$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b9dca8d7-0acc-3d24-8347-eae678616a28.roa File: b9dca8d7-0acc-3d24-8347-eae678616a28.roa (raw, json) Hash identifier: WlpwPPTkpY9QB3leYeNYCaHnqon85pV+OhKmGlotLl0= Subject key identifier: AD:52:E7:FA:67:52:F0:B6:1F:0F:B3:B1:75:EE:96:6C:4B:01:E4:37 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499C1DC5CD45D33C6815E31440 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b9dca8d7-0acc-3d24-8347-eae678616a28.roa Signing time: Tue 22 Apr 2025 10:59:55 +0000 ROA not before: Tue 22 Apr 2025 10:59:55 +0000 ROA not after: Mon 21 Jul 2025 10:59:55 +0000 asID: 32043 IP address blocks: 50.2.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:1d:c5:cd:45:d3:3c:68:15:e3:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 10:59:55 2025 GMT Not After : Jul 21 10:59:55 2025 GMT Subject: CN=9d0a2024-a71e-4c7b-befc-3bd0887bebec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2c:8c:0e:be:7f:35:44:d9:50:93:36:32:b7: f8:48:3d:87:0f:d4:05:f3:69:2b:2e:4c:17:c8:c0: cd:89:cf:09:9e:4a:c6:08:b8:de:68:2a:0f:b0:f7: ac:76:85:de:42:47:21:93:7d:7c:94:88:16:02:09: 5d:00:c2:33:21:a7:0c:0f:c5:ac:4f:97:0d:5e:62: 4a:11:b1:13:f1:11:a3:91:1f:10:bf:92:70:29:6f: 28:ef:42:39:a0:70:43:e4:94:6d:17:84:b0:f2:15: 8b:0e:df:4e:b4:d7:4c:61:c7:b6:55:94:f0:6c:ef: eb:24:d4:b3:89:f1:b2:22:e3:d2:c2:56:85:8d:d0: 52:15:c9:18:52:c7:81:76:88:a7:b8:45:40:40:71: ff:77:14:b2:47:11:b9:41:67:81:46:3e:cc:1e:56: ba:9d:5e:9d:b5:13:1c:61:c9:1a:fe:26:0c:2d:f2: 40:ae:68:00:5b:8b:ef:1d:04:bf:34:4c:c8:ff:ad: c4:13:21:2f:2f:69:bd:81:81:a2:a2:6e:91:45:a8: 6c:23:6b:02:35:b0:71:ff:4b:a4:7e:45:fe:a7:42: fa:85:ee:ea:c8:19:a0:c1:a2:86:3f:1c:4d:ea:84: ab:96:d5:71:0b:47:ce:23:d3:cb:4a:a7:ea:4e:7d: c9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:52:E7:FA:67:52:F0:B6:1F:0F:B3:B1:75:EE:96:6C:4B:01:E4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b9dca8d7-0acc-3d24-8347-eae678616a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:00:09:6c:90:87:39:9a:34:33:fd:a0:48:bd:48:d8:7b:5a: 61:4d:f9:b2:3e:55:30:4a:3d:62:4c:8f:99:cd:6c:ed:fe:c8: 89:e9:48:96:8f:1a:86:17:49:c6:11:38:e7:54:e6:96:cd:5a: f3:de:1c:74:8a:db:f6:57:a4:75:b5:34:bc:dd:8b:cd:5a:2e: c2:7f:40:b8:eb:5e:6b:de:ed:c8:26:f6:61:ba:17:c0:6b:53: 35:7d:a7:5d:0d:eb:98:e4:98:76:b1:6d:35:51:34:19:04:46: 1d:d8:c5:8e:b5:23:9a:89:d8:43:56:36:5f:ac:f5:73:16:fb: 6c:9a:7f:9d:07:41:fe:da:b9:f4:aa:c0:7c:bf:f9:6d:5d:bd: fc:e0:64:ee:ad:de:c6:5a:c2:64:9e:88:18:a6:e7:15:37:ca: d7:6b:f5:0b:88:3c:7e:2c:df:92:6f:6f:a3:55:4d:67:44:75: f9:ab:0a:e2:43:c6:84:07:54:16:4f:f6:28:a2:ed:ad:b9:19: 5d:c3:94:8a:be:80:df:de:ee:14:3f:11:9e:52:61:35:7d:ec: 0c:6f:31:84:7a:27:65:9b:da:27:ed:5b:2c:15:92:9a:71:e4: 81:48:68:c3:bc:8d:da:44:b0:8a:f3:fa:29:40:08:a0:53:d5: 19:d8:91:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcHcXNRdM8aBXjFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjEwNTk1NVoXDTI1MDcyMTEwNTk1NVowLzEtMCsGA1UEAxMk OWQwYTIwMjQtYTcxZS00YzdiLWJlZmMtM2JkMDg4N2JlYmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCyMDr5/NUTZUJM2Mrf4SD2HD9QF82krLkwX yMDNic8JnkrGCLjeaCoPsPesdoXeQkchk318lIgWAgldAMIzIacMD8WsT5cNXmJK EbET8RGjkR8Qv5JwKW8o70I5oHBD5JRtF4Sw8hWLDt9OtNdMYce2VZTwbO/rJNSz ifGyIuPSwlaFjdBSFckYUseBdoinuEVAQHH/dxSyRxG5QWeBRj7MHla6nV6dtRMc Ycka/iYMLfJArmgAW4vvHQS/NEzI/63EEyEvL2m9gYGiom6RRahsI2sCNbBx/0uk fkX+p0L6he7qyBmgwaKGPxxN6oSrltVxC0fOI9PLSqfqTn3JkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1S5/pnUvC2Hw+zsXXulmxLAeQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjlkY2E4ZDctMGFjYy0z ZDI0LTgzNDctZWFlNjc4NjE2YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQACWyQhzmaNDP9oEi9SNh7WmFN+bI+VTBKPWJMj5nNbO3+yInpSJaP GoYXScYROOdU5pbNWvPeHHSK2/ZXpHW1NLzdi81aLsJ/QLjrXmve7cgm9mG6F8Br UzV9p10N65jkmHaxbTVRNBkERh3YxY61I5qJ2ENWNl+s9XMW+2yaf50HQf7aufSq wHy/+W1dvfzgZO6t3sZawmSeiBim5xU3ytdr9QuIPH4s35Jvb6NVTWdEdfmrCuJD xoQHVBZP9iii7a25GV3DlIq+gN/e7hQ/EZ5SYTV97AxvMYR6J2Wb2iftWywVkppx 5IFIaMO8jdpEsIrz+ilACKBT1RnYkVI= -----END CERTIFICATE-----Generated at Sun Apr 27 13:36:09 2025 by rpki-client