$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3caef40c-94db-3a01-a8d1-796edb9e264d.roa File: 3caef40c-94db-3a01-a8d1-796edb9e264d.roa (raw, json) Hash identifier: 35XD5sgFiGKgfWvp5jR2FQW254zQucKybflatBxFGBA= Subject key identifier: 50:C0:FC:F7:45:DA:7D:C4:68:32:CA:21:FE:57:43:B3:00:36:CE:9F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3DBAD5C4DE78CAFB9400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3caef40c-94db-3a01-a8d1-796edb9e264d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 50.80.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3d:ba:d5:c4:de:78:ca:fb:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3ed14cbd-5164-4f79-9932-6646f62e6d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:be:13:b2:c7:8c:e6:77:9c:54:7e:86:78: 24:5f:76:a7:5e:2b:1a:c4:6b:4f:28:db:eb:e0:ae: fc:44:62:32:92:25:20:a2:a7:34:ec:fb:f9:56:69: 1d:f8:2e:11:61:19:8c:37:c3:9f:cb:1f:d5:0f:8e: dc:85:35:80:11:10:27:d4:87:61:0a:aa:89:ab:b4: 66:c2:8c:4e:bc:24:67:09:f5:84:e1:7a:f9:1d:90: 54:0a:46:87:74:97:50:e9:3c:ea:08:fc:78:7c:88: fd:36:48:2f:47:34:ea:d0:8e:91:2c:2d:cc:ee:17: 75:f8:a7:7a:c6:51:4a:5a:cc:f0:54:1d:e1:53:d8: 39:65:4c:fd:75:ff:dc:fd:71:b4:f8:e7:fd:ef:76: e3:af:73:9e:de:78:b9:13:be:a1:c5:13:07:b0:67: a2:0a:5b:95:8c:80:48:f3:e7:20:fc:46:03:0e:db: bc:82:53:7e:28:4c:52:28:9c:f2:3a:fe:2d:a1:2b: f8:b3:7b:da:3c:cc:59:fc:4b:b1:83:7c:77:1d:c7: af:cb:bb:17:77:fb:10:0e:1f:ec:c8:72:d9:1a:15: 9a:69:2f:aa:44:2a:25:7f:32:ac:3c:26:74:45:72: 51:0d:37:e0:a6:9e:a6:7a:47:f8:ca:ce:81:08:5b: 56:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C0:FC:F7:45:DA:7D:C4:68:32:CA:21:FE:57:43:B3:00:36:CE:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3caef40c-94db-3a01-a8d1-796edb9e264d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.80.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4b:f0:02:82:71:ad:60:e8:cd:8d:47:ae:6c:68:2d:ca:ff: e6:a0:2b:f8:e2:39:50:cf:99:e5:42:9e:2e:a7:58:c9:20:55: 9d:f8:a5:d3:75:12:92:bb:a2:6f:6c:b9:4b:58:9a:6f:59:18: 3c:76:29:62:8d:5e:eb:44:ac:63:66:68:c4:0e:38:69:df:e6: 14:d0:f4:bb:20:f2:82:12:e1:e1:9b:f4:a1:47:97:d0:29:4c: cb:78:68:9a:19:2b:a2:dd:d4:6c:b7:43:15:cb:99:c1:21:eb: d5:a9:cf:cc:73:e0:21:ce:e0:0d:4d:4c:3b:b6:c7:5d:45:c4: c3:60:2d:ba:50:d8:bc:20:c3:19:92:a0:e8:aa:66:61:0d:03: ed:38:21:2b:10:3a:fa:69:b7:88:b7:25:9c:03:28:4c:27:f7: d2:69:6e:83:0e:2e:9c:26:a6:25:40:1a:78:46:48:45:dc:f3: 31:8d:04:42:eb:a0:d4:28:93:a2:97:32:63:5d:d1:06:8e:78: ef:aa:46:89:be:a6:8f:4b:fd:34:d1:45:06:2f:d6:7b:21:7a: 28:4c:f3:c7:c0:8f:03:c6:b6:2e:15:65:dd:40:29:f3:08:7a: f3:ef:21:ee:a4:07:70:36:cd:01:bb:e5:cf:29:51:20:04:8d: 92:08:fa:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuj261cTeeMr7lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2VkMTRjYmQtNTE2NC00Zjc5LTk5MzItNjY0NmY2MmU2ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2i+E7LHjOZ3nFR+hngkX3anXisaxGtPKNvr 4K78RGIykiUgoqc07Pv5Vmkd+C4RYRmMN8Ofyx/VD47chTWAERAn1IdhCqqJq7Rm woxOvCRnCfWE4Xr5HZBUCkaHdJdQ6TzqCPx4fIj9NkgvRzTq0I6RLC3M7hd1+Kd6 xlFKWszwVB3hU9g5ZUz9df/c/XG0+Of973bjr3Oe3ni5E76hxRMHsGeiCluVjIBI 8+cg/EYDDtu8glN+KExSKJzyOv4toSv4s3vaPMxZ/Euxg3x3Hcevy7sXd/sQDh/s yHLZGhWaaS+qRColfzKsPCZ0RXJRDTfgpp6mekf4ys6BCFtW9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDA/PdF2n3EaDLKIf5XQ7MANs6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2NhZWY0MGMtOTRkYi0z YTAxLWE4ZDEtNzk2ZWRiOWUyNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlDmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBL8AKCca1g6M2NR65saC3K/+agK/jiOVDPmeVCni6nWMkgVZ34pdN1 EpK7om9suUtYmm9ZGDx2KWKNXutErGNmaMQOOGnf5hTQ9Lsg8oIS4eGb9KFHl9Ap TMt4aJoZK6Ld1Gy3QxXLmcEh69Wpz8xz4CHO4A1NTDu2x11FxMNgLbpQ2LwgwxmS oOiqZmENA+04ISsQOvppt4i3JZwDKEwn99JpboMOLpwmpiVAGnhGSEXc8zGNBELr oNQok6KXMmNd0QaOeO+qRom+po9L/TTRRQYv1nsheihM88fAjwPGti4VZd1AKfMI evPvIe6kB3A2zQG75c8pUSAEjZII+nk= -----END CERTIFICATE-----Generated at Sun Apr 27 07:40:49 2025 by rpki-client