$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a86376fe-0753-3e6f-a96e-aa8c3d2bebc4.roa File: a86376fe-0753-3e6f-a96e-aa8c3d2bebc4.roa (raw, json) Hash identifier: aXSfOfJHzclkzA6SG8nDe+ibJOX3zgPTBlcssC3Z6vs= Subject key identifier: C1:FA:EF:B1:0F:15:17:BA:26:FE:8A:49:16:EA:B7:FE:81:C8:0C:66 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848ED6852D635D4A2A43491AC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a86376fe-0753-3e6f-a96e-aa8c3d2bebc4.roa Signing time: Tue 18 Feb 2025 21:03:40 +0000 ROA not before: Tue 18 Feb 2025 21:03:40 +0000 ROA not after: Mon 19 May 2025 20:03:40 +0000 asID: 30036 IP address blocks: 50.81.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:68:52:d6:35:d4:a2:a4:34:91:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 18 21:03:40 2025 GMT Not After : May 19 20:03:40 2025 GMT Subject: CN=687d0ba8-b12a-4ed9-bf70-19f73707e543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dd:02:7c:cc:55:7f:10:e9:e2:32:ea:b2:b3: 36:56:66:e7:e2:c5:3a:50:6a:68:96:c0:7f:94:34: 3d:a6:02:36:26:38:0b:7c:ec:a0:f6:46:ca:1c:d1: f1:76:57:28:6f:35:02:60:74:48:bd:5e:e3:b8:51: c3:49:2c:00:2a:8c:12:7b:31:6a:a3:dc:d3:65:f0: cd:b9:5b:79:46:ab:86:8a:02:2a:af:9e:83:50:12: 95:ba:07:56:59:9b:0c:ca:81:00:e0:a4:57:9e:6b: b3:98:5a:a7:5d:85:c8:0a:dc:25:b0:9a:62:30:98: 18:22:b4:3b:a9:fd:aa:2a:10:4b:e2:d3:6f:c1:46: 54:97:e6:06:09:58:06:11:a8:57:3f:f0:ba:67:74: e1:b3:99:51:eb:a8:b3:52:78:52:bd:74:45:d2:4f: 8a:aa:4f:1a:98:56:88:dd:b2:34:a5:56:13:31:a7: 92:20:bc:79:59:9e:f7:e4:33:fd:d2:e2:56:56:1d: 58:fc:73:f2:80:6d:04:51:4f:02:5b:2b:5b:0a:38: 36:28:41:a4:a8:d4:3f:b9:37:ba:b5:b7:32:51:f9: b0:34:e2:fb:f2:03:c8:1c:c8:b7:e9:41:5d:84:5b: 15:3e:d3:b5:18:d1:70:35:67:13:18:6d:c0:16:9b: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FA:EF:B1:0F:15:17:BA:26:FE:8A:49:16:EA:B7:FE:81:C8:0C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a86376fe-0753-3e6f-a96e-aa8c3d2bebc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.81.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:4e:96:15:8a:0d:8e:24:43:b7:87:2d:1a:57:9e:a2:f5:db: 3b:54:f5:7c:11:09:40:c6:be:9c:9b:9f:53:7f:99:97:0d:3c: b4:e3:af:09:f9:99:3e:11:57:6e:3d:84:31:45:06:e1:95:0b: d0:bb:3e:1d:2a:3a:99:c3:84:8f:f3:e0:3b:a9:e6:be:8f:f8: 4c:3a:3f:ce:e0:c1:95:e7:b6:9e:98:b2:6a:bb:80:ce:dc:7b: f6:77:fd:11:9b:27:5a:62:01:11:21:88:73:ae:89:cd:6d:49: 0c:0c:56:4e:db:d8:dd:e3:2e:df:bb:57:8a:ff:3c:66:2f:5c: 77:4a:86:1c:02:4d:77:13:41:78:34:1f:02:38:9f:10:f1:66: cb:1b:bc:de:c8:82:5b:98:80:58:b4:67:2f:f0:b7:e9:3e:3f: 45:91:88:81:3f:73:04:21:66:fd:0f:f1:63:72:76:01:2d:95: 3d:f8:ee:aa:82:0c:e7:97:1d:ce:23:98:73:c1:3c:8f:51:5d: c4:e3:e6:3a:48:35:06:e2:1c:35:83:76:71:50:ed:6f:0c:16: b6:6d:38:6f:ec:05:49:cd:55:33:18:86:2a:a3:f4:c9:00:92: 85:3b:db:bf:87:7b:94:84:0e:80:45:b1:40:b4:7c:11:53:0a: e9:df:9d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjtaFLWNdSipDSRrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIxODIxMDM0MFoXDTI1MDUxOTIwMDM0MFowLzEtMCsGA1UEAxMk Njg3ZDBiYTgtYjEyYS00ZWQ5LWJmNzAtMTlmNzM3MDdlNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA290CfMxVfxDp4jLqsrM2Vmbn4sU6UGpolsB/ lDQ9pgI2JjgLfOyg9kbKHNHxdlcobzUCYHRIvV7juFHDSSwAKowSezFqo9zTZfDN uVt5RquGigIqr56DUBKVugdWWZsMyoEA4KRXnmuzmFqnXYXICtwlsJpiMJgYIrQ7 qf2qKhBL4tNvwUZUl+YGCVgGEahXP/C6Z3Ths5lR66izUnhSvXRF0k+Kqk8amFaI 3bI0pVYTMaeSILx5WZ735DP90uJWVh1Y/HPygG0EUU8CWytbCjg2KEGkqNQ/uTe6 tbcyUfmwNOL78gPIHMi36UFdhFsVPtO1GNFwNWcTGG3AFpukNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH677EPFRe6Jv6KSRbqt/6ByAxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTg2Mzc2ZmUtMDc1My0z ZTZmLWE5NmUtYWE4YzNkMmJlYmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMlGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFOlhWKDY4kQ7eHLRpXnqL12ztU9XwRCUDGvpybn1N/mZcNPLTjrwn5 mT4RV249hDFFBuGVC9C7Ph0qOpnDhI/z4Dup5r6P+Ew6P87gwZXntp6Ysmq7gM7c e/Z3/RGbJ1piAREhiHOuic1tSQwMVk7b2N3jLt+7V4r/PGYvXHdKhhwCTXcTQXg0 HwI4nxDxZssbvN7IgluYgFi0Zy/wt+k+P0WRiIE/cwQhZv0P8WNydgEtlT347qqC DOeXHc4jmHPBPI9RXcTj5jpINQbiHDWDdnFQ7W8MFrZtOG/sBUnNVTMYhiqj9MkA koU727+He5SEDoBFsUC0fBFTCunfnVg= -----END CERTIFICATE-----Generated at Fri May 9 03:18:28 2025 by rpki-client