$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa File: 1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa (raw, json) Hash identifier: 3nggnLjsrrFgGusMkFZRnY+H4xxc8p89mGYSsyOEO+0= Subject key identifier: A4:C7:3C:A5:1F:FC:98:DE:F6:DF:82:54:07:84:33:A9:DE:55:77:65 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285849E7BA82F550D5A49F22A83680 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 61317 IP address blocks: 2604:4500:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:82:f5:50:d5:a4:9f:22:a8:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=4c6eabb9-a855-4c18-bb76-1bd430deab68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:bd:f6:d0:9e:1f:e0:03:33:de:47:a8:31: 38:bc:18:1b:81:fa:83:14:6b:8b:e6:8b:96:2f:39: a6:e4:1f:84:ea:76:3a:74:4b:fe:ef:eb:63:04:cc: 18:76:d2:85:d7:e6:bc:20:6f:8d:b3:af:00:2a:d8: 37:86:46:ac:58:16:ba:c7:1a:27:c2:16:42:43:08: c0:f3:19:8f:1b:00:ca:e7:11:61:61:31:9b:87:c1: 86:e5:75:53:f2:f1:a9:90:f7:5a:3f:63:40:d9:f1: 80:cb:14:98:ae:b6:dd:01:7c:da:85:11:98:f1:61: d6:6a:c1:3a:00:3c:01:5b:4b:98:82:a6:9b:dc:6a: b7:f4:69:c6:c0:9a:d8:6d:73:20:b2:46:84:24:54: a7:3b:ac:ec:ff:06:2b:70:1d:7f:b2:5f:49:cb:b6: 6d:12:b9:d7:8f:35:4b:3b:6c:99:69:83:be:2e:ca: c2:7f:90:51:fb:eb:ae:bd:e1:1c:66:b2:b6:75:d0: 08:4e:ae:23:1a:ab:fe:f7:9a:49:16:06:44:8a:37: 1d:98:42:99:67:cb:99:8f:7f:dc:4e:fa:b6:2e:6e: e9:a6:ad:0d:ee:5d:fb:5a:89:d3:e9:92:fa:de:0f: 8b:12:fe:51:54:ce:82:95:63:da:5b:b5:7e:98:bb: d5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C7:3C:A5:1F:FC:98:DE:F6:DF:82:54:07:84:33:A9:DE:55:77:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1ba5e4de-c2cf-32fd-8d03-f70c59257c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:57:d4:c8:5a:d5:20:d6:70:9a:a5:a2:8a:b8:8d:b1:09:17: e3:82:a5:d9:32:c1:93:10:03:be:eb:83:62:9a:cd:57:7b:90: 26:f8:43:bd:80:33:dd:fd:68:dc:70:98:cd:1b:ac:75:0d:e8: 20:be:97:7a:37:20:25:c0:1a:6c:4b:d2:c1:51:f8:84:1a:7f: f1:e5:0b:84:cb:71:21:e1:29:ac:26:e3:98:21:d5:65:35:e7: 0b:1f:71:87:4f:17:28:e3:e6:7a:44:33:da:bf:c4:7c:6b:32: a9:a8:e8:f7:ee:d0:a2:6e:48:39:8b:43:97:6c:f4:ca:38:e3: 88:f7:42:a7:ce:21:e1:d8:a6:da:14:dd:d8:c6:68:4f:58:87: e5:c1:0f:1e:7f:36:35:9f:4e:53:be:94:18:5a:25:47:68:30: c0:06:e0:31:82:3b:01:95:42:ad:f3:6a:fa:ef:d6:b7:bc:db: c1:26:41:e9:6e:7c:83:04:ef:3d:1c:77:eb:9c:c0:70:a0:69: 0a:19:c9:69:79:0c:26:72:06:df:30:83:a8:e6:94:38:4c:0f: 23:0f:c6:91:e4:18:6e:1e:60:79:6d:da:48:63:02:e9:c8:61: 8d:f2:71:17:d5:8b:27:cd:83:1f:80:38:c9:0b:c6:ff:a9:76: 3b:be:df:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnnuoL1UNWknyKoNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NGM2ZWFiYjktYTg1NS00YzE4LWJiNzYtMWJkNDMwZGVhYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUK99tCeH+ADM95HqDE4vBgbgfqDFGuL5ouW Lzmm5B+E6nY6dEv+7+tjBMwYdtKF1+a8IG+Ns68AKtg3hkasWBa6xxonwhZCQwjA 8xmPGwDK5xFhYTGbh8GG5XVT8vGpkPdaP2NA2fGAyxSYrrbdAXzahRGY8WHWasE6 ADwBW0uYgqab3Gq39GnGwJrYbXMgskaEJFSnO6zs/wYrcB1/sl9Jy7ZtErnXjzVL O2yZaYO+LsrCf5BR++uuveEcZrK2ddAITq4jGqv+95pJFgZEijcdmEKZZ8uZj3/c Tvq2Lm7ppq0N7l37WonT6ZL63g+LEv5RVM6ClWPaW7V+mLvVwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKTHPKUf/Jje9t+CVAeEM6neVXdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWJhNWU0ZGUtYzJjZi0z MmZkLThkMDMtZjcwYzU5MjU3YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVX1Mha1SDWcJqlooq4jbEJF+OCpdkywZMQA77rg2KazVd7kCb4 Q72AM939aNxwmM0brHUN6CC+l3o3ICXAGmxL0sFR+IQaf/HlC4TLcSHhKawm45gh 1WU15wsfcYdPFyjj5npEM9q/xHxrMqmo6Pfu0KJuSDmLQ5ds9Mo444j3QqfOIeHY ptoU3djGaE9Yh+XBDx5/NjWfTlO+lBhaJUdoMMAG4DGCOwGVQq3zavrv1re828Em QelufIME7z0cd+ucwHCgaQoZyWl5DCZyBt8wg6jmlDhMDyMPxpHkGG4eYHlt2khj AunIYY3ycRfViyfNgx+AOMkLxv+pdju+34s= -----END CERTIFICATE-----Generated at Sun Jun 15 17:52:45 2025 by rpki-client