$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bd2c467b-6669-3ce8-9c91-7de9789f7628.roa File: bd2c467b-6669-3ce8-9c91-7de9789f7628.roa (raw, json) Hash identifier: wgGTvy8rkyUsThkC4ngSHvhqQXCznrDwMx3geJnH4Cg= Subject key identifier: 23:C1:D2:13:52:50:0D:50:7A:91:4A:3E:8A:DD:FE:72:34:FC:52:F4 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A63F5B8826811A47E945235C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bd2c467b-6669-3ce8-9c91-7de9789f7628.roa Signing time: Thu 03 Jul 2025 01:00:48 +0000 ROA not before: Thu 03 Jul 2025 01:00:48 +0000 ROA not after: Wed 01 Oct 2025 01:00:48 +0000 asID: 174 IP address blocks: 50.7.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:f5:b8:82:68:11:a4:7e:94:52:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 3 01:00:48 2025 GMT Not After : Oct 1 01:00:48 2025 GMT Subject: CN=2b01b589-100a-496c-b567-4133debeb197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:a7:8e:3d:cc:79:68:45:5e:73:71:b4:e2: be:98:e4:d2:5e:52:f6:26:fa:a8:4a:a8:84:d8:5b: 88:ca:56:f3:9e:e2:0d:d9:c2:93:22:7a:a3:78:fc: 03:e3:3a:b9:18:f5:ef:6c:0b:32:e8:f3:7e:39:7e: 2e:2d:a9:bb:b5:12:02:2f:6b:aa:44:5e:cf:e4:e8: 8d:a9:c3:48:95:e1:e0:eb:da:e4:48:66:15:8f:57: 06:fe:d8:0d:2f:be:af:57:58:44:92:07:c4:5b:87: 3c:3c:fb:35:e2:36:78:91:38:9e:59:5d:05:a9:4a: 96:a1:8a:2a:4b:e8:23:81:24:a8:3b:fb:67:c1:d7: 9e:8c:09:80:cc:5f:a2:f2:07:c9:30:97:d8:2e:e1: 65:12:68:0b:41:d2:c1:50:09:de:7c:a2:1e:1e:76: 36:a2:a4:ea:43:94:96:ab:b7:c0:2f:54:a4:7f:66: fd:92:4d:66:aa:cd:01:f5:2b:ce:10:c6:bc:99:80: 37:02:01:86:be:b8:3e:f7:09:57:90:29:77:26:4b: 1f:8a:a1:28:b3:ec:6f:64:bd:e5:bf:b7:47:21:ca: e9:61:b7:65:cd:b6:19:e7:a9:4f:fb:1e:40:ed:c8: b2:8a:3e:f8:bf:e0:fc:8a:f8:ab:a3:4a:72:93:dd: 9b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C1:D2:13:52:50:0D:50:7A:91:4A:3E:8A:DD:FE:72:34:FC:52:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/bd2c467b-6669-3ce8-9c91-7de9789f7628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9b:a3:f1:f0:aa:90:b6:77:69:e9:68:07:5a:fb:ee:ad:8c: 2d:e2:39:4a:1e:14:a2:cd:56:04:56:30:c7:93:df:8e:77:7e: 26:f7:4c:24:5f:c2:06:42:7b:f1:b1:b1:92:92:cf:9e:f0:2f: 1b:ee:0d:15:c1:f5:24:55:30:24:20:b8:33:f5:de:b1:fc:67: ff:dd:60:85:c1:5a:bf:7a:79:83:31:3b:ca:37:75:bd:3b:f7: 67:12:63:9a:f5:7b:45:ff:35:44:56:d6:a0:8f:d1:0c:23:ac: ba:ae:da:d4:de:df:c4:15:b1:ae:a2:a2:54:a9:0c:ce:ef:38: 2a:75:b7:8c:fd:0d:2c:02:d8:64:ca:5e:34:20:b9:93:ec:14: 44:d2:2e:8c:05:49:32:9a:ef:48:e5:36:eb:3b:d5:c9:a7:ce: bc:fe:0f:44:64:f2:fb:1c:af:1b:ff:0e:3e:f8:f6:4d:e9:fe: fd:cf:3c:41:58:6b:7e:9a:18:b5:32:bf:73:a3:3f:cc:ba:27: e4:55:95:2f:2c:86:51:a9:28:c1:ad:14:4f:52:58:35:3c:9a: cf:c1:fb:d1:1e:7b:4f:fa:c2:aa:bb:44:eb:59:d2:77:8d:85: 87:95:31:7a:bb:ae:f0:3d:43:46:3c:46:e4:0b:49:4c:e5:66: 02:d3:71:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9biCaBGkfpRSNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk MmIwMWI1ODktMTAwYS00OTZjLWI1NjctNDEzM2RlYmViMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDenjj3MeWhFXnNxtOK+mOTSXlL2JvqoSqiE 2FuIylbznuIN2cKTInqjePwD4zq5GPXvbAsy6PN+OX4uLam7tRICL2uqRF7P5OiN qcNIleHg69rkSGYVj1cG/tgNL76vV1hEkgfEW4c8PPs14jZ4kTieWV0FqUqWoYoq S+gjgSSoO/tnwdeejAmAzF+i8gfJMJfYLuFlEmgLQdLBUAnefKIeHnY2oqTqQ5SW q7fAL1Skf2b9kk1mqs0B9SvOEMa8mYA3AgGGvrg+9wlXkCl3JksfiqEos+xvZL3l v7dHIcrpYbdlzbYZ56lP+x5A7ciyij74v+D8iviro0pyk92bcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPB0hNSUA1QepFKPord/nI0/FL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYmQyYzQ2N2ItNjY2OS0z Y2U4LTljOTEtN2RlOTc4OWY3NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADabo/HwqpC2d2npaAda++6tjC3iOUoeFKLNVgRWMMeT3453fib3TCRf wgZCe/GxsZKSz57wLxvuDRXB9SRVMCQguDP13rH8Z//dYIXBWr96eYMxO8o3db07 92cSY5r1e0X/NURW1qCP0QwjrLqu2tTe38QVsa6iolSpDM7vOCp1t4z9DSwC2GTK XjQguZPsFETSLowFSTKa70jlNus71cmnzrz+D0Rk8vscrxv/Dj749k3p/v3PPEFY a36aGLUyv3OjP8y6J+RVlS8shlGpKMGtFE9SWDU8ms/B+9Eee0/6wqq7ROtZ0neN hYeVMXq7rvA9Q0Y8RuQLSUzlZgLTcQQ= -----END CERTIFICATE-----Generated at Thu Jul 31 06:41:43 2025 by rpki-client