$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/532a6650-1360-380d-a68f-680dd10f9fc8.roa File: 532a6650-1360-380d-a68f-680dd10f9fc8.roa (raw, json) Hash identifier: 40DWhkf0gNqnaP4+GyTip9v+HzhOZ4XYkHHdahj43R8= Subject key identifier: F7:64:F3:F4:31:94:42:F5:F4:C4:FC:15:BE:00:40:4B:90:53:7E:4D Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285849E7BA82D6F773C5620BA4A800 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/532a6650-1360-380d-a68f-680dd10f9fc8.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 61317 IP address blocks: 2604:4500:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:82:d6:f7:73:c5:62:0b:a4:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=9aae18bb-9ee5-44f7-a5b1-9e74cf4c37bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f1:09:32:4a:53:c6:8f:87:39:d2:05:87:91: 3e:85:d1:ba:b1:8d:aa:fb:b0:98:e1:2c:ca:fa:13: 11:c4:85:d4:e1:6e:6a:74:51:09:67:e6:b4:0c:b2: 64:50:c9:d7:0d:88:f7:eb:2a:f9:0e:c3:2d:57:f2: f1:15:a3:21:9a:c9:c9:96:81:f3:a9:5c:39:b5:5a: ac:4e:8c:aa:71:15:b5:c2:f3:60:cd:5e:1a:21:b2: 37:d6:a2:c6:8e:0b:25:18:d7:d4:df:be:14:31:55: 35:92:dd:4a:8b:8e:26:2e:19:99:c7:eb:7e:6d:f8: ae:a2:30:fa:b0:7f:b0:b2:18:00:d4:39:bc:ee:dc: 0e:f2:23:8f:20:af:ed:be:46:d6:e3:8a:dc:ed:ea: 0b:4e:e9:82:2e:45:4a:f1:d7:8f:2a:15:f6:5a:bb: 5a:2b:b6:cf:ed:52:8d:2f:36:74:e9:08:e1:83:56: 1a:01:98:2b:9b:1d:fe:cd:1d:36:fd:5e:f5:3d:aa: 9a:94:a1:7c:2e:e6:12:21:75:f4:5f:8a:06:1b:d3: f7:d2:84:47:51:95:a1:65:a5:8f:7e:90:24:fd:a7: a8:d7:66:31:6a:dc:89:0c:3b:6c:f4:34:12:70:30: fe:ec:5b:33:97:7d:61:84:c3:9e:72:0c:93:29:40: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:64:F3:F4:31:94:42:F5:F4:C4:FC:15:BE:00:40:4B:90:53:7E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/532a6650-1360-380d-a68f-680dd10f9fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d7:58:98:16:f8:f0:f6:2d:6e:04:c5:b1:96:21:c9:58:7b: af:b3:6b:28:76:80:6d:c0:97:d9:69:2c:6d:f9:76:f3:65:da: 87:63:c4:a7:8b:b0:ff:30:c5:b0:69:71:1b:f3:6b:dd:58:5f: e8:f8:3a:7e:35:80:4b:f9:ba:7e:d9:e5:38:dd:8d:c3:c5:a7: 72:dc:6c:d0:eb:4c:eb:f0:ca:95:a5:a4:a9:87:67:04:bf:c3: bf:1b:48:10:46:34:ae:5b:64:fd:90:4e:29:d0:c9:ee:82:69: 84:16:63:2b:e4:92:52:26:6f:65:54:93:6e:e2:30:21:23:7d: 4e:aa:3e:9c:93:29:e0:db:77:82:88:77:02:9f:0b:e2:cb:69: e6:6d:4b:e7:cb:dd:c9:1f:63:24:e9:c7:1d:b3:27:a6:58:e2: f7:6f:bb:ce:cb:e3:e7:bb:4c:30:b6:eb:8b:86:dd:96:79:9d: 45:d5:02:17:8a:78:10:73:e0:f9:37:23:cf:b0:cf:ae:66:f6: 89:3c:a3:57:ae:2f:59:cc:b4:07:17:db:6a:81:15:3f:34:18: 6b:62:64:b0:c4:40:04:d3:8c:89:6b:e2:bd:84:93:ee:56:8d: 92:fe:3e:13:a9:d2:55:c2:ed:a5:0e:d0:13:ab:f3:68:40:9a: b9:47:a6:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnnuoLW93PFYgukqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk OWFhZTE4YmItOWVlNS00NGY3LWE1YjEtOWU3NGNmNGMzN2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvEJMkpTxo+HOdIFh5E+hdG6sY2q+7CY4SzK +hMRxIXU4W5qdFEJZ+a0DLJkUMnXDYj36yr5DsMtV/LxFaMhmsnJloHzqVw5tVqs ToyqcRW1wvNgzV4aIbI31qLGjgslGNfU374UMVU1kt1Ki44mLhmZx+t+bfiuojD6 sH+wshgA1Dm87twO8iOPIK/tvkbW44rc7eoLTumCLkVK8dePKhX2WrtaK7bP7VKN LzZ06Qjhg1YaAZgrmx3+zR02/V71PaqalKF8LuYSIXX0X4oGG9P30oRHUZWhZaWP fpAk/aeo12YxatyJDDts9DQScDD+7Fszl31hhMOecgyTKUA9pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPdk8/QxlEL19MT8Fb4AQEuQU35NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNTMyYTY2NTAtMTM2MC0z ODBkLWE2OGYtNjgwZGQxMGY5ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDXWJgW+PD2LW4ExbGWIclYe6+zayh2gG3Al9lpLG35dvNl2odj xKeLsP8wxbBpcRvza91YX+j4On41gEv5un7Z5TjdjcPFp3LcbNDrTOvwypWlpKmH ZwS/w78bSBBGNK5bZP2QTinQye6CaYQWYyvkklImb2VUk27iMCEjfU6qPpyTKeDb d4KIdwKfC+LLaeZtS+fL3ckfYyTpxx2zJ6ZY4vdvu87L4+e7TDC264uG3ZZ5nUXV AheKeBBz4Pk3I8+wz65m9ok8o1euL1nMtAcX22qBFT80GGtiZLDEQATTjIlr4r2E k+5WjZL+PhOp0lXC7aUO0BOr82hAmrlHpjU= -----END CERTIFICATE-----Generated at Sun Jun 15 05:53:19 2025 by rpki-client