$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95d476e0-3358-30ee-91d8-bc5eeeaf2e13.roa File: 95d476e0-3358-30ee-91d8-bc5eeeaf2e13.roa (raw, json) Hash identifier: Hg+eYk3NZ0lF+6l+OwkFPQffPzkBeR1hh+ugmJtfOj4= Subject key identifier: 55:FB:9A:75:7F:B7:77:D4:6C:C9:2F:2C:00:E6:30:29:D0:90:DB:A1 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F43285849AFBCB69E52DEECB5A24C1680 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95d476e0-3358-30ee-91d8-bc5eeeaf2e13.roa Signing time: Tue 29 Apr 2025 11:40:31 +0000 ROA not before: Tue 29 Apr 2025 11:40:31 +0000 ROA not after: Mon 28 Jul 2025 11:40:31 +0000 asID: 174 IP address blocks: 50.2.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:bc:b6:9e:52:de:ec:b5:a2:4c:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 29 11:40:31 2025 GMT Not After : Jul 28 11:40:31 2025 GMT Subject: CN=3654bb26-384d-456b-b045-92fcf1c8ed22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:21:99:46:12:4a:23:b7:9a:e0:cd:ab:5c:26: fb:17:05:46:96:16:1f:4f:34:b2:1c:96:17:d7:0b: 61:58:6f:a6:51:52:85:f2:f3:46:dc:3e:35:03:5e: 07:64:84:b1:42:84:47:b9:c0:2c:b1:9c:d2:62:d2: 47:e7:4b:57:0d:32:6f:da:7a:33:11:41:f7:db:39: 6d:66:98:c6:2e:c3:1e:dc:08:30:b9:18:fb:33:38: 7a:e8:ec:ac:15:bf:d9:97:3a:53:a0:b2:87:b0:bf: 72:2c:4a:64:6f:23:b0:8f:8e:e9:1d:57:23:90:91: 3e:8e:5a:3a:36:a1:8a:73:e8:05:0f:fe:ef:a1:dd: ac:5c:0c:c4:0a:c0:95:5a:4c:fd:15:9f:0f:da:2c: 03:57:b0:72:a6:09:45:43:a6:1b:2f:51:5c:ff:b4: de:7d:24:20:5b:b1:c5:30:af:13:95:28:b1:67:86: b5:ca:0b:ae:41:eb:53:f1:40:2b:ae:de:06:79:8f: 8f:c4:1a:35:b9:42:f8:68:66:02:c8:9d:24:49:14: 88:3a:db:2e:5e:93:33:5c:50:a0:9a:91:03:15:90: a6:37:6c:de:07:3e:16:5f:1c:80:c9:97:ad:4b:c4: df:74:5f:32:14:18:eb:70:ef:bb:1b:5a:81:f7:ef: e5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FB:9A:75:7F:B7:77:D4:6C:C9:2F:2C:00:E6:30:29:D0:90:DB:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/95d476e0-3358-30ee-91d8-bc5eeeaf2e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:93:eb:7f:d7:21:78:b4:b4:bb:be:b1:95:c2:58:26:34:85: e6:fb:52:b9:9d:95:2f:ad:09:8e:5b:8d:db:d9:1a:01:86:09: f6:e4:98:7c:ad:ae:da:b6:a5:df:5d:ee:b8:d4:9d:c4:da:42: 48:9a:66:72:46:b4:96:81:e8:8f:93:5f:f3:cc:c6:62:6c:33: 3d:a0:61:d5:96:98:ce:c9:28:6e:12:76:84:94:0d:1d:b8:08: d1:3c:d6:32:f9:a1:c3:7a:06:f8:72:1f:1b:c2:53:ed:fe:eb: 2b:62:07:bc:80:76:40:29:b4:bd:ad:9a:f1:6e:09:d3:34:8a: 59:cf:69:52:90:a4:06:66:b6:a0:fb:70:f0:b7:24:11:b7:3d: f3:fd:a9:0c:fc:2b:5e:5e:6e:30:a7:08:e8:92:aa:09:14:a8: da:10:72:56:fb:75:6f:ac:36:1f:4b:ae:40:27:78:53:c8:bb: 76:40:b1:e0:ec:45:62:32:82:86:fc:b4:6a:fc:e9:a4:36:87: 32:26:d7:dc:6f:4b:4e:b0:0e:5f:d1:8f:b9:26:65:49:ee:d2: bf:19:bf:8e:f4:f4:b1:f7:79:21:63:00:42:4d:99:ab:c7:c6: f1:b2:1e:0c:4f:e9:27:76:fb:22:60:b2:a9:24:f3:ed:02:af: 6b:9c:ed:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmvvLaeUt7staJMFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyOTExNDAzMVoXDTI1MDcyODExNDAzMVowLzEtMCsGA1UEAxMk MzY1NGJiMjYtMzg0ZC00NTZiLWIwNDUtOTJmY2YxYzhlZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSGZRhJKI7ea4M2rXCb7FwVGlhYfTzSyHJYX 1wthWG+mUVKF8vNG3D41A14HZISxQoRHucAssZzSYtJH50tXDTJv2nozEUH32zlt ZpjGLsMe3AgwuRj7Mzh66OysFb/ZlzpToLKHsL9yLEpkbyOwj47pHVcjkJE+jlo6 NqGKc+gFD/7vod2sXAzECsCVWkz9FZ8P2iwDV7BypglFQ6YbL1Fc/7TefSQgW7HF MK8TlSixZ4a1yguuQetT8UArrt4GeY+PxBo1uUL4aGYCyJ0kSRSIOtsuXpMzXFCg mpEDFZCmN2zeBz4WXxyAyZetS8TfdF8yFBjrcO+7G1qB9+/ljwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFX7mnV/t3fUbMkvLADmMCnQkNuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTVkNDc2ZTAtMzM1OC0z MGVlLTkxZDgtYmM1ZWVlYWYyZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaT63/XIXi0tLu+sZXCWCY0heb7UrmdlS+tCY5bjdvZGgGGCfbkmHyt rtq2pd9d7rjUncTaQkiaZnJGtJaB6I+TX/PMxmJsMz2gYdWWmM7JKG4SdoSUDR24 CNE81jL5ocN6BvhyHxvCU+3+6ytiB7yAdkAptL2tmvFuCdM0ilnPaVKQpAZmtqD7 cPC3JBG3PfP9qQz8K15ebjCnCOiSqgkUqNoQclb7dW+sNh9LrkAneFPIu3ZAseDs RWIygob8tGr86aQ2hzIm19xvS06wDl/Rj7kmZUnu0r8Zv4709LH3eSFjAEJNmavH xvGyHgxP6Sd2+yJgsqkk8+0Cr2uc7cs= -----END CERTIFICATE-----Generated at Wed Apr 30 23:04:45 2025 by rpki-client