$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa File: 216d1b01-5a89-3872-ae8e-416135965cb6.roa (raw, json) Hash identifier: OihomzghOs9BnP6JwcFncapWa4zxauVgaHF/WkXkafE= Subject key identifier: 1F:2F:0C:7A:4D:B7:1D:CD:EB:FB:ED:87:CD:C2:C4:6B:4E:B5:AD:0F Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858494CC93C1716B9BB07F41DDD80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 396881 IP address blocks: 2604:880:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3c:17:16:b9:bb:07:f4:1d:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=ba168a72-3d40-40d3-bffe-263f0f88a67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:52:02:7a:ad:8d:62:cc:c3:31:f6:ea:8d: 30:2f:d2:e0:09:ef:70:01:f1:c7:0f:5c:c4:b0:cd: 1b:52:29:cc:25:40:30:07:d4:cf:59:c2:9d:ab:bc: 14:ca:e6:c8:cb:c7:f5:46:63:60:df:81:75:13:c9: 2e:8a:83:3e:53:06:19:67:ef:47:a0:70:49:e6:99: 69:30:24:a9:82:f3:ac:88:3d:85:ea:a0:13:8b:ca: 44:27:f7:b9:60:e6:85:12:c5:6a:0a:b7:b2:42:4d: 92:69:7a:a1:36:42:82:5b:0e:b0:34:fa:99:25:2c: ac:c6:67:43:5c:7f:55:05:3e:d6:4b:ed:89:3e:1d: 0b:49:28:01:96:20:e5:d8:b0:f6:37:db:79:72:dc: a8:c0:9a:c8:94:6c:b8:94:52:da:10:42:11:79:7e: 4a:f6:26:d8:93:f6:00:55:7d:e9:ee:f0:cc:05:29: 33:6e:2f:92:47:63:03:0c:cb:b6:71:c5:70:3f:b2: c7:be:5b:dc:b7:e5:df:d1:c9:68:ba:0f:99:02:a5: e5:37:aa:d1:0b:06:d9:b2:b1:e7:8d:52:2e:db:e0: fb:6b:c3:3e:68:e1:2a:da:83:0a:be:c5:c0:d2:94: e3:44:1e:68:9f:40:b4:8f:94:86:17:5b:e6:cf:c3: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2F:0C:7A:4D:B7:1D:CD:EB:FB:ED:87:CD:C2:C4:6B:4E:B5:AD:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/216d1b01-5a89-3872-ae8e-416135965cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:880:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:36:11:bf:61:41:bb:b1:da:e0:5c:5d:35:ad:cb:04:8c:0a: 5f:e8:29:d6:8c:bc:d4:36:9b:5c:86:57:b9:2e:ac:b0:b0:0b: d4:12:85:a5:95:3b:93:63:4f:ba:d9:ed:78:f7:4c:4d:d2:9c: 4d:9c:53:3d:8f:ec:0c:a4:0e:7e:9e:bd:c6:2a:6b:99:7c:2f: b2:c3:99:b8:87:60:7b:12:b5:6c:8c:38:67:24:4c:92:e3:2d: 69:e0:82:75:14:9f:49:0e:8f:80:c9:74:6d:94:9e:0f:40:02: db:ca:cc:80:ec:1a:42:30:53:a6:e8:cb:ca:a3:7a:b3:72:f4: ee:b5:81:aa:3a:ef:64:9d:78:46:7a:d7:67:1c:8c:68:7e:59: 23:89:31:47:6b:a9:20:a2:51:0e:a2:d8:28:f4:ad:d6:85:71: 66:c7:b7:6a:42:37:52:22:d4:48:ce:16:d8:a9:7e:71:e0:80: 9e:12:08:b9:7a:08:52:c0:10:6d:97:ab:49:d6:30:1c:90:96: 50:07:16:a8:8a:ab:cc:14:3a:71:ef:98:b1:76:aa:d8:c1:c0: b2:1d:ef:91:49:8d:6d:aa:e7:02:a2:25:06:c2:32:cf:0c:ca: aa:78:44:3f:20:21:e7:87:ca:93:60:a2:e1:2a:de:06:52:18: 27:7b:88:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyTwXFrm7B/Qd3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YmExNjhhNzItM2Q0MC00MGQzLWJmZmUtMjYzZjBmODhhNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF1SAnqtjWLMwzH26o0wL9LgCe9wAfHHD1zE sM0bUinMJUAwB9TPWcKdq7wUyubIy8f1RmNg34F1E8kuioM+UwYZZ+9HoHBJ5plp MCSpgvOsiD2F6qATi8pEJ/e5YOaFEsVqCreyQk2SaXqhNkKCWw6wNPqZJSysxmdD XH9VBT7WS+2JPh0LSSgBliDl2LD2N9t5ctyowJrIlGy4lFLaEEIReX5K9ibYk/YA VX3p7vDMBSkzbi+SR2MDDMu2ccVwP7LHvlvct+Xf0cloug+ZAqXlN6rRCwbZsrHn jVIu2+D7a8M+aOEq2oMKvsXA0pTjRB5on0C0j5SGF1vmz8P5pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB8vDHpNtx3N6/vth83CxGtOta0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMjE2ZDFiMDEtNWE4OS0z ODcyLWFlOGUtNDE2MTM1OTY1Y2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQIgABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC42Eb9hQbux2uBcXTWtywSMCl/oKdaMvNQ2m1yGV7kurLCwC9QS haWVO5NjT7rZ7Xj3TE3SnE2cUz2P7AykDn6evcYqa5l8L7LDmbiHYHsStWyMOGck TJLjLWnggnUUn0kOj4DJdG2Ung9AAtvKzIDsGkIwU6boy8qjerNy9O61gao672Sd eEZ612ccjGh+WSOJMUdrqSCiUQ6i2Cj0rdaFcWbHt2pCN1Ii1EjOFtipfnHggJ4S CLl6CFLAEG2Xq0nWMByQllAHFqiKq8wUOnHvmLF2qtjBwLId75FJjW2q5wKiJQbC Ms8Myqp4RD8gIeeHypNgouEq3gZSGCd7iIM= -----END CERTIFICATE-----Generated at Wed Apr 30 10:07:59 2025 by rpki-client