3a:33:71:b2: 23:a5:ed:c2:7c:4a:32:bd:4e:4a:da:84:df:a7:e7:a0:37:bb: 7b:42:d2:82:2a:a5:a5:23:7a:c4:f6:37:a9:68:89:24:5f:7a: a8:9e:02:6b:1f:9b:47:5a:f4:f2:c9:0d:bd:75:f6:1a:00:2a: 22:3f:6e:77:1d:b0:72:5c:08:c4:3f:ae:32:bf:9a:47:ea:49: 24:c9:5c:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G1DUMr93lITXBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk M2NhZGU0ZDYtZTIxMC00MTM5LTkxNjYtNGU4OTY2Njc0M2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBRue6RgIblVzy430UtrV2hi9YywZrAMvVwQ /lNcKEgQ6wVA7brHgCvg3Y/3CM0mMBxfpYoBV9xJ3G3iVZorBeAW7XfuCYCj+H4v mZ2hxUJCM8hSk1p/MhZIRLsjbACym20ZE+XA3y1+XNjHqHnjwp6StJ4h1ZTUuxll i+CIN96IjjLIWAGPLVw9QwVLwxnox9Siq3p+DcvRr7dbFfxq9wPW+w5jBZ29YMKZ a4pg9uQQhss2I9ZHuL43b+rz3KuVYCj1g8R5DcXc9AHXa94aDEqcNerTWneQuFwC 2ymTsDdeeOmva1dvixLC7k28gWYdFcthC2FNCTkuZIgkfItPdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJJ0vmLiuxnBDq3hteATqWIeJzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODljODZhZjgtYTNiYi0z NTBjLTgwZjYtZjE2MzJmOGQxZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlKGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6xZwodc450sIq2C3V6sxdps7IgSsweaEWUeaPKu01lsLgQ10L0nnHb 7DQ4Kh7BNDbeNPurtwP++1Y6nIKjp9dfID0Sk5L7JXWClJvtf5n8SEyTyCnbQ7kR k6+DXZskHUSBGOl5hpTYtI/X6TPdqmNg3rO4jWO6vOKGZVSWBWd3+d2OInIU09a1 /aeZ5QEykOkEgTuY5fDaQ/kzr9RZCYPcCMl/AZiTKqQft3SnuMaaOjNxsiOl7cJ8 SjK9TkrahN+n56A3u3tC0oIqpaUjesT2N6loiSRfeqieAmsfm0da9PLJDb119hoA KiI/bncdsHJcCMQ/rjK/mkfqSSTJXFM= -----END CERTIFICATE-----Generated at Thu Jul 10 01:20:19 2025 by rpki-client