$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea30c693-5302-31b3-bde6-b3901e4a5fe8.roa File: ea30c693-5302-31b3-bde6-b3901e4a5fe8.roa (raw, json) Hash identifier: OluqQAYBK9AVloF3mnh/JjNMX/KpE9m0JhBekQvSJIM= Subject key identifier: 0F:B5:61:01:FE:22:3D:C2:B0:44:59:75:F1:59:23:2D:49:32:CD:C8 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F43285849C20A02F550D777C10FA7F2E0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea30c693-5302-31b3-bde6-b3901e4a5fe8.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 40244 IP address blocks: 2604:4500:24::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:02:f5:50:d7:77:c1:0f:a7:f2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=b1b6ff75-60e3-4b8a-a275-85a7efa3ebf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:66:c9:9b:c9:c6:70:6d:e6:b8:98:03:ce:b6: 35:e9:ff:9d:d8:ac:55:5d:d0:66:e4:17:1f:82:7d: 90:da:26:8d:ed:5f:6a:0d:32:6d:a9:7e:4f:da:d7: af:f1:20:a9:4b:eb:0a:b0:bf:8b:9b:24:d5:53:9a: 0f:5c:40:41:1d:b3:50:a7:ab:78:24:be:bb:51:b3: 48:95:47:36:e4:f4:de:76:16:b3:59:a5:4a:40:b7: f3:d5:e0:51:0b:2c:0e:c4:ff:2f:5a:9a:ec:32:26: 73:8b:c4:26:7d:b8:72:75:90:9d:df:b2:99:9b:6f: 2b:e3:80:88:7f:42:55:7b:ed:b8:f4:0b:f2:73:b6: f2:ce:ff:45:d7:54:13:19:15:8d:a5:b3:fc:36:8a: 3f:67:e3:00:b4:5f:72:c7:37:1a:ce:4f:c0:b2:73: 32:f7:a2:45:44:37:5b:18:39:91:f5:ef:f8:f9:63: 59:37:30:a7:aa:44:5d:fc:fd:38:43:30:95:e6:4b: 49:68:59:75:49:2b:ae:c1:32:fe:68:57:e9:bf:26: 8a:6d:65:09:55:88:78:89:01:da:11:5a:42:ae:24: 78:fc:9e:d2:94:c3:99:5c:a1:32:a6:a3:b2:3c:b9: 1c:cc:d5:19:17:02:db:a2:a8:1e:47:3b:56:c6:a2: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B5:61:01:FE:22:3D:C2:B0:44:59:75:F1:59:23:2D:49:32:CD:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea30c693-5302-31b3-bde6-b3901e4a5fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:24::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d1:db:d2:4e:82:73:78:43:63:ed:b5:3c:0b:06:12:ae:9e: ea:4c:ab:25:c7:c4:e8:53:ac:a7:5c:22:a1:7e:ae:2f:ae:de: 15:4c:e2:24:ae:b9:93:69:5f:f5:f3:1b:7a:29:5d:03:35:b7: 56:4d:07:69:d9:ca:bc:bb:75:29:30:2f:1a:bc:f7:a0:11:39: 11:ff:9d:a8:4b:48:74:52:bc:56:ac:05:bc:e5:a1:e4:09:7d: ed:b6:75:8e:db:b8:5d:a8:d1:24:6d:84:63:11:64:54:d6:10: e4:93:51:66:6e:87:3f:00:e2:76:fc:da:47:df:d3:29:7b:59: 82:cc:78:a7:b9:43:1b:ba:9c:9a:6b:83:4d:3b:03:c0:9d:d3: b7:6f:f0:3a:e7:b2:e6:80:14:2f:f1:03:75:94:a1:f4:f3:bc: b1:64:75:77:28:0d:23:8c:3e:c4:d8:51:0d:75:6a:13:51:1b: 81:37:47:ac:90:e8:11:23:c2:b4:c9:15:3c:54:92:59:f7:6a: 0f:d1:36:34:ac:1c:b3:43:63:51:35:19:7a:2b:fc:45:51:3c: df:1a:9e:2f:c6:ba:72:32:2c:39:f8:f4:22:95:ba:ba:01:46: c0:aa:5f:96:39:62:02:5d:77:87:22:ce:c9:03:8c:3a:c8:b9: ac:5f:8d:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnCCgL1UNd3wQ+n8uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YjFiNmZmNzUtNjBlMy00YjhhLWEyNzUtODVhN2VmYTNlYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumbJm8nGcG3muJgDzrY16f+d2KxVXdBm5Bcf gn2Q2iaN7V9qDTJtqX5P2tev8SCpS+sKsL+LmyTVU5oPXEBBHbNQp6t4JL67UbNI lUc25PTedhazWaVKQLfz1eBRCywOxP8vWprsMiZzi8QmfbhydZCd37KZm28r44CI f0JVe+249Avyc7byzv9F11QTGRWNpbP8Noo/Z+MAtF9yxzcazk/AsnMy96JFRDdb GDmR9e/4+WNZNzCnqkRd/P04QzCV5ktJaFl1SSuuwTL+aFfpvyaKbWUJVYh4iQHa EVpCriR4/J7SlMOZXKEypqOyPLkczNUZFwLboqgeRztWxqJTKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA+1YQH+Ij3CsERZdfFZIy1JMs3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZWEzMGM2OTMtNTMwMi0z MWIzLWJkZTYtYjM5MDFlNGE1ZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADfR29JOgnN4Q2PttTwLBhKunupMqyXHxOhTrKdcIqF+ri+u3hVM 4iSuuZNpX/XzG3opXQM1t1ZNB2nZyry7dSkwLxq896ARORH/nahLSHRSvFasBbzl oeQJfe22dY7buF2o0SRthGMRZFTWEOSTUWZuhz8A4nb82kff0yl7WYLMeKe5Qxu6 nJprg007A8Cd07dv8DrnsuaAFC/xA3WUofTzvLFkdXcoDSOMPsTYUQ11ahNRG4E3 R6yQ6BEjwrTJFTxUkln3ag/RNjSsHLNDY1E1GXor/EVRPN8ani/GunIyLDn49CKV uroBRsCqX5Y5YgJdd4cizskDjDrIuaxfjbA= -----END CERTIFICATE-----Generated at Sun May 11 19:10:09 2025 by rpki-client