$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfbff075-089d-3e9e-940e-be1d5603c9f2.roa File: cfbff075-089d-3e9e-940e-be1d5603c9f2.roa (raw, json) Hash identifier: DFFHJMsHbZsozYZzNhnhCcQb/ZVuCvTp5IR+zG/YHBA= Subject key identifier: AB:2E:D8:33:61:19:DD:68:BB:7A:5A:7D:EE:AC:D8:3D:83:8D:7D:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF525AF42C5F340D4CC180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfbff075-089d-3e9e-940e-be1d5603c9f2.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 50.81.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:52:5a:f4:2c:5f:34:0d:4c:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=2dd7a1a2-9dca-40e7-a545-5fc7daf6eaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:92:e8:58:50:5f:43:74:2a:38:70:88:cc:eb: 60:4d:95:51:a1:0e:f1:76:87:5c:39:a3:08:85:19: 78:d7:c4:dd:e0:6c:c7:79:9c:6b:9f:d8:79:70:58: 4f:75:3e:b8:fb:7e:b4:0a:3b:85:ed:ba:5b:68:dd: d7:56:28:57:61:54:9b:79:cb:b8:9d:50:7f:aa:ef: 18:eb:01:18:7d:3a:b7:6f:3b:66:d1:43:55:4b:b1: d3:c7:57:42:72:32:9e:fd:42:7d:c4:6e:6e:28:d1: 72:0e:b8:7c:e7:36:5a:1f:86:61:a8:64:6f:f1:50: 16:14:d0:bc:e4:40:ce:34:6c:14:6f:0e:10:7e:9e: 01:b1:cd:f8:b2:34:26:f9:b0:b5:59:a8:9e:86:91: 85:46:0b:f4:84:3c:8a:cb:13:88:c3:9e:6f:02:78: cb:2c:3c:48:29:cc:50:27:56:c1:df:8a:c8:35:09: e4:be:98:68:e2:5b:f1:9a:94:88:d4:59:d3:58:92: 88:70:9a:fc:c2:5c:13:61:1d:35:2b:57:20:ef:80: 26:d0:b7:39:72:4a:3b:c1:0f:56:55:82:4e:05:57: f6:16:8a:c6:b3:ed:c3:c4:5a:eb:09:e7:34:6f:1a: c5:fc:83:e7:34:25:5a:66:9e:cd:d4:da:ff:12:77: e9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2E:D8:33:61:19:DD:68:BB:7A:5A:7D:EE:AC:D8:3D:83:8D:7D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfbff075-089d-3e9e-940e-be1d5603c9f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.81.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:88:22:2e:c5:66:30:f6:7e:07:35:67:fa:04:d7:36:9d:fc: d4:39:4f:8c:8e:50:9f:ba:de:e0:b2:e8:be:6a:aa:76:e5:1c: f0:61:ef:fb:fd:cd:3d:3d:9e:31:87:6b:a8:88:33:8c:06:32: a3:ee:35:b9:8d:a1:ef:ab:e6:20:53:2e:31:b8:e9:9d:cf:c6: ce:91:db:92:68:bc:ca:00:41:61:66:ae:18:59:6c:9c:a4:56: 70:7b:3a:d2:c6:04:fb:7c:26:44:b1:be:27:87:21:d0:aa:77: 36:1e:6c:01:cd:ca:72:e9:99:ce:05:ec:f3:ec:05:e4:c6:53: d8:d8:76:e1:7f:0f:e6:ac:b1:46:22:17:16:54:0b:15:a3:03: 8c:d5:71:bb:bc:51:7a:38:27:2b:41:ed:2d:29:54:31:37:be: e0:ab:98:69:2e:30:ad:b1:f0:0f:8f:bc:1d:b1:c5:4f:be:21: 62:c9:6d:a8:28:75:95:a9:38:cc:d0:9a:09:4a:c7:26:58:e3: 97:79:0b:9e:bf:0a:0e:15:73:ce:c4:9c:86:42:69:41:3f:22: fd:dd:aa:2a:ed:24:b6:0f:45:72:08:1a:cd:0e:be:4a:1d:a3: bf:13:b9:68:c6:4e:13:95:aa:77:ab:e8:e2:b8:ae:da:43:46: 95:38:8e:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71Ja9CxfNA1MwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MmRkN2ExYTItOWRjYS00MGU3LWE1NDUtNWZjN2RhZjZlYWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZLoWFBfQ3QqOHCIzOtgTZVRoQ7xdodcOaMI hRl418Td4GzHeZxrn9h5cFhPdT64+360CjuF7bpbaN3XVihXYVSbecu4nVB/qu8Y 6wEYfTq3bztm0UNVS7HTx1dCcjKe/UJ9xG5uKNFyDrh85zZaH4ZhqGRv8VAWFNC8 5EDONGwUbw4Qfp4Bsc34sjQm+bC1WaiehpGFRgv0hDyKyxOIw55vAnjLLDxIKcxQ J1bB34rINQnkvpho4lvxmpSI1FnTWJKIcJr8wlwTYR01K1cg74Am0Lc5cko7wQ9W VYJOBVf2ForGs+3DxFrrCec0bxrF/IPnNCVaZp7N1Nr/Enfp2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsu2DNhGd1ou3pafe6s2D2DjX0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZiZmYwNzUtMDg5ZC0z ZTllLTk0MGUtYmUxZDU2MDNjOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiIIi7FZjD2fgc1Z/oE1zad/NQ5T4yOUJ+63uCy6L5qqnblHPBh7/v9 zT09njGHa6iIM4wGMqPuNbmNoe+r5iBTLjG46Z3Pxs6R25JovMoAQWFmrhhZbJyk VnB7OtLGBPt8JkSxvieHIdCqdzYebAHNynLpmc4F7PPsBeTGU9jYduF/D+assUYi FxZUCxWjA4zVcbu8UXo4JytB7S0pVDE3vuCrmGkuMK2x8A+PvB2xxU++IWLJbago dZWpOMzQmglKxyZY45d5C56/Cg4Vc87EnIZCaUE/Iv3dqirtJLYPRXIIGs0Ovkod o78TuWjGThOVqner6OK4rtpDRpU4jvA= -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:36 2025 by rpki-client