$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea390440-4aca-330c-b397-a01028af7652.roa File: ea390440-4aca-330c-b397-a01028af7652.roa (raw, json) Hash identifier: 9zDsgSKQmxUsJ6uZZJXOO98Z/iNxWMkV6iNZra4ndBU= Subject key identifier: CA:8C:99:AB:2F:A2:CE:4A:3D:3F:BE:A6:68:DB:72:3A:E1:8A:90:66 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C260D3CB855E983184ED9000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea390440-4aca-330c-b397-a01028af7652.roa Signing time: Mon 03 Feb 2025 11:08:48 +0000 ROA not before: Mon 03 Feb 2025 11:08:48 +0000 ROA not after: Sun 04 May 2025 10:08:48 +0000 asID: 30036 IP address blocks: 50.81.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:60:d3:cb:85:5e:98:31:84:ed:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:08:48 2025 GMT Not After : May 4 10:08:48 2025 GMT Subject: CN=c6133ec0-7e86-423b-a9f4-02196936a47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:97:c1:f6:3d:13:c8:74:0f:c6:78:d0:0e:61: f1:4d:6f:34:4d:82:f3:d8:42:b4:cb:59:0e:cb:2d: f0:34:1e:f5:42:92:dc:21:7b:a0:2d:56:26:89:82: de:22:37:8a:57:90:62:6a:65:e7:c5:f7:6a:be:56: 9b:08:89:08:0f:1d:13:00:e0:67:5f:be:4c:d2:08: 60:03:5a:e3:ec:c2:13:1d:da:f4:44:73:c7:ac:e9: 5a:29:b1:41:80:cd:a8:8e:11:7b:89:c6:54:47:b6: 05:78:14:e2:f8:50:ae:9d:45:85:28:cb:9a:1d:e5: 73:62:a2:f1:48:19:26:28:86:f9:21:84:76:62:6d: e2:71:17:e7:39:bc:51:85:55:7b:04:4b:f9:29:72: 0d:04:e5:9a:8f:a9:a0:a2:82:5b:34:48:50:17:03: b0:ba:f9:91:ec:42:ba:1b:66:63:a1:c5:96:28:e1: 3b:68:0b:81:a8:fc:cb:28:db:e8:c5:1d:6a:f6:ad: 3d:87:dc:63:3d:f4:de:d7:64:4b:82:65:e2:40:88: be:dc:5a:ca:c3:35:df:2b:34:2d:d3:08:bb:4e:90: 4a:80:50:36:3b:f2:4c:03:79:bf:2d:9c:e2:11:9c: c9:47:9f:cc:a3:90:73:4f:22:e5:7a:40:df:62:d1: 77:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8C:99:AB:2F:A2:CE:4A:3D:3F:BE:A6:68:DB:72:3A:E1:8A:90:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea390440-4aca-330c-b397-a01028af7652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.81.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:9e:18:19:9d:99:ef:29:8b:67:ee:a0:e3:23:0c:bc:cc:87: a0:5f:cf:98:31:33:65:9d:1e:42:6b:0f:b2:65:97:3c:da:5d: ef:e2:65:c8:7b:6a:67:5a:9e:e1:83:bd:cd:0c:1f:7f:9d:a2: 1c:01:e6:80:aa:2d:d0:e8:18:5b:74:1b:7b:98:61:0e:72:00: d2:8b:ed:d0:1b:8b:20:c5:e7:70:3e:93:15:35:d8:ed:8d:ea: 74:08:29:a8:15:2f:4c:1b:f9:53:c0:17:9a:1d:51:a3:92:89: 68:25:88:8e:2b:7b:18:8a:8e:a6:a9:c7:6a:76:3b:e1:df:31: d8:16:de:f9:31:86:ac:cc:b2:56:92:a1:f3:5d:e2:b6:f9:01: 52:c6:4e:cd:44:88:b0:3f:e0:fb:20:5a:e6:3d:72:c8:a2:57: 00:de:76:b5:06:49:80:12:01:1d:57:47:cb:90:fd:e2:31:10: 80:7f:bf:4a:fa:ad:af:5d:fe:ae:d5:d6:b7:59:50:dd:c5:8c: ae:94:f1:1c:cb:3b:50:c6:ce:45:94:fc:73:2f:06:a3:b7:7e: 61:bd:de:c9:d4:33:86:c6:40:df:ae:dc:9d:9a:7b:3b:41:e6: 61:55:38:64:32:d2:29:87:36:cb:d1:c0:e7:bf:41:46:ca:5f: 21:52:b4:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYNPLhV6YMYTtkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMDg0OFoXDTI1MDUwNDEwMDg0OFowLzEtMCsGA1UEAxMk YzYxMzNlYzAtN2U4Ni00MjNiLWE5ZjQtMDIxOTY5MzZhNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJfB9j0TyHQPxnjQDmHxTW80TYLz2EK0y1kO yy3wNB71QpLcIXugLVYmiYLeIjeKV5BiamXnxfdqvlabCIkIDx0TAOBnX75M0ghg A1rj7MITHdr0RHPHrOlaKbFBgM2ojhF7icZUR7YFeBTi+FCunUWFKMuaHeVzYqLx SBkmKIb5IYR2Ym3icRfnObxRhVV7BEv5KXINBOWaj6mgooJbNEhQFwOwuvmR7EK6 G2ZjocWWKOE7aAuBqPzLKNvoxR1q9q09h9xjPfTe12RLgmXiQIi+3FrKwzXfKzQt 0wi7TpBKgFA2O/JMA3m/LZziEZzJR5/Mo5BzTyLlekDfYtF37QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqMmasvos5KPT++pmjbcjrhipBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWEzOTA0NDAtNGFjYS0z MzBjLWIzOTctYTAxMDI4YWY3NjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMlEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByeGBmdme8pi2fuoOMjDLzMh6Bfz5gxM2WdHkJrD7JllzzaXe/iZch7 amdanuGDvc0MH3+dohwB5oCqLdDoGFt0G3uYYQ5yANKL7dAbiyDF53A+kxU12O2N 6nQIKagVL0wb+VPAF5odUaOSiWgliI4rexiKjqapx2p2O+HfMdgW3vkxhqzMslaS ofNd4rb5AVLGTs1EiLA/4PsgWuY9csiiVwDedrUGSYASAR1XR8uQ/eIxEIB/v0r6 ra9d/q7V1rdZUN3FjK6U8RzLO1DGzkWU/HMvBqO3fmG93snUM4bGQN+u3J2aeztB 5mFVOGQy0imHNsvRwOe/QUbKXyFStN8= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:25 2025 by rpki-client