$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ff1f1f92-a38b-38d3-8040-5d9bed48ed81.roa File: ff1f1f92-a38b-38d3-8040-5d9bed48ed81.roa (raw, json) Hash identifier: dNAsAtDSBGiZL24HzoSAYrn5/kDtRiVjO+mpNbMemyg= Subject key identifier: 17:C4:F0:D8:BA:20:E7:FF:A5:AB:47:76:F2:17:86:7E:32:66:0F:2E Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858497E446E9C24ED0FC5340B6E00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ff1f1f92-a38b-38d3-8040-5d9bed48ed81.roa Signing time: Fri 11 Apr 2025 18:23:34 +0000 ROA not before: Fri 11 Apr 2025 18:23:34 +0000 ROA not after: Thu 10 Jul 2025 18:23:34 +0000 asID: 8100 IP address blocks: 2604:4500:27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:44:6e:9c:24:ed:0f:c5:34:0b:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 11 18:23:34 2025 GMT Not After : Jul 10 18:23:34 2025 GMT Subject: CN=85e4dccd-9940-4aa5-ba4a-c8b630eb44e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1d:52:02:44:09:b7:d2:af:e4:f4:22:7e:34: 87:e6:44:9a:a4:4b:b9:ec:ec:44:43:7f:a0:b5:7b: 76:c5:b2:54:be:96:2e:3e:8c:71:40:84:16:a1:f1: 9d:10:39:dd:a8:88:75:81:43:47:bd:19:16:82:4f: 1b:86:95:c2:5d:ae:54:01:e4:d6:97:5e:31:53:eb: 4a:75:24:30:92:59:d2:e3:f7:e6:01:b1:bb:90:e7: 65:de:70:39:e7:b7:44:8d:6e:65:ea:c4:da:39:e6: d4:cd:ca:d3:58:68:4c:79:10:3d:30:8f:ec:d4:24: c6:9a:91:20:40:d9:a0:5c:c8:47:ed:0b:d3:6b:44: c4:3b:88:8c:63:20:94:5f:da:b3:dd:64:fa:b4:b9: 1b:c9:bc:73:29:81:61:32:3f:82:95:6e:77:5e:d9: ad:9d:69:4e:0b:4f:28:ec:da:ba:40:43:ea:cc:83: 09:49:a2:8b:7e:81:ad:3c:72:7f:e2:ff:29:fa:8e: 95:71:92:1e:64:77:94:74:35:bb:f0:e9:6a:e2:2e: 14:00:06:6f:22:93:e6:af:19:92:ea:7c:78:7e:e2: 01:4d:9a:4e:99:14:21:0c:f3:22:58:f2:a4:51:f2: b5:46:db:1b:73:84:f4:55:89:ef:bf:6e:e9:8d:f4: 5f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C4:F0:D8:BA:20:E7:FF:A5:AB:47:76:F2:17:86:7E:32:66:0F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ff1f1f92-a38b-38d3-8040-5d9bed48ed81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f4:70:82:ce:4e:14:1f:2e:4d:24:f6:65:7a:45:41:09:88: 4d:2c:61:47:3b:dd:ac:04:45:9a:b9:05:3a:4b:1c:68:a6:eb: 76:9e:22:2d:91:32:85:3a:4f:7a:41:43:a2:fa:b5:04:00:7b: 91:e5:34:51:e8:92:1e:2c:2d:99:4b:db:15:9e:56:ea:4c:53: fd:77:a5:dc:e8:09:4d:b2:f7:6f:4e:69:6d:b9:cc:b1:f5:b4: 3e:32:11:4b:72:73:29:25:69:d7:d6:47:ed:88:f9:87:d8:b7: f7:b0:d0:60:26:54:30:40:0d:33:82:ab:b0:eb:ee:8a:38:70: 5a:66:1e:20:b9:e5:3e:97:02:b8:ef:e7:eb:ae:ba:0a:71:06: e5:0f:fd:41:b6:7f:1b:2d:c4:cc:54:6e:83:da:61:29:c1:48: 4e:37:3c:ab:0a:d0:3d:5d:84:dc:81:a8:c0:e8:66:31:b8:f5: 2e:72:31:73:f5:81:01:0d:e0:c3:54:c5:48:f5:5e:bd:40:69: 98:46:13:54:b9:e3:7c:04:fc:06:32:f6:e9:4c:5e:78:94:fa: a8:f3:0a:79:e5:01:eb:31:5f:0d:64:ca:14:9f:64:99:b4:e5: 4e:c1:87:b4:5f:61:49:85:6c:ed:a7:a9:a2:99:fb:7f:13:2c: 70:61:7b:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl+RG6cJO0PxTQLbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDQxMTE4MjMzNFoXDTI1MDcxMDE4MjMzNFowLzEtMCsGA1UEAxMk ODVlNGRjY2QtOTk0MC00YWE1LWJhNGEtYzhiNjMwZWI0NGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph1SAkQJt9Kv5PQifjSH5kSapEu57OxEQ3+g tXt2xbJUvpYuPoxxQIQWofGdEDndqIh1gUNHvRkWgk8bhpXCXa5UAeTWl14xU+tK dSQwklnS4/fmAbG7kOdl3nA557dEjW5l6sTaOebUzcrTWGhMeRA9MI/s1CTGmpEg QNmgXMhH7QvTa0TEO4iMYyCUX9qz3WT6tLkbybxzKYFhMj+ClW53XtmtnWlOC08o 7Nq6QEPqzIMJSaKLfoGtPHJ/4v8p+o6VcZIeZHeUdDW78Olq4i4UAAZvIpPmrxmS 6nx4fuIBTZpOmRQhDPMiWPKkUfK1Rtsbc4T0VYnvv27pjfRfhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBfE8Ni6IOf/patHdvIXhn4yZg8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZmYxZjFmOTItYTM4Yi0z OGQzLTgwNDAtNWQ5YmVkNDhlZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJn0cILOThQfLk0k9mV6RUEJiE0sYUc73awERZq5BTpLHGim63ae Ii2RMoU6T3pBQ6L6tQQAe5HlNFHokh4sLZlL2xWeVupMU/13pdzoCU2y929OaW25 zLH1tD4yEUtycykladfWR+2I+YfYt/ew0GAmVDBADTOCq7Dr7oo4cFpmHiC55T6X Arjv5+uuugpxBuUP/UG2fxstxMxUboPaYSnBSE43PKsK0D1dhNyBqMDoZjG49S5y MXP1gQEN4MNUxUj1Xr1AaZhGE1S543wE/AYy9ulMXniU+qjzCnnlAesxXw1kyhSf ZJm05U7Bh7RfYUmFbO2nqaKZ+38TLHBhe8A= -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:06 2025 by rpki-client