$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac2e5dee-6489-3935-acef-119e5f7c8d48.roa File: ac2e5dee-6489-3935-acef-119e5f7c8d48.roa (raw, json) Hash identifier: PFXDdP8nvkp3DAHM1aVMPn/gI+lxFzhkEodEkznoE2Y= Subject key identifier: A4:50:B0:EF:84:82:1D:40:BC:81:9B:1F:24:EA:6F:91:E6:94:B5:7B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA02D9AFC97E1D4117E640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac2e5dee-6489-3935-acef-119e5f7c8d48.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 50.80.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:02:d9:af:c9:7e:1d:41:17:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3d5a4da3-a4d7-4f3b-ac62-408e0828a82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:81:bf:4e:eb:03:10:02:5d:ad:1d:8e:34:e0: 28:21:5b:6c:6e:98:59:43:d6:eb:a1:33:79:0e:b0: 77:b7:02:07:37:5a:2a:55:26:dc:23:13:da:69:22: 89:94:60:86:f0:75:66:70:1d:7c:d0:1f:80:4f:01: cb:fd:b8:c7:b7:1e:6d:7e:35:62:8d:e2:b3:90:bb: 5d:ba:6c:89:7c:5d:6f:2b:fd:3a:1c:e8:e8:7c:13: f6:5d:31:c9:a0:41:22:7d:cd:cf:02:37:1d:64:20: a9:11:a0:47:3c:72:13:e9:2d:96:fc:58:a7:f4:98: 92:d9:d5:17:68:38:39:a3:65:6c:ca:2b:da:10:36: 7a:24:28:e1:c0:70:fb:72:63:91:0c:c6:87:8a:76: de:50:db:e7:07:4f:ed:39:58:75:74:23:a9:75:15: 88:e5:a5:c4:00:98:14:15:57:42:03:a0:b1:72:ff: 25:1e:1a:1f:5a:64:e5:c9:1d:ca:b7:bf:1e:f1:95: 2e:38:e2:c8:5e:e8:77:23:c1:0b:f5:f0:14:69:f3: 40:86:5f:84:d7:c1:9c:3b:c8:0c:1c:b2:33:eb:00: bc:88:66:02:99:da:a3:bd:0a:c7:0d:3e:d9:ed:df: 62:ee:c3:db:bc:d8:8d:c6:62:42:d3:67:e3:19:03: 59:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:50:B0:EF:84:82:1D:40:BC:81:9B:1F:24:EA:6F:91:E6:94:B5:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac2e5dee-6489-3935-acef-119e5f7c8d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.80.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:62:3c:19:99:25:48:9f:cc:8c:e1:0b:ad:6c:7f:fc:9c:30: 33:50:47:e7:59:df:72:e6:b7:d4:d6:49:50:ee:aa:fe:ea:77: 3f:2c:4a:42:67:aa:14:60:53:4f:a1:17:01:e8:10:3b:b2:1b: 7c:0f:1f:fd:82:d8:74:37:be:c8:82:55:b0:0d:8f:30:bd:e9: 80:20:c5:a8:42:f6:ad:4b:3c:7c:bb:d4:58:8a:80:f4:1f:8b: 3d:a1:94:f3:d7:2e:ca:ff:08:66:a5:23:f8:68:35:93:ea:91: 42:39:f1:e2:54:32:0a:f4:e9:66:c3:47:e2:a2:0f:fd:58:0d: 74:79:32:91:e6:32:01:52:4a:56:a1:73:02:85:01:e6:e4:38: 8e:2e:7f:9f:78:34:e5:41:89:11:2a:4d:a9:fc:a0:ec:0f:67: f8:41:90:43:71:8f:94:a9:3c:a0:3b:03:5c:58:a8:7b:a2:51: 1d:b1:0a:b3:29:ff:11:f7:b4:db:a4:0e:7d:4e:29:3d:c6:8d: 41:21:25:98:80:b4:7b:e1:c2:20:55:70:14:57:9b:2c:a0:7f: af:a9:71:36:11:a7:11:f7:6f:4b:57:f8:36:96:a2:bb:dd:06: fc:49:61:cd:3d:e7:65:8e:01:ed:83:f3:39:5d:0c:67:bf:a4: eb:0b:60:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugLZr8l+HUEX5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2Q1YTRkYTMtYTRkNy00ZjNiLWFjNjItNDA4ZTA4MjhhODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoG/TusDEAJdrR2ONOAoIVtsbphZQ9broTN5 DrB3twIHN1oqVSbcIxPaaSKJlGCG8HVmcB180B+ATwHL/bjHtx5tfjVijeKzkLtd umyJfF1vK/06HOjofBP2XTHJoEEifc3PAjcdZCCpEaBHPHIT6S2W/Fin9JiS2dUX aDg5o2VsyivaEDZ6JCjhwHD7cmORDMaHinbeUNvnB0/tOVh1dCOpdRWI5aXEAJgU FVdCA6Cxcv8lHhofWmTlyR3Kt78e8ZUuOOLIXuh3I8EL9fAUafNAhl+E18GcO8gM HLIz6wC8iGYCmdqjvQrHDT7Z7d9i7sPbvNiNxmJC02fjGQNZgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRQsO+Egh1AvIGbHyTqb5HmlLV7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWMyZTVkZWUtNjQ4OS0z OTM1LWFjZWYtMTE5ZTVmN2M4ZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlCnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9iPBmZJUifzIzhC61sf/ycMDNQR+dZ33Lmt9TWSVDuqv7qdz8sSkJn qhRgU0+hFwHoEDuyG3wPH/2C2HQ3vsiCVbANjzC96YAgxahC9q1LPHy71FiKgPQf iz2hlPPXLsr/CGalI/hoNZPqkUI58eJUMgr06WbDR+KiD/1YDXR5MpHmMgFSSlah cwKFAebkOI4uf594NOVBiREqTan8oOwPZ/hBkENxj5SpPKA7A1xYqHuiUR2xCrMp /xH3tNukDn1OKT3GjUEhJZiAtHvhwiBVcBRXmyygf6+pcTYRpxH3b0tX+DaWorvd BvxJYc0952WOAe2D8zldDGe/pOsLYPE= -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:55 2025 by rpki-client