$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/4dd2c61d-5b74-3f69-a18a-1170556b1992.roa File: 4dd2c61d-5b74-3f69-a18a-1170556b1992.roa (raw, json) Hash identifier: o5LktRfxajczevP+0Sz/pAmulO8IK7zsc3ibdY6c7n8= Subject key identifier: B4:0C:FC:BA:0A:25:4B:96:1A:A7:B8:91:D1:CF:B7:66:57:53:67:DC Certificate issuer: /CN=0b51ae6f-ea14-4884-8fd5-2317d0822e42 Certificate serial: 010D0C9F43285849DF5A7720FA1BCE0485A03740 Authority key identifier: 44:6E:AC:90:D5:3E:D9:7C:66:A9:24:9B:91:5F:34:49:44:32:BE:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/4dd2c61d-5b74-3f69-a18a-1170556b1992.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 40940 IP address blocks: 158.51.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:77:20:fa:1b:ce:04:85:a0:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b51ae6f-ea14-4884-8fd5-2317d0822e42 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=65b904c1-5c15-4028-bc75-5a6b807d5360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:46:a7:b9:20:8a:2a:82:ea:5d:91:5e:5d:71: 1e:b6:2e:18:9c:12:0d:a4:ad:da:3c:ee:50:e3:f3: f0:f4:e8:5c:1b:6e:67:80:33:d2:2b:c5:aa:f2:47: fc:ff:76:ef:96:e9:6a:56:a2:23:50:ca:60:83:49: 0c:8c:f7:de:50:6b:24:58:59:dd:ce:8a:99:68:92: 40:ba:93:d9:85:74:09:41:94:7a:4f:fb:72:26:aa: c8:99:84:6e:22:f8:8e:25:39:2e:e3:6c:47:8d:7e: 97:c6:5c:70:ce:2b:a9:f7:82:a3:17:2c:fa:f8:21: 30:37:d9:1f:96:ff:b3:1a:21:f8:83:f4:cc:65:65: 7c:c2:91:71:f1:9b:80:95:94:ce:03:62:31:25:7b: a7:35:bc:2a:6b:f0:37:ff:57:7b:03:86:0f:11:33: 19:ce:a5:37:50:f2:ba:48:da:47:f7:29:f8:d2:ee: c4:15:74:3f:7f:e8:da:dd:7c:97:47:97:16:55:20: 15:78:2e:7b:81:1f:96:22:3a:72:23:59:13:e4:07: ec:d7:a1:10:6b:dc:9d:2e:7a:ba:5c:fe:a1:1b:24: fc:e0:fc:59:67:48:81:27:9a:d2:43:60:4a:d9:32: 80:be:22:32:e1:05:e1:4b:a0:c4:f4:de:c4:b0:7a: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0C:FC:BA:0A:25:4B:96:1A:A7:B8:91:D1:CF:B7:66:57:53:67:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/4dd2c61d-5b74-3f69-a18a-1170556b1992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.crl X509v3 Authority Key Identifier: keyid:44:6E:AC:90:D5:3E:D9:7C:66:A9:24:9B:91:5F:34:49:44:32:BE:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer sbgp-ipAddrBlock: critical IPv4: 158.51.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d9:35:b2:2e:27:7d:93:af:36:ea:e7:c5:68:c6:18:4b:bf: e0:40:46:57:e1:d3:2e:88:bb:06:6f:09:65:c3:3e:33:63:d6: c4:56:a8:0d:60:ea:75:d7:06:d0:ba:f9:11:8d:a2:cb:ed:c7: 38:75:67:3a:af:ec:eb:ab:d9:7d:4a:bd:01:37:01:b2:35:a0: d0:5f:c6:61:ba:c5:a8:3a:d0:96:dc:5d:bd:b5:fc:7c:c6:b7: ea:38:f9:db:4c:08:32:b7:23:dc:87:80:01:5d:0d:7d:d4:ae: d3:8a:76:43:2b:d3:c3:48:65:a2:32:8e:64:9d:19:97:08:60: 13:50:ef:de:0c:df:da:bc:95:f5:4f:75:da:29:e6:f5:2d:f5: db:cb:12:09:00:91:11:24:88:2d:ee:03:2f:5a:21:ed:9b:a8: f1:51:f1:39:6d:8d:0f:50:7b:da:0d:be:46:04:bb:3b:b1:74: e2:29:f4:20:9f:e3:05:32:2f:41:64:84:9a:d0:95:91:7c:38: 67:d3:1c:49:0d:c6:15:e1:87:c5:84:5f:87:0e:c1:89:67:7d: dd:9a:40:c6:f7:76:94:3d:a4:ac:bf:0b:ba:58:61:28:d5:2d: 0d:3d:b6:2a:d6:a3:ad:7e:a9:34:b1:b7:33:26:cb:56:e8:8d: 31:f3:99:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWncg+hvOBIWgN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI1MWFlNmYtZWExNC00ODg0LThmZDUtMjMxN2QwODIy ZTQyMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NjViOTA0YzEtNWMxNS00MDI4LWJjNzUtNWE2YjgwN2Q1MzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEanuSCKKoLqXZFeXXEeti4YnBINpK3aPO5Q 4/Pw9OhcG25ngDPSK8Wq8kf8/3bvlulqVqIjUMpgg0kMjPfeUGskWFndzoqZaJJA upPZhXQJQZR6T/tyJqrImYRuIviOJTku42xHjX6Xxlxwziup94KjFyz6+CEwN9kf lv+zGiH4g/TMZWV8wpFx8ZuAlZTOA2IxJXunNbwqa/A3/1d7A4YPETMZzqU3UPK6 SNpH9yn40u7EFXQ/f+ja3XyXR5cWVSAVeC57gR+WIjpyI1kT5Afs16EQa9ydLnq6 XP6hGyT84PxZZ0iBJ5rSQ2BK2TKAviIy4QXhS6DE9N7EsHrVSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQM/LoKJUuWGqe4kdHPt2ZXU2fcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYjUx YWU2Zi1lYTE0LTQ4ODQtOGZkNS0yMzE3ZDA4MjJlNDIvNGRkMmM2MWQtNWI3NC0z ZjY5LWExOGEtMTE3MDU1NmIxOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGI1MWFlNmYtZWExNC00ODg0LThm ZDUtMjMxN2QwODIyZTQyLzBiNTFhZTZmLWVhMTQtNDg4NC04ZmQ1LTIzMTdkMDgy MmU0Mi5jcmwwHwYDVR0jBBgwFoAURG6skNU+2XxmqSSbkV80SUQyvs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYjUxYWU2Zi1lYTE0LTQ4ODQtOGZkNS0yMzE3 ZDA4MjJlNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnjMyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnZNbIuJ32Trzbq58VoxhhLv+BARlfh0y6IuwZvCWXDPjNj1sRWqA1g 6nXXBtC6+RGNosvtxzh1Zzqv7Our2X1KvQE3AbI1oNBfxmG6xag60JbcXb21/HzG t+o4+dtMCDK3I9yHgAFdDX3UrtOKdkMr08NIZaIyjmSdGZcIYBNQ794M39q8lfVP ddop5vUt9dvLEgkAkREkiC3uAy9aIe2bqPFR8TltjQ9Qe9oNvkYEuzuxdOIp9CCf 4wUyL0FkhJrQlZF8OGfTHEkNxhXhh8WEX4cOwYlnfd2aQMb3dpQ9pKy/C7pYYSjV LQ09tirWo61+qTSxtzMmy1bojTHzmZA= -----END CERTIFICATE-----Generated at Thu Jun 5 19:39:20 2025 by rpki-client