$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ff1f1f92-a38b-38d3-8040-5d9bed48ed81.roa File: ff1f1f92-a38b-38d3-8040-5d9bed48ed81.roa (raw, json) Hash identifier: fZr5BMt6tzyCjxImh3a0ok8OgiZ/1wUtdBYTHyK8gkQ= Subject key identifier: 43:9E:BC:75:EF:98:D1:3A:22:83:C0:3F:18:91:AC:93:45:34:1C:00 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584A5E605A9443ED2D1E769E0280 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ff1f1f92-a38b-38d3-8040-5d9bed48ed81.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 8100 IP address blocks: 2604:4500:27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5a:94:43:ed:2d:1e:76:9e:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=853f7019-03a8-4151-9e5f-64e081230b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ef:65:65:d9:9f:cf:74:73:ff:df:f2:dc:81: 8e:30:50:f5:e3:18:d0:d5:3f:97:40:be:1d:72:c5: 23:14:b4:c7:9b:75:9b:80:1b:af:6c:64:39:b1:31: 26:00:b2:c1:60:38:73:5c:4f:6c:8a:02:b6:4a:9f: d8:ae:e5:f2:f9:64:82:16:af:3f:74:a5:eb:35:5a: 67:5b:e6:85:37:f3:07:81:19:54:e0:3b:19:40:3b: ed:7d:7d:49:e8:b2:35:9f:83:ad:56:0b:52:06:db: 89:96:b2:74:4b:4b:5c:99:de:e4:7a:87:3d:5d:51: 76:04:65:90:9f:ab:18:62:32:3c:2e:58:7d:8d:ea: 31:c9:1d:39:dd:15:5a:54:d5:dc:be:d9:9b:38:96: ca:42:10:6d:47:7f:da:c6:11:b4:15:60:db:4e:88: a0:00:42:39:9f:c3:50:9d:f0:c6:b9:a3:1c:71:ae: c7:07:37:7f:32:3b:66:6c:24:6b:b6:1b:2d:5c:2d: ec:c8:d7:66:f6:8f:c7:d4:7c:6f:05:24:d1:a0:ca: 65:ad:3c:b4:16:3e:7f:2e:2a:f9:53:8f:e6:3e:d1: 1f:63:14:6a:b5:f9:34:f6:b8:cb:00:94:48:77:c7: d6:d1:9c:e8:0f:7e:50:66:e7:09:2b:4a:3a:04:97: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9E:BC:75:EF:98:D1:3A:22:83:C0:3F:18:91:AC:93:45:34:1C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ff1f1f92-a38b-38d3-8040-5d9bed48ed81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4500:27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:0f:62:a1:b0:18:e9:91:fa:eb:1b:7f:c1:f8:5f:02:81:d0: 5c:33:5d:c9:01:27:a3:97:11:eb:6a:bd:10:e9:54:3d:b5:c2: 29:09:8d:3b:80:82:ec:1c:8f:6a:93:43:3e:24:cb:d3:65:a7: 9d:18:d0:dc:ca:17:2f:0d:81:12:f9:6e:49:49:ab:82:85:79: 67:86:74:ee:0b:ab:76:7c:3b:5a:95:53:c9:31:d1:14:00:23: 48:c3:e2:44:e0:03:af:1d:78:d3:3d:80:1b:0b:44:e1:74:a2: ef:25:ef:29:36:eb:f7:41:e5:83:de:fb:a0:74:d6:96:a4:8a: 3a:3a:b0:d6:aa:79:fb:2d:1f:45:80:be:c7:32:bd:4a:ee:dd: 02:cd:bc:f5:d4:66:c2:a3:ec:7e:ab:be:2f:6a:89:02:de:84: 97:c6:47:90:b6:42:01:61:39:6f:02:2f:4e:18:a9:a9:70:e3: 57:90:86:56:4e:ba:3b:df:cc:02:a9:c8:1b:3d:93:57:30:10: 35:92:26:5a:ac:c9:0b:da:f1:72:76:68:f8:0c:b0:f2:2f:3e: 7e:da:de:cc:1e:c2:25:6d:28:d0:f0:0f:30:a0:42:b8:2a:57: d5:92:22:6e:81:17:37:8d:25:71:cc:0d:c5:14:7a:53:a0:77: 26:95:be:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpeYFqUQ+0tHnaeAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ODUzZjcwMTktMDNhOC00MTUxLTllNWYtNjRlMDgxMjMwYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku9lZdmfz3Rz/9/y3IGOMFD14xjQ1T+XQL4d csUjFLTHm3WbgBuvbGQ5sTEmALLBYDhzXE9sigK2Sp/YruXy+WSCFq8/dKXrNVpn W+aFN/MHgRlU4DsZQDvtfX1J6LI1n4OtVgtSBtuJlrJ0S0tcmd7keoc9XVF2BGWQ n6sYYjI8Llh9jeoxyR053RVaVNXcvtmbOJbKQhBtR3/axhG0FWDbToigAEI5n8NQ nfDGuaMcca7HBzd/MjtmbCRrthstXC3syNdm9o/H1HxvBSTRoMplrTy0Fj5/Lir5 U4/mPtEfYxRqtfk09rjLAJRId8fW0ZzoD35QZucJK0o6BJfqPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEOevHXvmNE6IoPAPxiRrJNFNBwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvZmYxZjFmOTItYTM4Yi0z OGQzLTgwNDAtNWQ5YmVkNDhlZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFAAAn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAsPYqGwGOmR+usbf8H4XwKB0FwzXckBJ6OXEetqvRDpVD21wikJ jTuAguwcj2qTQz4ky9Nlp50Y0NzKFy8NgRL5bklJq4KFeWeGdO4Lq3Z8O1qVU8kx 0RQAI0jD4kTgA68deNM9gBsLROF0ou8l7yk26/dB5YPe+6B01pakijo6sNaqefst H0WAvscyvUru3QLNvPXUZsKj7H6rvi9qiQLehJfGR5C2QgFhOW8CL04Yqalw41eQ hlZOujvfzAKpyBs9k1cwEDWSJlqsyQva8XJ2aPgMsPIvPn7a3swewiVtKNDwDzCg QrgqV9WSIm6BFzeNJXHMDcUUelOgdyaVvsI= -----END CERTIFICATE-----Generated at Tue Jul 1 15:24:58 2025 by rpki-client