$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6909753b-51a2-3ea2-a1ef-bf6848bbc80a.roa File: 6909753b-51a2-3ea2-a1ef-bf6848bbc80a.roa (raw, json) Hash identifier: 1j8kSFd8GvjTuDhva447DleLjePVlUxdFDktTR2Oe2M= Subject key identifier: CC:4E:04:DE:4D:5F:B5:28:CE:EE:2B:FA:21:0C:B5:A7:2F:96:CD:32 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849CD34BFC0C4818FC7A37F8D80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6909753b-51a2-3ea2-a1ef-bf6848bbc80a.roa Signing time: Sat 10 May 2025 01:00:47 +0000 ROA not before: Sat 10 May 2025 01:00:47 +0000 ROA not after: Fri 08 Aug 2025 01:00:47 +0000 asID: 30058 IP address blocks: 50.7.36.0/24 maxlen: 24 50.7.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:34:bf:c0:c4:81:8f:c7:a3:7f:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: May 10 01:00:47 2025 GMT Not After : Aug 8 01:00:47 2025 GMT Subject: CN=4c2d0b20-0c7b-4dde-903a-635865f412bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:25:c5:7f:e1:f8:26:bd:ad:4d:7a:c7:a2:aa: 28:c8:8a:ba:21:62:b6:7e:f3:bc:de:37:80:1f:3f: eb:42:bc:3d:38:9d:94:e7:71:3d:a7:36:04:3b:dc: c9:e7:76:48:cf:22:20:d7:23:77:9e:35:4a:7c:7c: 70:45:f6:0f:50:14:be:a6:10:43:73:69:64:73:af: cd:d5:5b:dd:33:d8:9f:2d:2f:4b:fa:e1:b5:a1:8c: 21:7e:a6:fc:65:86:99:4b:56:16:cc:da:07:6c:86: 40:62:32:98:bf:76:04:66:fe:89:90:06:cd:cd:44: 74:60:04:49:03:c5:d5:ae:be:92:9b:dd:29:7b:7b: cb:87:ea:37:72:fc:30:08:58:0d:cb:8a:e7:ff:6b: de:a3:8c:0d:b2:96:a3:28:e5:3c:c4:8b:97:b5:98: 75:6f:1e:cc:f2:99:9d:66:03:14:c5:53:db:d2:72: a6:4a:e8:9e:d0:61:36:e6:40:db:2d:39:3d:37:c9: d7:0a:3e:47:f2:38:71:ff:eb:33:e2:ad:a3:c8:49: 48:24:3d:22:44:dd:da:42:fa:60:2c:62:1e:33:44: 18:9a:65:ff:50:6d:d8:1e:9b:e5:dc:41:cb:a5:7a: b6:aa:7c:0e:f7:3e:a5:46:7f:10:4e:41:c8:de:2f: 5b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4E:04:DE:4D:5F:B5:28:CE:EE:2B:FA:21:0C:B5:A7:2F:96:CD:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6909753b-51a2-3ea2-a1ef-bf6848bbc80a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c8:58:a4:a0:c7:04:18:e1:0f:40:6f:54:73:64:d5:c4:4c: a9:7f:91:f4:14:92:73:39:8c:53:6c:8b:00:b7:ee:06:cf:04: 76:9b:05:e6:44:c5:46:72:1f:14:88:69:e0:e0:3a:b8:5b:5e: 03:d0:0a:50:1a:65:de:75:a1:f7:f1:f1:b1:17:85:c7:28:63: 02:9f:23:95:c4:2d:7f:43:49:3c:d7:31:41:8b:7f:cc:03:58: 96:f2:ed:56:03:18:e5:4e:5b:ca:da:5d:77:de:1f:78:cc:da: 92:50:ae:a3:ec:f1:b3:73:c9:64:20:b5:83:65:a3:c0:c4:db: 01:fb:6a:32:a9:45:47:8e:b3:8a:6f:42:fb:e1:f7:90:01:70: 83:1d:95:ab:54:94:e1:34:41:44:dc:75:d4:88:44:b6:21:f7: 88:15:86:1b:cb:ec:fe:0a:49:17:1e:33:1d:4b:79:80:46:f5: a3:aa:b9:17:76:7f:a2:4b:30:9a:be:7f:42:ca:bf:1e:2b:44: bf:5e:66:69:dd:61:0a:6e:fe:83:05:25:20:56:37:03:90:1e: fa:83:4a:dc:85:9d:d4:d3:e6:91:2e:0f:c2:1d:c1:15:d0:c2: f1:70:c4:8a:cd:39:c6:5e:2f:f7:d4:84:bf:0d:b5:83:b5:8f: 29:80:d5:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNNL/AxIGPx6N/jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDUxMDAxMDA0N1oXDTI1MDgwODAxMDA0N1owLzEtMCsGA1UEAxMk NGMyZDBiMjAtMGM3Yi00ZGRlLTkwM2EtNjM1ODY1ZjQxMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiXFf+H4Jr2tTXrHoqooyIq6IWK2fvO83jeA Hz/rQrw9OJ2U53E9pzYEO9zJ53ZIzyIg1yN3njVKfHxwRfYPUBS+phBDc2lkc6/N 1VvdM9ifLS9L+uG1oYwhfqb8ZYaZS1YWzNoHbIZAYjKYv3YEZv6JkAbNzUR0YARJ A8XVrr6Sm90pe3vLh+o3cvwwCFgNy4rn/2veo4wNspajKOU8xIuXtZh1bx7M8pmd ZgMUxVPb0nKmSuie0GE25kDbLTk9N8nXCj5H8jhx/+sz4q2jyElIJD0iRN3aQvpg LGIeM0QYmmX/UG3YHpvl3EHLpXq2qnwO9z6lRn8QTkHI3i9bpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxOBN5NX7Uozu4r+iEMtacvls0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNjkwOTc1M2ItNTFhMi0z ZWEyLWExZWYtYmY2ODQ4YmJjODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgckMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHIWKSgxwQY4Q9Ab1RzZNXETKl/kfQUknM5jFNsiwC37gbPBHabBeZE xUZyHxSIaeDgOrhbXgPQClAaZd51offx8bEXhccoYwKfI5XELX9DSTzXMUGLf8wD WJby7VYDGOVOW8raXXfeH3jM2pJQrqPs8bNzyWQgtYNlo8DE2wH7ajKpRUeOs4pv Qvvh95ABcIMdlatUlOE0QUTcddSIRLYh94gVhhvL7P4KSRceMx1LeYBG9aOquRd2 f6JLMJq+f0LKvx4rRL9eZmndYQpu/oMFJSBWNwOQHvqDStyFndTT5pEuD8IdwRXQ wvFwxIrNOcZeL/fUhL8NtYO1jymA1WE= -----END CERTIFICATE-----Generated at Sun Jun 15 14:41:52 2025 by rpki-client