$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a504d5a2-c9f4-3256-b6a6-2ce2a7499853.roa File: a504d5a2-c9f4-3256-b6a6-2ce2a7499853.roa (raw, json) Hash identifier: dOgk4Tq6O1nwydHO30EqneJOZfbG5zPwKH2yDWctjbg= Subject key identifier: 46:1C:D6:66:C7:81:10:62:1D:60:51:B5:30:CB:35:6A:3D:AF:56:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CD634DCB5FDC78622F2120 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a504d5a2-c9f4-3256-b6a6-2ce2a7499853.roa Signing time: Thu 24 Apr 2025 11:52:48 +0000 ROA not before: Thu 24 Apr 2025 11:52:48 +0000 ROA not after: Wed 23 Jul 2025 11:52:48 +0000 asID: 19905 IP address blocks: 50.82.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:63:4d:cb:5f:dc:78:62:2f:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:52:48 2025 GMT Not After : Jul 23 11:52:48 2025 GMT Subject: CN=d5d6ac85-0442-4823-b80a-bb45a331c77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:ed:12:64:c2:4e:af:f3:17:6e:83:6c:00: dc:1a:44:4a:e2:79:9e:33:45:f0:4b:9a:4f:6a:93: fd:ca:9a:d1:42:b7:53:33:f7:17:c0:30:97:63:30: 4e:1f:85:f6:1d:51:32:8d:05:64:1e:0f:7f:07:46: d7:4e:ce:35:bf:37:20:97:63:7e:02:4b:42:16:41: 15:f6:ed:4d:13:a0:88:1b:8a:64:4a:4c:57:97:3b: 7d:8f:69:dc:39:0b:a1:10:ec:39:02:25:bc:d5:04: d0:b3:48:5e:f6:eb:da:57:d1:19:a9:04:7c:cf:f0: 7f:33:bc:ae:d7:39:d4:16:d6:d1:14:e3:38:29:52: 24:84:24:09:91:1c:7c:74:2f:d5:68:d7:17:34:d1: 9a:07:f2:6c:21:a5:79:92:d6:b4:5f:13:5f:86:70: da:c2:b9:7e:b1:a3:e3:98:5b:e2:e7:46:50:5c:5b: 1c:02:cb:06:83:a3:b6:f1:04:21:06:1d:af:88:65: 08:35:a3:cd:b5:12:c5:e5:b0:f4:fd:fd:28:ed:c3: 51:07:cb:00:c5:e2:e5:36:f0:9a:94:c0:99:00:0e: 88:5f:69:13:86:0d:89:8a:e4:38:1e:3a:b4:0b:c1: 2a:4f:e2:c7:d3:85:7f:53:9c:81:d9:4f:50:33:3f: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1C:D6:66:C7:81:10:62:1D:60:51:B5:30:CB:35:6A:3D:AF:56:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a504d5a2-c9f4-3256-b6a6-2ce2a7499853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.82.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7e:32:76:3a:41:af:c3:d4:ec:60:ed:c3:c5:1c:76:56:c1: f7:bb:41:62:08:a1:d0:6d:92:44:2f:dd:9d:79:2f:7d:02:0f: 81:61:c8:4e:c4:e8:eb:cb:ca:ba:8f:db:ac:85:1f:b3:ff:eb: 95:74:c4:33:32:61:12:a6:56:de:31:b1:ec:17:7b:98:63:e9: 8f:03:b1:64:4c:f0:77:78:72:fc:98:02:8b:8f:bd:d4:3b:e0: 8e:61:19:3a:f8:90:97:b1:1b:8e:10:38:cb:b6:8e:ed:01:e9: 43:9a:03:e8:75:f0:73:89:6f:37:23:f4:a8:b5:91:30:6e:38: 5b:92:50:f1:d8:9e:8b:1f:b5:3b:b0:7c:3b:8e:3e:7a:bd:ac: 5c:f8:fd:9d:42:1c:18:ae:2b:e1:cb:d4:fa:38:34:16:53:89: cf:66:61:8a:6f:3c:7e:6e:9a:18:4f:0f:21:9c:4e:f3:d2:7b: f8:10:d5:06:0c:60:70:22:65:f0:93:87:a9:70:8d:9c:0b:3e: c8:a8:d8:30:68:69:f2:2f:47:8b:70:7b:5b:8e:71:0e:7d:64: a3:1d:ff:9f:5e:8f:8e:79:56:aa:93:26:9e:f3:56:a0:d8:dd: 82:b4:4d:ed:21:df:5a:24:84:4e:2f:12:40:62:48:bc:a0:ca: 3c:1f:d4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzWNNy1/ceGIvISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTI0OFoXDTI1MDcyMzExNTI0OFowLzEtMCsGA1UEAxMk ZDVkNmFjODUtMDQ0Mi00ODIzLWI4MGEtYmI0NWEzMzFjNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7XtEmTCTq/zF26DbADcGkRK4nmeM0XwS5pP apP9yprRQrdTM/cXwDCXYzBOH4X2HVEyjQVkHg9/B0bXTs41vzcgl2N+AktCFkEV 9u1NE6CIG4pkSkxXlzt9j2ncOQuhEOw5AiW81QTQs0he9uvaV9EZqQR8z/B/M7yu 1znUFtbRFOM4KVIkhCQJkRx8dC/VaNcXNNGaB/JsIaV5kta0XxNfhnDawrl+saPj mFvi50ZQXFscAssGg6O28QQhBh2viGUINaPNtRLF5bD0/f0o7cNRB8sAxeLlNvCa lMCZAA6IX2kThg2JiuQ4Hjq0C8EqT+LH04V/U5yB2U9QMz8tHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYc1mbHgRBiHWBRtTDLNWo9r1bqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTUwNGQ1YTItYzlmNC0z MjU2LWI2YTYtMmNlMmE3NDk5ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlL5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx+MnY6Qa/D1Oxg7cPFHHZWwfe7QWIIodBtkkQv3Z15L30CD4FhyE7E 6OvLyrqP26yFH7P/65V0xDMyYRKmVt4xsewXe5hj6Y8DsWRM8Hd4cvyYAouPvdQ7 4I5hGTr4kJexG44QOMu2ju0B6UOaA+h18HOJbzcj9Ki1kTBuOFuSUPHYnosftTuw fDuOPnq9rFz4/Z1CHBiuK+HL1Po4NBZTic9mYYpvPH5umhhPDyGcTvPSe/gQ1QYM YHAiZfCTh6lwjZwLPsio2DBoafIvR4twe1uOcQ59ZKMd/59ej455VqqTJp7zVqDY 3YK0Te0h31okhE4vEkBiSLygyjwf1Jc= -----END CERTIFICATE-----Generated at Tue May 6 23:00:19 2025 by rpki-client