$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd849aab-a85c-3944-a04a-aa0504eca971.roa File: bd849aab-a85c-3944-a04a-aa0504eca971.roa (raw, json) Hash identifier: UBKvF3ye6Z1EXsVdbdged299UJwu1k9e76dxYw+waI4= Subject key identifier: F6:17:53:CA:0F:A8:43:1C:EE:CC:96:8B:E5:A6:E5:61:42:4C:15:C9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A72A51C1D6444DF2E380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd849aab-a85c-3944-a04a-aa0504eca971.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 50.82.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a7:2a:51:c1:d6:44:4d:f2:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=674d810f-57e6-4bb9-ba31-1ddea43b76e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:75:68:13:a2:93:83:6c:46:c9:6b:7a:3e:ba: 49:a7:08:a4:63:b5:07:ef:a5:99:ed:93:af:71:82: ba:dc:16:84:9a:4f:6f:70:0b:44:29:bb:e2:a9:72: 54:ad:a9:a7:de:26:00:1d:ef:35:ce:c4:8b:77:1d: 6f:7b:5f:6a:2b:29:da:14:6e:48:28:7a:c2:a6:da: 67:68:34:40:c0:62:2c:88:a1:60:b3:14:77:12:cc: a2:1c:06:65:37:27:80:78:64:51:92:43:eb:24:c5: 72:3b:c0:6f:aa:94:93:55:ec:7b:69:cd:a2:bb:ee: 9a:c8:32:b7:23:c0:ba:7e:6a:19:34:80:44:06:49: c7:82:08:dc:72:5f:6e:5f:40:c1:33:a9:57:8d:0d: 8b:95:30:41:c8:07:ab:3c:de:ee:78:88:1a:1f:8b: 20:bb:2b:79:dc:62:bc:47:b6:05:da:d2:15:ff:64: 72:80:f3:f2:fb:c7:dd:2d:bf:d2:29:f8:df:89:03: dc:a0:9b:ed:32:f9:47:d9:aa:82:bb:f7:58:94:1b: 1c:d4:6a:39:88:cf:05:04:a5:70:7f:31:c8:74:b8: f2:be:db:74:01:8b:7f:ee:69:24:f0:6e:a4:e1:f4: 2d:11:b1:5a:77:6d:ae:81:ca:0d:41:5c:4e:b8:5d: c3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:17:53:CA:0F:A8:43:1C:EE:CC:96:8B:E5:A6:E5:61:42:4C:15:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd849aab-a85c-3944-a04a-aa0504eca971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.82.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:1a:b8:88:ab:90:5a:66:86:29:36:96:5a:de:64:4b:70:b6: 5c:d8:28:9a:84:d0:9f:17:78:10:84:4a:2a:a4:13:8c:0e:b8: 5d:d3:b2:79:4d:e4:2c:7c:44:1e:15:a5:3d:2e:ad:67:2c:24: ee:0c:8a:0e:c2:9e:a9:2a:67:b6:95:b0:b3:49:69:3e:2f:4b: 0c:e5:86:7d:0f:8f:7f:10:a5:97:75:ea:42:43:66:f9:29:69: f0:f3:bd:b7:49:97:c8:37:44:a7:46:08:38:d9:2b:98:d4:e0: b6:d3:18:69:fc:dd:81:45:02:69:11:75:78:57:73:78:fb:0c: fd:f6:15:28:8c:28:b3:ac:ea:80:07:85:d7:8e:90:76:40:6a: 4f:bb:89:40:52:82:28:ee:ac:54:a2:f4:2b:13:61:c1:8c:2f: 2a:d6:72:92:56:bd:9d:a1:8a:d8:de:e4:42:c7:04:d8:a2:66: 9c:77:5b:b3:8c:b8:12:6e:27:19:be:ac:97:11:8b:84:72:20: 93:bf:3e:dc:53:fc:ab:5c:26:7d:7d:c4:11:4c:a9:a5:5a:33: 4c:2b:5f:c7:ad:c1:91:93:4f:13:77:6f:72:a5:cd:de:c8:e2: 04:9f:9f:cd:63:27:53:a4:f4:5a:61:df:e3:56:3e:23:18:d3: 29:be:00:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKcqUcHWRE3y44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Njc0ZDgxMGYtNTdlNi00YmI5LWJhMzEtMWRkZWE0M2I3NmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXVoE6KTg2xGyWt6PrpJpwikY7UH76WZ7ZOv cYK63BaEmk9vcAtEKbviqXJUramn3iYAHe81zsSLdx1ve19qKynaFG5IKHrCptpn aDRAwGIsiKFgsxR3EsyiHAZlNyeAeGRRkkPrJMVyO8BvqpSTVex7ac2iu+6ayDK3 I8C6fmoZNIBEBknHggjccl9uX0DBM6lXjQ2LlTBByAerPN7ueIgaH4sguyt53GK8 R7YF2tIV/2RygPPy+8fdLb/SKfjfiQPcoJvtMvlH2aqCu/dYlBsc1Go5iM8FBKVw fzHIdLjyvtt0AYt/7mkk8G6k4fQtEbFad22ugcoNQVxOuF3DOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYXU8oPqEMc7syWi+Wm5WFCTBXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmQ4NDlhYWItYTg1Yy0z OTQ0LWEwNGEtYWEwNTA0ZWNhOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMlLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwauIirkFpmhik2llreZEtwtlzYKJqE0J8XeBCESiqkE4wOuF3TsnlN 5Cx8RB4VpT0urWcsJO4Mig7CnqkqZ7aVsLNJaT4vSwzlhn0Pj38QpZd16kJDZvkp afDzvbdJl8g3RKdGCDjZK5jU4LbTGGn83YFFAmkRdXhXc3j7DP32FSiMKLOs6oAH hdeOkHZAak+7iUBSgijurFSi9CsTYcGMLyrWcpJWvZ2hitje5ELHBNiiZpx3W7OM uBJuJxm+rJcRi4RyIJO/PtxT/KtcJn19xBFMqaVaM0wrX8etwZGTTxN3b3Klzd7I 4gSfn81jJ1Ok9Fph3+NWPiMY0ym+AAM= -----END CERTIFICATE-----Generated at Fri May 9 14:24:45 2025 by rpki-client