$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea30c693-5302-31b3-bde6-b3901e4a5fe8.roa File: ea30c693-5302-31b3-bde6-b3901e4a5fe8.roa (raw, json) Hash identifier: SvU1B+v+zTdmSGfAtGGuSGvLAl4xiU0plvlwLT8NX5E= Subject key identifier: E6:23:5E:BF:C8:E9:21:38:74:A3:64:BB:84:8F:14:68:0E:D7:A8:88 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285848E19A0ECA2A8E8B959BF86E80 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea30c693-5302-31b3-bde6-b3901e4a5fe8.roa Signing time: Fri 14 Feb 2025 15:34:10 +0000 ROA not before: Fri 14 Feb 2025 15:34:10 +0000 ROA not after: Thu 15 May 2025 14:34:10 +0000 asID: 40244 IP address blocks: 2604:4500:24::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:9a:0e:ca:2a:8e:8b:95:9b:f8:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Feb 14 15:34:10 2025 GMT Not After : May 15 14:34:10 2025 GMT Subject: CN=3e572f71-c593-450a-b42a-e97bf26ba487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:e7:2d:f1:e2:52:12:54:ad:73:c0:25:a8: 80:70:25:64:71:fc:83:01:1a:71:ff:aa:4d:1a:c4: e2:c9:a3:a3:8a:9d:63:dd:54:0f:c6:a6:39:ac:4d: 63:3b:07:2d:fa:9f:85:7d:9e:d6:94:46:45:fa:c8: b1:11:ba:e7:4b:1b:47:b8:f6:79:b7:1e:23:18:6b: 9f:67:b0:1c:1e:4b:a5:1a:2e:c1:65:49:f1:ba:33: e1:3f:bd:5e:64:d2:13:7c:52:17:50:99:88:f1:43: b4:ac:54:7f:f3:fe:9c:4f:99:c9:9e:d0:63:75:01: 4a:11:cf:1b:5c:d9:92:66:28:d1:cc:51:95:9c:2e: be:74:a3:d6:61:f4:29:86:25:e7:5b:e7:1d:22:94: 63:16:b5:b3:7c:08:77:a4:15:49:b4:a5:70:83:22: 20:32:52:14:6a:95:bc:4b:fd:d3:50:33:bc:eb:bb: 50:e3:72:df:5d:f7:8e:7a:0f:d3:8f:76:08:fb:b7: a5:dc:60:cf:77:76:bb:6b:b4:49:58:ed:0f:19:91: b2:b4:1d:92:02:ad:72:1c:42:4f:63:46:5b:10:49: f4:de:ab:cc:d3:ba:5f:d3:2b:e0:34:55:59:8c:05: 3f:cd:19:be:6a:b1:0d:77:89:22:fc:f9:c1:12:8f: 7c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:23:5E:BF:C8:E9:21:38:74:A3:64:BB:84:8F:14:68:0E:D7:A8:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea30c693-5302-31b3-bde6-b3901e4a5fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:24::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:da:ed:bc:d3:62:d1:b1:ac:80:97:28:df:39:3e:53:43:69: 65:95:d9:71:c7:05:e2:4e:0b:5a:a8:af:7d:27:25:82:22:00: b6:2f:a5:49:04:f5:4a:28:43:19:e6:58:6f:63:c7:42:78:54: 88:38:f5:c1:3c:45:04:9b:97:0f:37:de:c9:a6:84:32:ae:dc: f4:17:71:89:01:0f:1a:c5:97:94:40:9c:cc:c8:e2:03:86:51: 0c:35:1f:e3:49:ec:00:e2:e9:94:4e:d5:31:90:2e:5c:cf:c6: 17:59:8c:17:03:1d:f4:19:0f:5f:fb:ef:db:62:24:da:fb:85: d5:0a:ad:ee:38:12:36:e3:c6:e2:7a:d3:81:e4:f8:44:61:2f: 3b:7c:3c:70:ca:9f:d2:8c:b5:cb:01:f1:a1:00:9b:fe:26:1e: 16:0d:02:b8:c3:37:96:57:61:1a:59:8e:c0:95:47:7f:8f:c5: 08:72:14:e4:f6:d2:87:e6:8e:8f:44:04:78:b7:58:d8:88:91: 55:13:19:a3:a9:26:c7:64:5b:42:93:cc:3a:17:6d:47:70:ed: 0a:3d:10:55:81:83:38:31:86:1c:a1:00:fa:48:4c:2b:01:9e: 3e:7c:73:74:3b:d6:87:cc:6c:00:54:ce:70:fb:4b:d7:45:09: e4:53:cd:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjhmg7KKo6LlZv4boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDIxNDE1MzQxMFoXDTI1MDUxNTE0MzQxMFowLzEtMCsGA1UEAxMk M2U1NzJmNzEtYzU5My00NTBhLWI0MmEtZTk3YmYyNmJhNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx7nLfHiUhJUrXPAJaiAcCVkcfyDARpx/6pN GsTiyaOjip1j3VQPxqY5rE1jOwct+p+FfZ7WlEZF+sixEbrnSxtHuPZ5tx4jGGuf Z7AcHkulGi7BZUnxujPhP71eZNITfFIXUJmI8UO0rFR/8/6cT5nJntBjdQFKEc8b XNmSZijRzFGVnC6+dKPWYfQphiXnW+cdIpRjFrWzfAh3pBVJtKVwgyIgMlIUapW8 S/3TUDO867tQ43LfXfeOeg/Tj3YI+7el3GDPd3a7a7RJWO0PGZGytB2SAq1yHEJP Y0ZbEEn03qvM07pf0yvgNFVZjAU/zRm+arENd4ki/PnBEo98AQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOYjXr/I6SE4dKNku4SPFGgO16iIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZWEzMGM2OTMtNTMwMi0z MWIzLWJkZTYtYjM5MDFlNGE1ZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHja7bzTYtGxrICXKN85PlNDaWWV2XHHBeJOC1qor30nJYIiALYv pUkE9UooQxnmWG9jx0J4VIg49cE8RQSblw833smmhDKu3PQXcYkBDxrFl5RAnMzI 4gOGUQw1H+NJ7ADi6ZRO1TGQLlzPxhdZjBcDHfQZD1/779tiJNr7hdUKre44Ejbj xuJ604Hk+ERhLzt8PHDKn9KMtcsB8aEAm/4mHhYNArjDN5ZXYRpZjsCVR3+PxQhy FOT20ofmjo9EBHi3WNiIkVUTGaOpJsdkW0KTzDoXbUdw7Qo9EFWBgzgxhhyhAPpI TCsBnj58c3Q71ofMbABUznD7S9dFCeRTzas= -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:04 2025 by rpki-client