$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/24dda753-48f0-3464-8586-4c56cb9bb7cc.roa File: 24dda753-48f0-3464-8586-4c56cb9bb7cc.roa (raw, json) Hash identifier: 5vohEr83XOxSsdwoxqFOI7qKgidmUDkSHSZZXdMJbdU= Subject key identifier: 52:2D:DF:16:ED:EA:E7:6D:6E:71:1A:EB:E2:9B:57:86:55:CA:F6:0A Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858494CC93C311E411DF486C2C680 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/24dda753-48f0-3464-8586-4c56cb9bb7cc.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 394727 IP address blocks: 2604:880:6e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3c:31:1e:41:1d:f4:86:c2:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=db3355f1-91c7-4acc-bfc1-cf4f82d3f7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:09:78:d4:25:46:c7:5e:3c:2a:23:a9:41: bb:bb:78:f3:42:2b:a5:a1:81:f5:9f:8d:68:0d:18: 22:c8:8b:d0:53:ef:49:c7:48:28:1e:76:eb:dd:38: 17:dd:ab:ec:28:5e:0f:41:27:9a:3f:a2:c8:62:6b: 17:b1:8e:6f:79:06:06:1d:c8:81:bd:45:21:f4:9c: dd:5e:78:fd:0c:95:53:a6:1d:22:17:40:ba:b1:3b: 0d:56:3e:c4:c3:a3:96:bc:91:a4:1c:8d:94:18:1f: 81:16:52:f5:98:b0:dc:0b:17:5e:84:94:df:c2:66: b4:46:dd:e7:06:d4:a9:12:b0:4d:ae:48:2c:e5:28: 4e:f8:8f:e8:fd:c2:f7:58:1c:fb:ff:a5:89:0f:7f: 5c:d4:53:26:06:85:ea:35:fa:8f:8e:c0:a0:43:aa: a2:8f:5f:94:e8:89:e1:8b:06:7a:20:c1:01:f9:e9: fa:c9:2b:66:a7:a2:dc:51:d3:75:23:6e:6e:cb:12: d3:49:97:9e:35:02:3e:de:af:28:f7:18:b4:6e:8e: 45:fb:39:e8:f9:4c:bd:7e:12:8e:65:ad:5e:cd:cb: f3:68:69:c5:e3:6b:22:f5:a5:35:bb:c3:c2:71:d1: 70:4f:00:ea:b6:e6:7f:9e:aa:54:9a:e1:d0:84:c7: 17:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2D:DF:16:ED:EA:E7:6D:6E:71:1A:EB:E2:9B:57:86:55:CA:F6:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/24dda753-48f0-3464-8586-4c56cb9bb7cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:880:6e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:70:81:e9:e7:84:92:55:c9:86:27:d9:19:0b:3a:17:51:00: 4f:98:18:16:22:73:02:95:d7:1b:99:88:0b:38:7f:91:a0:5f: 7d:b6:c0:49:4b:0f:58:fd:03:ee:15:a5:59:be:65:a0:57:dc: 22:1a:54:08:c0:63:fb:dd:6f:8c:14:9d:3f:1e:2e:d8:91:7a: 51:29:03:ae:2d:ed:cb:61:09:12:cb:43:a0:c4:92:15:9e:08: 24:d7:73:a3:05:5b:a6:c8:36:36:74:4b:1d:fe:ee:73:b9:79: 29:33:07:fa:54:17:e0:77:77:7e:a3:88:a3:97:8e:7a:98:30: d0:2e:9e:9b:66:63:84:f0:a1:a5:00:ba:c9:dc:30:a5:09:c1: 3d:3b:86:1a:8d:52:e8:1c:85:79:b2:74:3a:06:48:f8:b1:c7: f2:38:be:c7:37:27:53:6f:47:84:5f:ee:a8:6d:b3:65:ad:62: 49:bf:8e:24:8f:1e:37:a5:0a:e4:c5:78:b3:a7:40:60:44:b6: e0:44:13:ab:a9:10:5f:34:12:6d:f8:ef:a5:58:0b:b0:a7:1f: 62:45:c3:0a:34:65:a3:1d:f9:85:fa:f4:d0:62:0e:e6:ef:a9: 85:32:74:79:d6:e5:41:96:78:a2:51:fb:66:3c:0a:98:47:45: 49:91:4c:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyTwxHkEd9IbCxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZGIzMzU1ZjEtOTFjNy00YWNjLWJmYzEtY2Y0ZjgyZDNmN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv48JeNQlRsdePCojqUG7u3jzQiuloYH1n41o DRgiyIvQU+9Jx0goHnbr3TgX3avsKF4PQSeaP6LIYmsXsY5veQYGHciBvUUh9Jzd Xnj9DJVTph0iF0C6sTsNVj7Ew6OWvJGkHI2UGB+BFlL1mLDcCxdehJTfwma0Rt3n BtSpErBNrkgs5ShO+I/o/cL3WBz7/6WJD39c1FMmBoXqNfqPjsCgQ6qij1+U6Inh iwZ6IMEB+en6yStmp6LcUdN1I25uyxLTSZeeNQI+3q8o9xi0bo5F+zno+Uy9fhKO Za1ezcvzaGnF42si9aU1u8PCcdFwTwDqtuZ/nqpUmuHQhMcXzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFIt3xbt6udtbnEa6+KbV4ZVyvYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMjRkZGE3NTMtNDhmMC0z NDY0LTg1ODYtNGM1NmNiOWJiN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQIgABu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJwgennhJJVyYYn2RkLOhdRAE+YGBYicwKV1xuZiAs4f5GgX322 wElLD1j9A+4VpVm+ZaBX3CIaVAjAY/vdb4wUnT8eLtiRelEpA64t7cthCRLLQ6DE khWeCCTXc6MFW6bINjZ0Sx3+7nO5eSkzB/pUF+B3d36jiKOXjnqYMNAunptmY4Tw oaUAusncMKUJwT07hhqNUugchXmydDoGSPixx/I4vsc3J1NvR4Rf7qhts2WtYkm/ jiSPHjelCuTFeLOnQGBEtuBEE6upEF80Em3476VYC7CnH2JFwwo0ZaMd+YX69NBi DubvqYUydHnW5UGWeKJR+2Y8CphHRUmRTDM= -----END CERTIFICATE-----Generated at Sat Apr 12 17:31:26 2025 by rpki-client