$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa File: 1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa (raw, json) Hash identifier: jgAEaojY3vHXImPd+5vAuCcgWcXKwVRJ74hW5nkYD1c= Subject key identifier: 1D:C2:8D:98:51:EF:50:F6:5D:39:53:FA:6F:9E:38:63:69:92:04:C6 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285849088175664DAE54097BCD6028 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 61317 IP address blocks: 2604:4500:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:75:66:4d:ae:54:09:7b:cd:60:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=353409bd-3b2d-4cf0-b37c-8e33fd00ced0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:03:63:64:25:e1:b2:1c:7a:01:c0:1e:08: 32:0f:e8:54:18:87:80:9f:91:ee:06:cb:7e:c7:3a: 2c:0c:77:51:80:f1:71:93:92:59:88:82:71:a0:eb: 1a:cd:07:2d:2b:fd:d0:7f:57:0c:cb:1f:66:6c:fd: 42:14:51:42:a0:77:0e:06:79:cd:66:5d:7b:c9:47: a5:1a:04:9b:9e:30:de:a1:72:1b:02:d2:51:10:6e: 83:82:f6:82:d6:81:90:99:25:10:41:dd:3b:bb:c3: c0:31:e1:e6:91:2b:e9:8d:8e:94:61:46:8b:92:3b: 5f:f7:58:79:5b:6f:4d:d3:b4:8c:73:50:b9:6e:2c: 8d:b1:6b:7c:ef:48:d7:9c:1d:13:76:00:1e:a2:30: 8f:e0:88:24:3f:2a:79:e3:de:6a:20:81:48:42:4c: 1b:c7:05:b1:74:1e:1c:52:dd:fd:2e:ac:df:79:76: a1:b0:05:ad:45:e3:09:45:50:a1:c9:1a:cb:7a:82: 4a:21:6d:bf:9f:f6:9b:af:15:eb:17:de:0a:71:46: d3:b6:06:1c:a6:1a:9d:55:eb:af:87:69:99:bc:bf: c5:7a:05:f6:b3:f0:be:57:d3:fd:00:72:50:4e:b6: c0:98:fb:9c:7a:e5:45:02:e2:c7:49:cc:b4:42:f7: 24:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C2:8D:98:51:EF:50:F6:5D:39:53:FA:6F:9E:38:63:69:92:04:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:7a:09:5e:2a:32:22:10:11:e1:eb:c0:83:48:d5:3d:2c:72: d0:69:27:24:d7:e1:36:c2:3a:65:46:ec:7b:aa:25:7f:9f:80: e1:59:70:40:c1:bc:58:24:72:34:99:f1:20:5e:5b:67:ad:d6: 95:37:c8:f5:14:1c:da:c1:1d:e4:af:0f:b9:60:c6:d3:bc:af: be:02:2d:f9:24:05:b9:bd:e4:97:e0:32:5b:b9:8d:2b:7e:2c: 66:25:e3:80:ff:a3:cb:5d:0e:23:c2:9c:e3:8b:09:c8:4e:57: 62:f4:07:68:d7:66:46:1e:65:c3:e4:b7:25:ca:6e:da:13:23: 4b:41:d2:13:3c:21:fa:d0:db:f0:99:c7:04:eb:41:3e:27:5f: 83:db:d1:c3:b5:be:6a:6d:10:64:a3:89:a1:99:e4:5b:2a:b6: 79:2d:14:59:24:83:44:c5:b5:3a:22:4e:86:52:ee:f5:6a:ef: e1:4f:a9:7a:e8:29:6e:3d:4a:85:e6:28:f3:a4:6a:dd:f2:32: 07:b2:17:54:0c:04:70:f0:65:5e:d7:95:e8:bf:df:00:d2:41: f8:c5:97:f4:49:b1:e3:b4:fe:7b:6e:5d:99:f9:8f:94:a9:df: 11:b4:4e:5d:cf:d2:79:84:98:78:d5:41:df:03:aa:64:af:3c: b3:b4:32:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkIgXVmTa5UCXvNYCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MzUzNDA5YmQtM2IyZC00Y2YwLWIzN2MtOGUzM2ZkMDBjZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUIDY2Ql4bIcegHAHggyD+hUGIeAn5HuBst+ xzosDHdRgPFxk5JZiIJxoOsazQctK/3Qf1cMyx9mbP1CFFFCoHcOBnnNZl17yUel GgSbnjDeoXIbAtJREG6DgvaC1oGQmSUQQd07u8PAMeHmkSvpjY6UYUaLkjtf91h5 W29N07SMc1C5biyNsWt870jXnB0TdgAeojCP4IgkPyp5495qIIFIQkwbxwWxdB4c Ut39LqzfeXahsAWtReMJRVChyRrLeoJKIW2/n/abrxXrF94KcUbTtgYcphqdVeuv h2mZvL/FegX2s/C+V9P9AHJQTrbAmPuceuVFAuLHScy0Qvck4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB3CjZhR71D2XTlT+m+eOGNpkgTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWJhNWU0ZGUtYzJjZi0z MmZkLThkMDMtZjcwYzU5MjU3YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH96CV4qMiIQEeHrwINI1T0sctBpJyTX4TbCOmVG7HuqJX+fgOFZ cEDBvFgkcjSZ8SBeW2et1pU3yPUUHNrBHeSvD7lgxtO8r74CLfkkBbm95JfgMlu5 jSt+LGYl44D/o8tdDiPCnOOLCchOV2L0B2jXZkYeZcPktyXKbtoTI0tB0hM8IfrQ 2/CZxwTrQT4nX4Pb0cO1vmptEGSjiaGZ5FsqtnktFFkkg0TFtToiToZS7vVq7+FP qXroKW49SoXmKPOkat3yMgeyF1QMBHDwZV7Xlei/3wDSQfjFl/RJseO0/ntuXZn5 j5Sp3xG0Tl3P0nmEmHjVQd8DqmSvPLO0Ms4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:44:31 2025 by rpki-client