$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa File: fde386a0-a0a3-33f9-ad11-813778cd69cd.roa (raw, json) Hash identifier: C4aIkjlJA7mBj3FYxDdVkVSmzw+bnatqVhkALG1OH6M= Subject key identifier: 15:82:81:ED:02:E3:0B:8F:AF:0E:7E:3A:16:54:E7:06:50:07:C2:23 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858494CC93C46C0B7994FFB4D917C Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 29802 IP address blocks: 2604:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3c:46:c0:b7:99:4f:fb:4d:91:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=20c268cf-bcdd-467f-b289-01d15ccac2b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:76:61:96:60:5d:c8:a4:d0:b3:ac:ed:30:46: 9e:c0:20:6f:29:cc:38:e2:b3:f0:24:89:9c:22:12: 45:5b:a3:21:e3:0d:95:19:46:7f:ac:cb:0f:e8:83: 43:3a:95:c7:c4:80:d3:5d:45:58:5a:2d:db:b8:bb: 27:14:b9:f1:eb:89:e4:8c:b7:a4:dc:cb:39:fd:87: 7a:fa:82:62:2d:74:2c:c8:50:9a:ad:38:d2:27:23: ec:aa:dc:01:48:ce:f3:51:9a:28:bb:7f:ff:46:b9: f4:7a:2c:c3:58:e1:59:dc:2b:cf:4f:17:f8:65:38: 77:80:2b:db:a6:a8:82:a9:48:2f:f0:ed:ac:7d:8e: 83:3c:c0:4b:80:45:09:80:b6:63:22:9f:9e:00:b1: 49:0d:2c:04:8d:a7:18:07:dc:87:35:04:10:b9:f7: 62:d5:3f:40:f0:dc:c8:83:97:69:c7:08:ad:93:9b: 60:2e:aa:e5:84:14:7a:39:76:52:55:bb:92:d9:7e: f9:83:73:3e:ef:45:fa:ad:50:34:a6:21:c2:9d:9e: 2f:81:cc:67:a7:63:7e:01:d8:05:c1:64:aa:0e:a5: ba:31:c1:cb:57:30:3d:ee:12:c2:3a:e8:22:b0:96: 80:df:8e:b2:12:40:f7:89:73:5c:b7:3c:16:29:2b: c7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:82:81:ED:02:E3:0B:8F:AF:0E:7E:3A:16:54:E7:06:50:07:C2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:65:8d:3f:b9:21:20:82:e9:3b:0d:37:30:e6:18:56:60:a4: 37:7c:f5:21:88:75:dc:6a:4c:1a:fb:ab:89:8e:49:2b:81:a0: 84:52:f6:b9:a3:43:d9:76:02:60:8b:b0:13:60:32:42:f5:47: 00:4c:8b:01:0d:8e:9c:99:bf:b2:9d:c4:3a:b0:d9:22:8b:2f: 84:ea:6b:75:d1:65:37:47:10:97:9c:d5:28:45:f3:b6:ac:20: 60:ea:45:96:a4:61:10:f3:8f:b1:19:ee:2e:1c:3c:d3:ec:63: 87:5e:f1:51:e2:f9:3a:3d:ff:ba:51:b7:b9:87:84:ce:ca:40: be:43:f2:d4:99:ec:06:3c:b0:43:d1:5e:5b:65:a8:19:a5:59: fd:e7:03:2e:0c:3a:b2:d3:fd:b5:71:18:d0:ab:d4:5a:db:1d: 10:66:e8:ae:d3:36:75:3b:aa:ca:16:5e:ea:14:61:02:26:5d: c5:f6:7f:9b:81:df:c3:93:ea:2b:7b:f3:2e:2b:17:cf:bb:5f: 00:e2:62:47:1b:0a:2a:63:40:4f:ea:5b:25:de:5a:f7:78:ab: 8d:3c:db:4e:98:02:1d:15:6e:d4:3e:30:42:86:05:b7:8b:95: 4c:81:0a:95:a9:d2:f0:7a:f8:91:80:38:ca:cb:f3:d9:91:c2: 88:23:37:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElMyTxGwLeZT/tNkXwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MjBjMjY4Y2YtYmNkZC00NjdmLWIyODktMDFkMTVjY2FjMmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nZhlmBdyKTQs6ztMEaewCBvKcw44rPwJImc IhJFW6Mh4w2VGUZ/rMsP6INDOpXHxIDTXUVYWi3buLsnFLnx64nkjLek3Ms5/Yd6 +oJiLXQsyFCarTjSJyPsqtwBSM7zUZoou3//Rrn0eizDWOFZ3CvPTxf4ZTh3gCvb pqiCqUgv8O2sfY6DPMBLgEUJgLZjIp+eALFJDSwEjacYB9yHNQQQufdi1T9A8NzI g5dpxwitk5tgLqrlhBR6OXZSVbuS2X75g3M+70X6rVA0piHCnZ4vgcxnp2N+AdgF wWSqDqW6McHLVzA97hLCOugisJaA346yEkD3iXNctzwWKSvHjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBWCge0C4wuPrw5+OhZU5wZQB8IjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZmRlMzg2YTAtYTBhMy0z M2Y5LWFkMTEtODEzNzc4Y2Q2OWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQIgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCfZY0/uSEgguk7DTcw5hhWYKQ3fPUhiHXcakwa+6uJjkkrgaCEUva5 o0PZdgJgi7ATYDJC9UcATIsBDY6cmb+yncQ6sNkiiy+E6mt10WU3RxCXnNUoRfO2 rCBg6kWWpGEQ84+xGe4uHDzT7GOHXvFR4vk6Pf+6Ube5h4TOykC+Q/LUmewGPLBD 0V5bZagZpVn95wMuDDqy0/21cRjQq9Ra2x0QZuiu0zZ1O6rKFl7qFGECJl3F9n+b gd/Dk+ore/MuKxfPu18A4mJHGwoqY0BP6lsl3lr3eKuNPNtOmAIdFW7UPjBChgW3 i5VMgQqVqdLweviRgDjKy/PZkcKIIzcn -----END CERTIFICATE-----Generated at Sat Apr 26 16:27:12 2025 by rpki-client