$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/56b758c8-1600-3b73-8140-4fa999be5f09.roa File: 56b758c8-1600-3b73-8140-4fa999be5f09.roa (raw, json) Hash identifier: icSpaycXwWz5zs+gJpQicAHTYQZMygd1Lx+Jv/0ZmeQ= Subject key identifier: 23:9D:36:B3:25:43:1D:56:6F:00:53:15:8C:14:21:1F:3E:AD:C8:0B Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499C285B53A669B507089B3050 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/56b758c8-1600-3b73-8140-4fa999be5f09.roa Signing time: Tue 22 Apr 2025 11:21:14 +0000 ROA not before: Tue 22 Apr 2025 11:21:14 +0000 ROA not after: Mon 21 Jul 2025 11:21:14 +0000 asID: 32043 IP address blocks: 50.3.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:28:5b:53:a6:69:b5:07:08:9b:30:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 11:21:14 2025 GMT Not After : Jul 21 11:21:14 2025 GMT Subject: CN=e8d8e954-9659-4fad-97c5-9c37f42780be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:00:b3:8f:b9:88:b1:68:de:ec:eb:c8:5f:69: 4a:cc:f7:13:e0:c9:82:e2:48:f3:5b:fa:f5:40:e7: 91:fa:d7:1e:dd:7d:cc:6b:4c:b2:f4:c6:3f:ad:63: 60:67:02:bf:fe:90:f3:36:18:7d:19:ad:5f:72:10: 92:00:25:b8:b4:4a:92:79:d8:7d:45:7f:13:68:ca: 83:36:02:da:9f:97:c4:5c:60:14:68:85:a6:d6:e2: ae:33:1d:7a:7c:da:c6:03:25:e0:af:8c:4c:43:bc: f6:e4:83:90:ee:21:35:8e:78:40:71:c0:24:fb:82: c9:fd:32:0f:20:71:9a:6c:98:cd:be:c3:fc:13:88: f3:73:61:9b:16:2a:b4:1e:64:76:ce:39:f3:16:11: 17:76:74:18:e7:e1:c5:bc:14:6a:08:54:05:56:92: d7:e9:47:75:9a:b9:e5:20:9b:96:8f:28:9f:84:04: 3e:a0:0e:d0:43:c6:15:07:83:7a:4a:5b:07:85:31: 66:fd:90:94:9c:26:98:27:81:e9:60:fe:79:57:78: 68:ee:7c:ae:24:52:6f:d9:b8:39:b9:7f:c6:d3:0e: d3:a0:b7:73:9e:19:8f:82:61:b4:52:a6:b7:8e:b8: b1:a5:3c:9d:c9:85:af:41:4c:eb:99:b3:04:5e:7a: d2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9D:36:B3:25:43:1D:56:6F:00:53:15:8C:14:21:1F:3E:AD:C8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/56b758c8-1600-3b73-8140-4fa999be5f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ea:ab:a7:fb:2a:17:3b:03:f6:11:a8:8a:1b:18:f6:02:ca: 7f:98:1a:9a:28:32:63:e8:a4:76:24:bc:46:49:5a:e4:f2:54: c5:2b:bc:a7:df:01:0e:1c:cb:6d:08:70:64:d2:fe:72:83:ac: 82:e1:4a:d9:69:9d:a0:8a:88:e5:99:e3:97:47:0c:2f:3b:9e: b6:b1:f2:93:38:28:07:77:1b:6e:7a:79:72:03:34:ff:80:89: 83:67:7e:f6:7a:f9:ff:62:27:c0:0d:42:2c:30:c6:3b:03:01: 00:e1:7c:d1:c3:45:62:b9:27:7f:10:c6:ae:ee:66:ce:ef:76: 2e:74:1d:ae:0e:40:d7:2a:64:8d:18:a5:52:4d:ba:7d:6f:ef: e7:13:9d:fd:39:14:b7:53:27:8a:7d:7d:be:d3:a8:7f:55:de: 94:70:5d:c3:30:7b:76:69:cd:2f:2d:e5:44:08:95:db:dd:32: d2:14:97:f8:76:82:bf:d5:64:05:67:ba:37:38:bf:a9:3f:85: 64:0d:2b:d4:23:a2:1d:74:3a:df:a9:0f:98:05:77:fe:a8:af: 8e:80:fb:9c:ca:2e:92:f3:04:5b:4a:f1:5d:38:1f:0d:b4:56: 88:54:c9:ea:70:68:98:57:c2:19:24:9f:b3:55:13:6e:e4:ad: c6:68:0c:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcKFtTpmm1BwibMFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjExMjExNFoXDTI1MDcyMTExMjExNFowLzEtMCsGA1UEAxMk ZThkOGU5NTQtOTY1OS00ZmFkLTk3YzUtOWMzN2Y0Mjc4MGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQCzj7mIsWje7OvIX2lKzPcT4MmC4kjzW/r1 QOeR+tce3X3Ma0yy9MY/rWNgZwK//pDzNhh9Ga1fchCSACW4tEqSedh9RX8TaMqD NgLan5fEXGAUaIWm1uKuMx16fNrGAyXgr4xMQ7z25IOQ7iE1jnhAccAk+4LJ/TIP IHGabJjNvsP8E4jzc2GbFiq0HmR2zjnzFhEXdnQY5+HFvBRqCFQFVpLX6Ud1mrnl IJuWjyifhAQ+oA7QQ8YVB4N6SlsHhTFm/ZCUnCaYJ4HpYP55V3ho7nyuJFJv2bg5 uX/G0w7ToLdznhmPgmG0Uqa3jrixpTydyYWvQUzrmbMEXnrSawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOdNrMlQx1WbwBTFYwUIR8+rcgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNTZiNzU4YzgtMTYwMC0z YjczLTgxNDAtNGZhOTk5YmU1ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgNaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3qq6f7Khc7A/YRqIobGPYCyn+YGpooMmPopHYkvEZJWuTyVMUrvKff AQ4cy20IcGTS/nKDrILhStlpnaCKiOWZ45dHDC87nrax8pM4KAd3G256eXIDNP+A iYNnfvZ6+f9iJ8ANQiwwxjsDAQDhfNHDRWK5J38Qxq7uZs7vdi50Ha4OQNcqZI0Y pVJNun1v7+cTnf05FLdTJ4p9fb7TqH9V3pRwXcMwe3ZpzS8t5UQIldvdMtIUl/h2 gr/VZAVnujc4v6k/hWQNK9Qjoh10Ot+pD5gFd/6or46A+5zKLpLzBFtK8V04Hw20 VohUyepwaJhXwhkkn7NVE27krcZoDDA= -----END CERTIFICATE-----Generated at Sun Apr 27 04:32:34 2025 by rpki-client