$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec4856f1-c9e4-3940-a124-a7ca40e038a2.roa File: ec4856f1-c9e4-3940-a124-a7ca40e038a2.roa (raw, json) Hash identifier: tbSL2ENoPCUXyj6L5mO0oV5Y4KjVh3xHL5QSsSMR8Uo= Subject key identifier: 20:F8:48:9D:0D:AA:94:D2:28:4C:04:22:E1:97:8F:D9:A3:53:A0:E0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584967EB022AD0D595E6970F61C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec4856f1-c9e4-3940-a124-a7ca40e038a2.roa Signing time: Thu 03 Apr 2025 18:15:36 +0000 ROA not before: Thu 03 Apr 2025 18:15:36 +0000 ROA not after: Wed 02 Jul 2025 18:15:36 +0000 asID: 30036 IP address blocks: 50.81.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:eb:02:2a:d0:d5:95:e6:97:0f:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 3 18:15:36 2025 GMT Not After : Jul 2 18:15:36 2025 GMT Subject: CN=1cef0b43-b342-4b92-b5d1-0c865050dd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7e:54:c7:41:b5:75:aa:7a:0e:41:39:33:43: e3:a8:11:e1:bb:99:c0:a3:74:a0:57:28:ab:3c:7b: a4:a0:12:b5:06:bf:41:2d:d7:fc:25:39:37:67:29: 8e:46:3b:7e:4d:b5:7a:bc:36:b9:ce:bc:9f:56:16: 2b:17:60:e3:8c:30:a7:fd:37:99:97:43:ca:35:e7: e7:88:cd:38:16:96:c7:b1:c0:4a:62:c7:cd:3b:6c: d0:7b:f7:68:ca:bd:b7:0c:47:bc:c6:c1:7a:7c:07: 15:08:9d:22:bf:84:a7:e1:ed:fc:39:ea:4e:43:7a: 42:20:87:6f:ac:ae:25:b7:29:87:51:e5:fa:3b:5f: 10:b6:72:3b:1b:73:8c:c2:6b:1a:60:d1:62:6c:46: 65:d6:04:9b:67:ae:54:4d:33:86:a7:2c:64:b2:3b: 7e:63:23:13:b5:71:94:95:1b:4f:b2:57:c6:bc:9b: 2b:2f:84:08:0c:0e:c9:ee:02:35:ae:ec:8b:01:0f: 9e:2c:98:f9:22:9f:ec:62:f8:1d:f6:b5:81:f7:d1: 0e:33:a0:db:cb:c9:1b:5c:0a:b4:1b:ac:1b:51:96: 86:e5:16:c4:a3:d2:77:c5:c9:c3:85:e5:78:01:29: 07:5d:84:f0:1c:9f:07:be:87:3b:3a:3c:84:3d:3d: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F8:48:9D:0D:AA:94:D2:28:4C:04:22:E1:97:8F:D9:A3:53:A0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec4856f1-c9e4-3940-a124-a7ca40e038a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.81.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:db:d8:d0:5e:d9:e1:56:80:32:e9:59:01:af:bb:94:53:3e: f8:a2:21:81:e7:68:a6:a4:6e:b0:1c:c6:38:c6:08:74:5f:27: f8:c1:df:ef:49:4a:c0:5b:82:6b:ff:62:6b:bf:a3:41:26:b9: 20:ba:18:97:45:7f:24:a4:0a:e2:53:99:9b:17:88:e1:a2:76: 8b:4e:31:fb:93:fb:a2:d3:37:bc:15:0b:cb:05:fd:9e:a8:89: 89:0d:d5:45:89:d6:d2:a3:4e:93:20:f3:d9:35:aa:c9:21:86: 2b:a9:fe:ac:b8:55:6c:c5:81:d4:29:ba:5c:30:54:45:15:79: 8c:1e:a3:94:b0:eb:57:e7:b1:78:bb:48:3f:81:e0:ed:03:91: 2a:f1:84:23:9a:8c:6b:3f:8b:5d:56:ed:77:13:d9:96:71:02: bb:02:26:68:23:46:b4:7c:49:04:dc:47:44:fd:e8:93:60:da: 99:98:3a:bc:43:5e:ce:45:2a:92:52:36:97:42:b4:fd:d3:54: cf:1d:80:2e:76:c9:26:44:e1:16:b4:99:ac:37:2f:04:d2:26: 6c:60:ca:c2:23:9e:62:1e:b6:09:c0:6f:57:a8:4b:7e:0f:8c: 69:5a:51:f2:a1:66:1c:4f:4e:75:a5:31:9f:75:bf:d2:df:a6: 54:5c:10:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEln6wIq0NWV5pcPYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQwMzE4MTUzNloXDTI1MDcwMjE4MTUzNlowLzEtMCsGA1UEAxMk MWNlZjBiNDMtYjM0Mi00YjkyLWI1ZDEtMGM4NjUwNTBkZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n5Ux0G1dap6DkE5M0PjqBHhu5nAo3SgVyir PHukoBK1Br9BLdf8JTk3ZymORjt+TbV6vDa5zryfVhYrF2DjjDCn/TeZl0PKNefn iM04FpbHscBKYsfNO2zQe/doyr23DEe8xsF6fAcVCJ0iv4Sn4e38OepOQ3pCIIdv rK4ltymHUeX6O18QtnI7G3OMwmsaYNFibEZl1gSbZ65UTTOGpyxksjt+YyMTtXGU lRtPslfGvJsrL4QIDA7J7gI1ruyLAQ+eLJj5Ip/sYvgd9rWB99EOM6Dby8kbXAq0 G6wbUZaG5RbEo9J3xcnDheV4ASkHXYTwHJ8Hvoc7OjyEPT0MUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD4SJ0NqpTSKEwEIuGXj9mjU6DgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWM0ODU2ZjEtYzllNC0z OTQwLWExMjQtYTdjYTQwZTAzOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3b2NBe2eFWgDLpWQGvu5RTPviiIYHnaKakbrAcxjjGCHRfJ/jB3+9J SsBbgmv/Ymu/o0EmuSC6GJdFfySkCuJTmZsXiOGidotOMfuT+6LTN7wVC8sF/Z6o iYkN1UWJ1tKjTpMg89k1qskhhiup/qy4VWzFgdQpulwwVEUVeYweo5Sw61fnsXi7 SD+B4O0DkSrxhCOajGs/i11W7XcT2ZZxArsCJmgjRrR8SQTcR0T96JNg2pmYOrxD Xs5FKpJSNpdCtP3TVM8dgC52ySZE4Ra0maw3LwTSJmxgysIjnmIetgnAb1eoS34P jGlaUfKhZhxPTnWlMZ91v9LfplRcENA= -----END CERTIFICATE-----Generated at Sun Apr 27 15:06:02 2025 by rpki-client