$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a8794f77-a850-3e62-bbce-6ba1c46301d2.roa File: a8794f77-a850-3e62-bbce-6ba1c46301d2.roa (raw, json) Hash identifier: Cy4DGLKOHmSxCUAv434tvW7ZFmfgZhamVbsEGzeOjHQ= Subject key identifier: 5E:27:AF:90:8C:90:B5:AA:7A:F8:18:FA:5A:38:97:60:A2:FF:02:F1 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499C229DDA127706E3C16D3980 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a8794f77-a850-3e62-bbce-6ba1c46301d2.roa Signing time: Tue 22 Apr 2025 11:09:41 +0000 ROA not before: Tue 22 Apr 2025 11:09:41 +0000 ROA not after: Mon 21 Jul 2025 11:09:41 +0000 asID: 32043 IP address blocks: 50.2.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:22:9d:da:12:77:06:e3:c1:6d:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 11:09:41 2025 GMT Not After : Jul 21 11:09:41 2025 GMT Subject: CN=6a26b5aa-7ff4-4c5a-a192-faeef0e925d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3b:9f:cb:b3:71:e3:74:ec:35:4b:8c:f9:98: 5b:e3:4f:46:fe:15:02:72:88:94:fa:6e:26:1c:85: d2:de:8b:04:50:ed:e9:97:9c:8e:25:cc:ca:67:b7: 10:c6:b3:52:3c:4d:c1:1f:08:77:7d:0e:6f:cd:84: 94:2f:5b:53:bc:9e:d3:01:c5:de:c4:84:7e:80:ae: 6e:b7:63:7e:b1:52:e8:03:8a:d1:0c:6a:26:48:87: e9:af:24:77:21:df:a6:9f:57:7b:69:a0:07:75:ba: ef:02:9a:15:25:22:fe:a6:03:a4:9a:75:86:b6:bf: af:14:67:bd:39:cd:75:e3:0b:c5:52:e9:c1:f1:c9: 50:65:b9:dd:35:24:ec:8e:b2:64:72:73:c2:ae:32: ae:75:90:6d:46:2d:a8:3a:72:73:dc:c1:9c:0f:14: 9f:ef:62:3a:26:e1:42:12:3a:d8:76:25:0e:31:5e: 63:3a:9b:2e:38:7e:ca:af:5b:a0:fc:00:d8:b8:59: 19:95:30:f6:4e:cd:d3:ae:4c:50:e5:51:fd:7d:57: 93:a3:ea:9d:3f:57:14:01:66:eb:8f:52:bc:c3:e4: 94:59:75:7c:05:a6:62:ab:f0:bf:6e:7e:44:cb:57: 06:21:6a:c1:02:b3:19:18:36:86:41:7f:b5:18:01: 8a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:27:AF:90:8C:90:B5:AA:7A:F8:18:FA:5A:38:97:60:A2:FF:02:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a8794f77-a850-3e62-bbce-6ba1c46301d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:9e:10:33:04:84:7f:4b:1f:cb:13:1a:94:1c:73:08:9c:e3: ad:53:7b:1b:19:83:c7:bb:50:9b:92:58:83:52:a2:84:a3:0b: 71:05:ed:2e:de:ae:f4:33:85:47:0a:06:65:ab:1a:c1:1d:fe: 9a:23:b5:2a:d9:1e:40:42:60:0d:bf:22:fd:4c:88:22:9d:09: e3:45:d3:2f:a0:14:4f:47:d4:9d:36:40:09:ba:43:7e:59:3e: db:4d:20:73:6d:1a:62:a0:d6:43:68:b3:74:a3:b3:6f:29:f7: de:42:c7:39:11:91:31:2f:f6:a9:38:f3:01:71:82:23:74:36: 98:1c:a1:c7:80:3e:aa:a4:73:e9:fb:2c:0a:a5:a1:8d:db:0d: 28:70:32:bb:b5:2e:d5:d5:4b:08:0d:83:3f:41:1f:bb:16:f2: aa:d0:cb:d4:85:ef:70:dd:5e:40:39:5e:5a:96:4c:36:cf:82: 82:86:13:41:0c:08:50:11:d2:0e:21:38:9f:3a:50:c2:4f:0b: 6e:67:72:f8:3f:3a:0d:ba:68:c2:88:bc:15:a7:41:ee:1c:dc: f5:d6:06:39:93:39:ed:53:0b:83:aa:92:43:9d:37:3e:64:03: dc:3d:4b:2e:e5:4d:df:75:d4:45:fd:94:0e:9f:a6:de:6a:be: 65:05:22:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcIp3aEncG48FtOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjExMDk0MVoXDTI1MDcyMTExMDk0MVowLzEtMCsGA1UEAxMk NmEyNmI1YWEtN2ZmNC00YzVhLWExOTItZmFlZWYwZTkyNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Dufy7Nx43TsNUuM+Zhb409G/hUCcoiU+m4m HIXS3osEUO3pl5yOJczKZ7cQxrNSPE3BHwh3fQ5vzYSUL1tTvJ7TAcXexIR+gK5u t2N+sVLoA4rRDGomSIfpryR3Id+mn1d7aaAHdbrvApoVJSL+pgOkmnWGtr+vFGe9 Oc114wvFUunB8clQZbndNSTsjrJkcnPCrjKudZBtRi2oOnJz3MGcDxSf72I6JuFC EjrYdiUOMV5jOpsuOH7Kr1ug/ADYuFkZlTD2Ts3TrkxQ5VH9fVeTo+qdP1cUAWbr j1K8w+SUWXV8BaZiq/C/bn5Ey1cGIWrBArMZGDaGQX+1GAGKfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4nr5CMkLWqevgY+lo4l2Ci/wLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTg3OTRmNzctYTg1MC0z ZTYyLWJiY2UtNmJhMWM0NjMwMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECeEDMEhH9LH8sTGpQccwic461TexsZg8e7UJuSWINSooSjC3EF7S7e rvQzhUcKBmWrGsEd/pojtSrZHkBCYA2/Iv1MiCKdCeNF0y+gFE9H1J02QAm6Q35Z PttNIHNtGmKg1kNos3Sjs28p995CxzkRkTEv9qk48wFxgiN0NpgcoceAPqqkc+n7 LAqloY3bDShwMru1LtXVSwgNgz9BH7sW8qrQy9SF73DdXkA5XlqWTDbPgoKGE0EM CFAR0g4hOJ86UMJPC25ncvg/Og26aMKIvBWnQe4c3PXWBjmTOe1TC4OqkkOdNz5k A9w9Sy7lTd911EX9lA6fpt5qvmUFIlU= -----END CERTIFICATE-----Generated at Mon May 12 02:26:19 2025 by rpki-client