$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb71eb23-3c1d-3bec-8f59-d61bc14ff291.roa File: cb71eb23-3c1d-3bec-8f59-d61bc14ff291.roa (raw, json) Hash identifier: zTXJfWZFS/VmngeJg3AZgGLW5RMrxdCQS4dgqChx7Eo= Subject key identifier: 40:68:3C:E5:80:17:59:E2:29:AF:8E:E4:8A:E0:25:27:0F:44:38:78 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849F44A57F738E849952DD3ED60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb71eb23-3c1d-3bec-8f59-d61bc14ff291.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 30036 IP address blocks: 50.81.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:57:f7:38:e8:49:95:2d:d3:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=230c0b8d-ed2b-4576-b18d-9bedf8219d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:ae:d2:31:30:ae:24:c5:c5:68:39:04:61: 48:a1:ae:12:a2:d6:a3:ac:61:9e:31:89:31:91:c3: 32:90:af:63:ef:9e:29:b7:da:33:8c:8c:61:47:d1: e3:8d:84:0f:90:5f:cb:69:ce:be:d9:46:35:da:a6: 74:ae:17:cc:52:bd:e0:d5:fc:09:bf:a0:6a:93:84: be:53:97:71:ab:22:9a:7d:14:08:f0:f0:57:42:89: c1:85:3e:38:30:e6:b3:fd:c9:37:b8:8c:cd:9f:60: 24:57:f4:dc:b0:96:d6:b0:9d:5e:ac:0f:82:f9:84: aa:00:2c:40:90:d0:a3:dd:40:23:7a:02:67:04:74: a1:94:6e:a5:5c:d9:33:e4:8a:9f:a5:ea:2f:d2:f1: bf:3b:c5:d4:77:cc:ca:6e:b2:0d:00:65:cd:7a:e9: 2a:8d:8b:37:f6:fa:06:c0:41:1c:66:8d:da:fc:16: 13:12:a1:25:78:33:94:fc:ec:01:8a:55:98:4d:1d: 62:22:81:eb:dd:4d:f4:61:39:6c:ae:9c:6b:1e:ac: 6e:cf:59:8f:34:fe:0b:1d:01:01:f5:de:5b:2d:84: 64:53:be:e0:5e:68:e5:96:b8:54:bc:4a:1c:31:78: 8e:19:2b:da:41:4a:09:5a:6e:c2:44:52:6e:bc:24: b1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:68:3C:E5:80:17:59:E2:29:AF:8E:E4:8A:E0:25:27:0F:44:38:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb71eb23-3c1d-3bec-8f59-d61bc14ff291.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.81.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:73:6e:13:fc:26:c1:94:b5:a9:c7:73:34:d0:9d:9b:75:70: 0c:73:f8:86:d8:d1:2c:cc:ee:8d:50:f1:0a:36:f3:49:61:d8: 23:df:59:9a:7b:8a:c8:31:ed:17:87:50:7e:be:87:9a:64:76: 48:13:c9:b6:fe:e2:ed:67:37:2d:ec:91:8e:38:25:07:91:94: bb:39:43:3d:d5:40:9e:7c:33:53:f2:c2:f5:cb:0e:9d:42:3a: 6b:bf:21:7f:37:c4:72:ba:d0:8d:c8:ea:65:4c:7d:2f:c8:af: 88:ff:db:b3:da:90:28:e9:ce:9d:c5:6d:da:0d:48:47:a8:a5: 3d:9f:54:a2:22:48:62:91:02:d7:83:61:ea:cb:57:82:c7:f4: a1:3d:35:32:2c:ba:62:d4:51:e4:4f:df:56:b4:dd:c6:f7:86: d2:95:8f:02:6b:3d:e3:7a:44:c0:0c:21:d7:d5:b9:48:99:92: b3:a3:f8:82:a6:c3:89:79:d1:9c:d0:31:34:7c:2e:9e:f9:af: ce:e4:b9:ae:5a:a2:9a:05:4f:a6:93:ee:30:3a:bd:db:c6:3e: ce:ec:5e:ee:b1:d9:6b:64:c4:73:21:85:1c:f1:0b:89:c4:0e: 84:a5:c7:1d:6e:09:b2:16:21:e3:d1:3e:ac:1e:0b:fc:64:3c: 41:23:8f:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0Slf3OOhJlS3T7WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk MjMwYzBiOGQtZWQyYi00NTc2LWIxOGQtOWJlZGY4MjE5ZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS+u0jEwriTFxWg5BGFIoa4SotajrGGeMYkx kcMykK9j754pt9ozjIxhR9HjjYQPkF/Lac6+2UY12qZ0rhfMUr3g1fwJv6Bqk4S+ U5dxqyKafRQI8PBXQonBhT44MOaz/ck3uIzNn2AkV/TcsJbWsJ1erA+C+YSqACxA kNCj3UAjegJnBHShlG6lXNkz5Iqfpeov0vG/O8XUd8zKbrINAGXNeukqjYs39voG wEEcZo3a/BYTEqEleDOU/OwBilWYTR1iIoHr3U30YTlsrpxrHqxuz1mPNP4LHQEB 9d5bLYRkU77gXmjllrhUvEocMXiOGSvaQUoJWm7CRFJuvCSxywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBoPOWAF1niKa+O5IrgJScPRDh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2I3MWViMjMtM2MxZC0z YmVjLThmNTktZDYxYmMxNGZmMjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMlEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVzbhP8JsGUtanHczTQnZt1cAxz+IbY0SzM7o1Q8Qo280lh2CPfWZp7 isgx7ReHUH6+h5pkdkgTybb+4u1nNy3skY44JQeRlLs5Qz3VQJ58M1PywvXLDp1C Omu/IX83xHK60I3I6mVMfS/Ir4j/27PakCjpzp3FbdoNSEeopT2fVKIiSGKRAteD YerLV4LH9KE9NTIsumLUUeRP31a03cb3htKVjwJrPeN6RMAMIdfVuUiZkrOj+IKm w4l50ZzQMTR8Lp75r87kua5aopoFT6aT7jA6vdvGPs7sXu6x2WtkxHMhhRzxC4nE DoSlxx1uCbIWIePRPqweC/xkPEEjj9I= -----END CERTIFICATE-----Generated at Sun Jun 15 15:00:26 2025 by rpki-client