$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdecd28b-3502-3e7e-8d9e-b838cee49236.roa File: cdecd28b-3502-3e7e-8d9e-b838cee49236.roa (raw, json) Hash identifier: uBmoy2o8T50STzt/INfkDZbsfr8yg6I91PpvMGsUx5o= Subject key identifier: 81:39:10:19:43:56:E5:8D:5F:AE:94:B4:76:F6:E3:31:77:E1:EA:43 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410C54E3E5361BA369E42C8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdecd28b-3502-3e7e-8d9e-b838cee49236.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 50.81.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:c5:4e:3e:53:61:ba:36:9e:42:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3ba547c4-801f-42af-9ab9-3a6a21e2ef50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:fb:eb:ac:2a:c6:2a:f4:96:cb:c6:c0:e3: 89:c1:46:f6:33:00:71:ce:9e:28:a4:02:e7:aa:47: 84:24:00:e1:e5:18:e6:ec:da:67:ae:5c:cb:e5:2d: 79:1e:3d:16:20:e3:5e:f4:94:05:c0:40:76:1d:59: 78:9f:92:57:a3:74:84:10:98:5a:86:11:ce:41:f0: 84:fd:d6:d3:ed:f8:80:54:e7:3d:d1:b6:70:aa:42: 3d:d1:df:f2:a7:75:a9:66:00:0b:96:00:01:e7:bc: 3a:9a:9c:08:42:40:e4:3c:a5:76:d2:5f:87:54:da: 98:13:2d:46:c0:8a:58:11:77:ce:8f:2b:04:e7:59: a8:9f:aa:c9:64:a7:c4:87:94:f5:e4:99:12:58:02: 6e:32:a2:67:af:75:d7:69:96:63:53:0c:24:1c:d7: bc:0f:f1:3b:2b:a3:e5:21:89:08:2a:54:f6:ab:0a: 66:89:dc:93:0a:9b:b0:00:6f:94:a1:f0:ac:36:05: 7e:39:1c:97:71:8f:ac:90:3a:d4:81:f4:c9:64:9c: ab:9b:aa:ca:69:ad:91:53:59:d1:a8:70:1c:03:00: 13:af:7d:05:a3:d9:9f:33:db:54:56:f0:2a:73:d1: 8c:6b:ed:ef:39:f0:96:c0:91:be:12:ef:b3:6f:f2: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:39:10:19:43:56:E5:8D:5F:AE:94:B4:76:F6:E3:31:77:E1:EA:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdecd28b-3502-3e7e-8d9e-b838cee49236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.81.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:03:42:cb:08:ad:26:a2:18:56:02:20:c4:b1:0f:a5:aa:2a: a8:d6:20:b5:ad:4e:69:08:45:ce:91:e0:9a:56:bd:7a:35:65: c8:6e:72:d0:78:0f:7f:23:5a:c4:94:2d:06:b7:41:80:b6:9a: 71:b1:1b:77:ab:1f:ca:04:6b:b6:ee:6e:ee:15:38:cf:48:4c: 2c:d1:83:96:20:d8:e4:1b:11:a5:b5:62:4c:02:4d:9e:92:eb: 03:09:f2:0f:a5:af:e6:50:a8:0d:1d:88:d1:15:ff:3d:a4:ef: 5a:b4:0b:fc:ff:76:50:a8:d9:3f:d8:8b:82:24:23:d8:32:ec: 1c:82:5b:a9:24:4b:b8:0f:a0:37:1e:3a:29:e5:de:03:17:3c: c5:c2:92:eb:2b:3e:9c:e9:bc:84:10:e1:26:47:04:92:a8:20: be:a6:53:37:e1:f6:db:dd:b9:0b:ea:af:8d:01:eb:4e:fb:c6: f3:01:e2:d8:1c:96:e2:d2:e6:a6:8d:6d:91:29:0b:f3:c6:0e: 85:65:be:1c:e7:b6:78:9b:bf:b3:72:62:9f:eb:d2:a0:e0:37: 0c:8d:35:e5:ad:8a:2a:ac:66:21:da:57:c8:4b:cf:3b:2d:bb: 20:42:96:97:bb:5e:46:c5:1a:30:b0:d3:2c:7b:29:56:4b:7e: af:7f:d4:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEMVOPlNhujaeQsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2JhNTQ3YzQtODAxZi00MmFmLTlhYjktM2E2YTIxZTJlZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXb766wqxir0lsvGwOOJwUb2MwBxzp4opALn qkeEJADh5Rjm7NpnrlzL5S15Hj0WIONe9JQFwEB2HVl4n5JXo3SEEJhahhHOQfCE /dbT7fiAVOc90bZwqkI90d/yp3WpZgALlgAB57w6mpwIQkDkPKV20l+HVNqYEy1G wIpYEXfOjysE51mon6rJZKfEh5T15JkSWAJuMqJnr3XXaZZjUwwkHNe8D/E7K6Pl IYkIKlT2qwpmidyTCpuwAG+UofCsNgV+ORyXcY+skDrUgfTJZJyrm6rKaa2RU1nR qHAcAwATr30Fo9mfM9tUVvAqc9GMa+3vOfCWwJG+Eu+zb/JrDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIE5EBlDVuWNX66UtHb24zF34epDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2RlY2QyOGItMzUwMi0z ZTdlLThkOWUtYjgzOGNlZTQ5MjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEDQssIrSaiGFYCIMSxD6WqKqjWILWtTmkIRc6R4JpWvXo1ZchuctB4 D38jWsSULQa3QYC2mnGxG3erH8oEa7bubu4VOM9ITCzRg5Yg2OQbEaW1YkwCTZ6S 6wMJ8g+lr+ZQqA0diNEV/z2k71q0C/z/dlCo2T/Yi4IkI9gy7ByCW6kkS7gPoDce Oinl3gMXPMXCkusrPpzpvIQQ4SZHBJKoIL6mUzfh9tvduQvqr40B6077xvMB4tgc luLS5qaNbZEpC/PGDoVlvhzntnibv7NyYp/r0qDgNwyNNeWtiiqsZiHaV8hLzzst uyBClpe7XkbFGjCw0yx7KVZLfq9/1I0= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:50 2025 by rpki-client