$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a2bc5f90-0cc4-35f0-a68d-14a355efff9e.roa File: a2bc5f90-0cc4-35f0-a68d-14a355efff9e.roa (raw, json) Hash identifier: JXK0m8Tmcuvdj0ACQZ94Ex03Zmgq1MNWhHbWSFiEut0= Subject key identifier: 25:95:49:7E:5E:97:C5:F0:09:B6:F1:25:E3:FF:BA:81:CF:DB:40:DF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849C904F4BB89E5CC41D7ADB280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a2bc5f90-0cc4-35f0-a68d-14a355efff9e.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 50.93.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f4:bb:89:e5:cc:41:d7:ad:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=2a425208-9d6e-4664-973d-3cc3585f7bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:b2:c2:47:b7:c8:95:78:f9:4e:28:d7:82: b8:9c:f4:dd:6b:90:22:ee:ac:b9:68:92:79:97:6b: 87:67:36:18:b0:f4:73:62:a3:1f:7b:6d:ab:be:64: e7:01:21:7c:80:02:f4:c0:c7:f4:ca:39:95:e9:39: c6:97:26:3d:e4:9a:15:b8:83:71:7f:b2:7c:d9:ac: 19:9f:b2:5c:71:cc:01:2b:ee:58:35:83:29:aa:fa: 48:07:be:32:bc:91:f7:54:c4:5e:94:3d:aa:51:ab: 8a:46:c3:ed:b2:84:19:00:71:b9:a8:85:a0:2f:46: 71:50:c9:30:03:fd:22:da:c6:53:56:a1:6a:78:90: 06:b5:98:9c:b7:fe:b3:3d:41:da:29:69:1d:11:cd: 22:77:64:f2:74:53:2d:53:c2:8e:a4:a4:87:6e:e4: 99:44:57:9a:dc:c9:10:3b:4d:71:e2:a6:c5:36:09: b0:30:1d:e1:96:87:e1:4e:f7:95:d1:1a:83:05:c4: 6e:47:9a:06:95:de:8a:26:14:c0:1f:18:2c:55:0b: 81:94:11:5c:d5:66:2a:75:6f:f0:bf:ac:20:2e:f6: d8:1f:a4:95:07:55:c7:fb:f9:f4:5a:ff:6b:fb:39: 2f:e5:60:13:f1:de:6e:01:aa:16:e5:92:72:ca:2f: 95:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:95:49:7E:5E:97:C5:F0:09:B6:F1:25:E3:FF:BA:81:CF:DB:40:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a2bc5f90-0cc4-35f0-a68d-14a355efff9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 50.93.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:2c:87:d2:5c:8b:b0:8b:ee:c4:47:2a:93:30:2f:ac:2d:02: 1e:3b:68:55:3b:9b:24:46:cf:32:eb:cb:cc:07:b7:d9:87:1b: 6f:56:9d:13:68:be:5e:63:b5:3a:e9:1d:a4:51:71:dd:8d:0e: a5:04:05:1a:65:2f:db:06:de:1a:55:6a:88:23:52:0d:55:58: 3d:b6:04:65:7e:14:56:f1:88:ca:40:76:92:a8:e9:19:c4:be: 7f:cd:d9:e7:c6:ee:d7:0f:76:61:22:54:a5:30:1d:5f:10:cd: 72:66:95:6f:dd:24:e0:c3:a5:59:06:4e:6c:2e:df:36:f2:a5: e1:6f:20:af:47:66:62:b1:0c:1c:fc:17:13:2a:59:71:30:91: 5c:44:f6:54:69:fb:76:93:9f:2a:82:83:d7:04:73:a8:0a:07: cc:b9:d8:2f:d6:73:d5:c3:93:1e:90:a1:9f:08:ee:e6:8f:79: 94:97:67:5d:17:87:8d:4a:2d:06:91:42:46:ee:66:5e:01:fc: 05:5c:2e:f2:7d:8a:63:60:5a:cd:c9:4b:2f:c4:f6:d8:22:37: 96:87:92:26:a0:3f:72:53:81:3f:9c:8e:64:82:01:88:e5:b1: 95:e5:a2:b3:aa:e3:87:6a:27:da:28:7c:dd:b5:48:33:3d:4f: a6:20:0b:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPS7ieXMQdetsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk MmE0MjUyMDgtOWQ2ZS00NjY0LTk3M2QtM2NjMzU4NWY3YmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD6ywke3yJV4+U4o14K4nPTda5Ai7qy5aJJ5 l2uHZzYYsPRzYqMfe22rvmTnASF8gAL0wMf0yjmV6TnGlyY95JoVuINxf7J82awZ n7JcccwBK+5YNYMpqvpIB74yvJH3VMRelD2qUauKRsPtsoQZAHG5qIWgL0ZxUMkw A/0i2sZTVqFqeJAGtZict/6zPUHaKWkdEc0id2TydFMtU8KOpKSHbuSZRFea3MkQ O01x4qbFNgmwMB3hlofhTveV0RqDBcRuR5oGld6KJhTAHxgsVQuBlBFc1WYqdW/w v6wgLvbYH6SVB1XH+/n0Wv9r+zkv5WAT8d5uAaoW5ZJyyi+VIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWVSX5el8XwCbbxJeP/uoHP20DfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTJiYzVmOTAtMGNjNC0z NWYwLWE2OGQtMTRhMzU1ZWZmZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHMl0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANAsh9Jci7CL7sRHKpMwL6wtAh47aFU7myRGzzLry8wHt9mHG29WnRNo vl5jtTrpHaRRcd2NDqUEBRplL9sG3hpVaogjUg1VWD22BGV+FFbxiMpAdpKo6RnE vn/N2efG7tcPdmEiVKUwHV8QzXJmlW/dJODDpVkGTmwu3zbypeFvIK9HZmKxDBz8 FxMqWXEwkVxE9lRp+3aTnyqCg9cEc6gKB8y52C/Wc9XDkx6QoZ8I7uaPeZSXZ10X h41KLQaRQkbuZl4B/AVcLvJ9imNgWs3JSy/E9tgiN5aHkiagP3JTgT+cjmSCAYjl sZXlorOq44dqJ9oofN21SDM9T6YgC/o= -----END CERTIFICATE-----Generated at Fri Jun 6 17:46:09 2025 by rpki-client