$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa File: 8a524526-e259-35b1-a80d-d27ccec63433.roa (raw, json) Hash identifier: qNmnJVLThhoTcoVxjIjFBEb2gf3u3fUhpzaJMdwgaMk= Subject key identifier: D7:3E:C4:B8:2B:0F:4E:82:35:AB:C1:01:A1:10:58:E7:6E:7A:65:B8 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499C3E9AE74DEDB1560F692280 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa Signing time: Tue 22 Apr 2025 12:06:04 +0000 ROA not before: Tue 22 Apr 2025 12:06:04 +0000 ROA not after: Mon 21 Jul 2025 12:06:04 +0000 asID: 174 IP address blocks: 50.2.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:3e:9a:e7:4d:ed:b1:56:0f:69:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 12:06:04 2025 GMT Not After : Jul 21 12:06:04 2025 GMT Subject: CN=0f4c218f-f28a-4859-b5f4-7a413ce6f036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:aa:6b:f3:b6:d4:8f:fe:94:d8:c3:5e:55: f0:2d:e5:36:82:b5:77:ce:b6:09:02:14:49:56:1e: 88:19:0b:71:db:cf:d6:bb:6a:c0:14:3b:fb:e2:39: a6:52:18:46:c4:60:dd:8f:11:fe:0d:05:ab:ab:ba: a4:ac:e6:8a:70:4c:55:9a:a3:4a:2b:ec:cc:93:58: 6a:f6:30:36:b8:e8:5b:ee:46:7e:eb:af:d9:dd:6e: f4:16:39:de:72:e3:37:22:2e:06:ee:09:46:78:76: 9f:45:d2:c9:54:de:92:7c:9e:b7:f0:f6:6d:2b:0f: 03:86:35:4e:8a:7a:f7:e1:77:ac:cb:70:37:33:a7: cc:38:d3:09:87:ca:d4:be:18:94:b2:c9:b1:6a:62: 88:89:8c:2b:4f:df:5d:d6:12:a1:a0:50:0e:cd:d6: 2e:98:d6:52:d6:6f:ca:18:eb:64:bd:b8:5c:ce:e8: c2:57:8b:11:16:39:e1:89:b3:59:72:76:30:0a:38: 13:c8:61:d9:74:4f:7d:13:36:fd:fa:2e:de:4b:dd: 56:e5:5e:25:e7:70:75:c6:3e:8d:03:e8:47:0d:22: 67:df:7b:92:0c:4f:d3:db:2a:ed:60:67:08:08:44: e9:f5:59:8c:b9:10:ec:8d:ca:19:98:1c:7c:70:a6: de:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3E:C4:B8:2B:0F:4E:82:35:AB:C1:01:A1:10:58:E7:6E:7A:65:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8a524526-e259-35b1-a80d-d27ccec63433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:20:f0:7d:4d:22:e2:9d:2c:4f:e8:77:a6:57:1c:a1:e4:6c: 44:44:af:2f:ea:3e:b2:c7:0c:9f:17:11:f6:66:8c:b0:49:22: c0:85:ec:7c:6c:b8:da:08:25:25:72:ec:15:71:be:8c:03:6e: 2b:3e:e4:c9:ac:d6:19:9b:0f:28:b0:3c:9a:e8:4c:f9:15:af: a6:25:79:1b:3e:2e:b3:e9:91:52:b6:e6:42:30:15:71:f4:48: 5d:75:17:8d:f4:77:ab:f4:c5:50:2b:e6:bd:57:c7:ef:15:4f: ca:9e:72:c7:34:08:f0:68:71:ab:8f:af:fe:74:c2:93:ae:12: 0f:8c:b9:fc:06:35:77:86:7f:72:8a:a2:3a:e4:54:b6:1f:4e: 36:07:ae:21:9f:1b:56:21:43:08:a3:7a:a5:6c:e6:be:72:e0: 17:67:8f:cc:bc:29:4a:de:06:47:88:06:b9:fd:dc:2c:2f:34: 68:0f:d1:ea:5b:88:84:d9:ab:7f:5f:9c:5a:1f:62:93:57:80: 5c:3a:f0:83:c1:5e:53:7e:99:05:62:41:7e:0c:a3:d1:89:64: ed:27:e5:ba:df:03:60:a2:06:6d:dc:c7:d9:f1:56:a5:f7:9c: 17:4c:91:39:6d:b4:18:fb:74:b0:29:2e:7c:5f:3f:f1:d8:85: 15:e5:31:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcPprnTe2xVg9pIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjEyMDYwNFoXDTI1MDcyMTEyMDYwNFowLzEtMCsGA1UEAxMk MGY0YzIxOGYtZjI4YS00ODU5LWI1ZjQtN2E0MTNjZTZmMDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCyqa/O21I/+lNjDXlXwLeU2grV3zrYJAhRJ Vh6IGQtx28/Wu2rAFDv74jmmUhhGxGDdjxH+DQWrq7qkrOaKcExVmqNKK+zMk1hq 9jA2uOhb7kZ+66/Z3W70FjnecuM3Ii4G7glGeHafRdLJVN6SfJ638PZtKw8DhjVO inr34Xesy3A3M6fMONMJh8rUvhiUssmxamKIiYwrT99d1hKhoFAOzdYumNZS1m/K GOtkvbhczujCV4sRFjnhibNZcnYwCjgTyGHZdE99Ezb9+i7eS91W5V4l53B1xj6N A+hHDSJn33uSDE/T2yrtYGcICETp9VmMuRDsjcoZmBx8cKbeuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc+xLgrD06CNavBAaEQWOduemW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOGE1MjQ1MjYtZTI1OS0z NWIxLWE4MGQtZDI3Y2NlYzYzNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcg8H1NIuKdLE/od6ZXHKHkbEREry/qPrLHDJ8XEfZmjLBJIsCF7Hxs uNoIJSVy7BVxvowDbis+5Mms1hmbDyiwPJroTPkVr6YleRs+LrPpkVK25kIwFXH0 SF11F430d6v0xVAr5r1Xx+8VT8qecsc0CPBocauPr/50wpOuEg+MufwGNXeGf3KK ojrkVLYfTjYHriGfG1YhQwijeqVs5r5y4Bdnj8y8KUreBkeIBrn93CwvNGgP0epb iITZq39fnFofYpNXgFw68IPBXlN+mQViQX4Mo9GJZO0n5brfA2CiBm3cx9nxVqX3 nBdMkTlttBj7dLApLnxfP/HYhRXlMfw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:06 2025 by rpki-client