$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa File: fde386a0-a0a3-33f9-ad11-813778cd69cd.roa (raw, json) Hash identifier: 1SdTHVMYFGM0Ko3352EKKUsByEaGpxHdkj6osRGq0Fk= Subject key identifier: 19:3A:F2:FC:D9:1B:AC:88:03:BE:0D:9C:F4:12:5B:28:DE:A9:D0:CA Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584A2C20107F99AC060EC8FC1300 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 29802 IP address blocks: 2604:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:10:7f:99:ac:06:0e:c8:fc:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=cc66278a-d8b2-4585-9cb3-9106b356d0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:26:bb:29:12:c0:65:c8:cd:d7:d6:5b:fb: ca:7a:bb:e9:c3:6f:0c:0b:a0:e7:18:dc:20:a3:fd: 65:00:7c:29:7f:83:d6:ca:77:35:e9:89:b9:00:16: d3:e5:4a:8a:86:3e:a1:67:70:45:1a:4f:b1:92:50: 19:b9:c6:7c:09:2f:a6:d5:26:8e:65:1c:46:14:df: f5:bb:85:45:98:a8:0d:1d:81:bb:43:d6:ba:b4:37: 1c:63:4d:30:6c:da:c5:6f:f5:05:09:0c:c3:bb:7b: f3:3d:d0:1e:44:e5:7f:3d:31:3a:af:05:4c:14:75: 18:c0:a5:46:97:99:93:c6:81:73:90:bf:3a:e7:94: 52:15:39:8c:d9:e2:b9:ea:87:e6:b2:fe:ed:95:51: 80:47:00:21:21:1c:a2:99:d7:dc:0f:f8:da:1b:a3: 5f:eb:bf:fc:31:ee:59:23:1b:7e:7e:33:34:d4:62: f1:e5:8d:7f:24:60:08:79:0e:8e:74:97:7f:39:95: e1:51:e2:c8:8f:8e:c2:bb:46:87:4f:83:79:20:8d: 18:8c:db:4a:cb:3c:b5:56:7f:4a:18:f1:55:79:7c: 02:0e:f9:7d:a5:05:28:f3:e5:41:fa:53:69:b3:a0: e3:a3:ff:a6:70:d1:e4:50:c6:95:57:d7:40:b9:df: fb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3A:F2:FC:D9:1B:AC:88:03:BE:0D:9C:F4:12:5B:28:DE:A9:D0:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/fde386a0-a0a3-33f9-ad11-813778cd69cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b9:1f:58:d4:e5:e7:73:b0:85:ae:e1:60:cf:6f:05:e4:57: e4:34:d0:19:e0:2e:85:c0:98:73:26:39:1f:b4:b0:18:17:63: d3:1e:da:33:78:e3:84:81:2f:89:5e:5c:b5:98:bf:8b:f8:6a: 43:d0:61:4f:ae:3d:97:65:20:02:63:1f:ad:dd:8a:24:ec:ec: 67:43:25:9a:28:de:ed:c7:78:6b:7c:16:0d:23:8c:80:e0:96: 73:f2:c3:c8:ca:21:32:db:a4:92:c7:cc:d9:2f:bd:b6:d7:5d: fc:08:1b:4a:ef:6f:93:ac:2b:98:b1:22:4b:bf:79:66:2c:15: 9a:0d:0a:55:86:62:4d:49:c3:d2:d1:0c:f1:4e:0e:dd:f4:02: 64:14:ea:8e:24:57:27:95:94:fa:12:2d:58:18:15:0f:1b:fb: 49:b3:6a:47:34:8b:63:9b:e1:9d:10:a2:a2:8f:3c:14:14:1c: be:3b:cc:4a:d7:a6:b2:36:04:b2:12:8b:84:8c:ee:4a:66:44: f0:5a:63:84:f0:af:03:99:96:4c:3a:7a:97:b0:5c:29:12:28: 31:62:59:a9:30:3e:cd:e2:13:be:c3:d7:b7:27:a3:30:e5:07: 98:46:25:30:24:85:e4:35:c8:ff:2e:25:48:79:d9:dd:79:c0: 3e:5b:e0:bb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEosIBB/mawGDsj8EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk Y2M2NjI3OGEtZDhiMi00NTg1LTljYjMtOTEwNmIzNTZkMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL8muykSwGXIzdfWW/vKervpw28MC6DnGNwg o/1lAHwpf4PWync16Ym5ABbT5UqKhj6hZ3BFGk+xklAZucZ8CS+m1SaOZRxGFN/1 u4VFmKgNHYG7Q9a6tDccY00wbNrFb/UFCQzDu3vzPdAeROV/PTE6rwVMFHUYwKVG l5mTxoFzkL8655RSFTmM2eK56ofmsv7tlVGARwAhIRyimdfcD/jaG6Nf67/8Me5Z Ixt+fjM01GLx5Y1/JGAIeQ6OdJd/OZXhUeLIj47Cu0aHT4N5II0YjNtKyzy1Vn9K GPFVeXwCDvl9pQUo8+VB+lNps6Djo/+mcNHkUMaVV9dAud/7WQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBk68vzZG6yIA74NnPQSWyjeqdDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZmRlMzg2YTAtYTBhMy0z M2Y5LWFkMTEtODEzNzc4Y2Q2OWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQIgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcuR9Y1OXnc7CFruFgz28F5FfkNNAZ4C6FwJhzJjkftLAYF2PTHtoz eOOEgS+JXly1mL+L+GpD0GFPrj2XZSACYx+t3Yok7OxnQyWaKN7tx3hrfBYNI4yA 4JZz8sPIyiEy26SSx8zZL7221138CBtK72+TrCuYsSJLv3lmLBWaDQpVhmJNScPS 0QzxTg7d9AJkFOqOJFcnlZT6Ei1YGBUPG/tJs2pHNItjm+GdEKKijzwUFBy+O8xK 16ayNgSyEouEjO5KZkTwWmOE8K8DmZZMOnqXsFwpEigxYlmpMD7N4hO+w9e3J6Mw 5QeYRiUwJIXkNcj/LiVIedndecA+W+C7 -----END CERTIFICATE-----Generated at Tue Jul 1 13:09:49 2025 by rpki-client