$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/91255711-bb13-3f11-946e-0d5cf109b8d0.roa File: 91255711-bb13-3f11-946e-0d5cf109b8d0.roa (raw, json) Hash identifier: gWsZIgue7tqUwwzlPKOTvjvhkCqODllM5ChF7TZxVHw= Subject key identifier: 6F:96:87:27:0C:72:17:21:A7:4C:E7:11:9F:D6:76:C6:AE:FC:2F:6B Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584A10E37A80A043A372BE0B9480 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/91255711-bb13-3f11-946e-0d5cf109b8d0.roa Signing time: Tue 03 Jun 2025 06:52:02 +0000 ROA not before: Tue 03 Jun 2025 06:52:02 +0000 ROA not after: Mon 01 Sep 2025 06:52:02 +0000 asID: 35280 IP address blocks: 50.3.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:e3:7a:80:a0:43:a3:72:be:0b:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jun 3 06:52:02 2025 GMT Not After : Sep 1 06:52:02 2025 GMT Subject: CN=85dbca50-e11f-4552-a632-206cf51deca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:ea:e7:a1:19:62:13:64:e2:16:3e:0e:c1: f7:b5:bf:42:83:09:ab:9c:b3:97:63:fd:5f:c9:a2: 16:72:d4:86:70:bb:fe:92:99:8e:5c:db:4b:74:f5: fb:45:52:87:5d:f9:70:5c:42:89:12:d4:28:3e:69: 43:68:93:e1:2e:5a:b9:41:be:50:60:99:f7:9e:0e: 38:99:d0:00:88:13:e8:84:0a:dd:0b:27:94:c9:14: 80:36:4e:97:c3:75:d4:7d:dc:66:8b:bd:23:6c:81: ef:64:15:27:eb:6e:95:c7:cf:eb:1b:74:68:b9:1e: 31:d3:97:e1:ad:6f:3e:c1:c9:22:a2:a2:ad:9e:13: 0b:d0:fb:90:0b:b1:f0:db:27:98:b6:69:08:d6:b0: 04:49:27:5c:cb:dd:cc:bc:a2:6b:30:1d:f6:cf:3c: 61:8c:83:b1:b2:62:8d:37:48:1c:05:b0:52:a9:f7: 38:37:d2:51:ea:81:b8:93:86:e8:f2:97:ad:38:8a: e4:16:86:c8:da:fd:8d:e0:9c:03:d6:fa:c4:0a:e0: 38:08:48:fa:03:95:bf:03:29:ed:bc:e2:03:aa:5d: ab:b0:37:fe:21:d8:d6:72:54:db:45:cc:e9:bf:bf: 09:1d:e0:a1:af:62:34:af:da:e7:57:c4:70:51:0a: 31:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:96:87:27:0C:72:17:21:A7:4C:E7:11:9F:D6:76:C6:AE:FC:2F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/91255711-bb13-3f11-946e-0d5cf109b8d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.3.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:6a:fb:b9:d0:1e:12:a2:1c:0c:99:23:f2:79:51:5e:63:c8: 02:f4:48:5e:18:ab:1f:07:3a:01:1d:1e:c2:81:c1:d3:a4:8e: c1:9b:35:e5:1e:2f:af:a3:ba:b5:b5:9b:1c:90:47:1b:90:0d: b4:20:4a:d1:e6:92:2e:95:03:67:79:d8:15:e1:bd:7d:24:12: 8e:e3:c8:5b:e9:02:14:7f:e3:ce:d4:4a:fa:f2:00:a2:0e:fc: 76:1b:4f:32:7a:36:f1:70:06:de:ba:0a:aa:70:b3:31:3f:fe: 59:41:91:e6:53:c6:09:61:1e:b9:32:86:24:47:44:9a:92:ed: db:52:4e:c4:9e:f6:1c:72:72:76:9c:3e:09:aa:e4:74:7f:27: 91:c5:c8:6d:8d:88:92:f4:e7:94:8b:56:6b:1b:03:ab:f3:f0: fb:a5:b4:8d:87:71:36:02:94:0d:8e:60:fd:97:73:20:e7:c1: 9a:79:ab:a2:00:a4:a6:7e:3d:3c:66:95:9e:17:05:c0:f9:54: 83:28:cb:69:71:64:fe:d7:ff:90:2f:19:29:60:30:f5:42:24: d8:d4:ea:af:2e:ab:c9:c4:6d:38:d4:76:ac:7b:43:fc:c7:62: 9b:a4:3c:73:4a:10:d8:49:93:de:cf:5b:53:7c:7a:24:27:90: a0:d8:a3:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQ43qAoEOjcr4LlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDYwMzA2NTIwMloXDTI1MDkwMTA2NTIwMlowLzEtMCsGA1UEAxMk ODVkYmNhNTAtZTExZi00NTUyLWE2MzItMjA2Y2Y1MWRlY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2zq56EZYhNk4hY+DsH3tb9CgwmrnLOXY/1f yaIWctSGcLv+kpmOXNtLdPX7RVKHXflwXEKJEtQoPmlDaJPhLlq5Qb5QYJn3ng44 mdAAiBPohArdCyeUyRSANk6Xw3XUfdxmi70jbIHvZBUn626Vx8/rG3RouR4x05fh rW8+wckioqKtnhML0PuQC7Hw2yeYtmkI1rAESSdcy93MvKJrMB32zzxhjIOxsmKN N0gcBbBSqfc4N9JR6oG4k4bo8petOIrkFobI2v2N4JwD1vrECuA4CEj6A5W/Aynt vOIDql2rsDf+IdjWclTbRczpv78JHeChr2I0r9rnV8RwUQoxhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+WhycMchchp0znEZ/Wdsau/C9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTEyNTU3MTEtYmIxMy0z ZjExLTk0NmUtMGQ1Y2YxMDliOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMgMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlq+7nQHhKiHAyZI/J5UV5jyAL0SF4Yqx8HOgEdHsKBwdOkjsGbNeUe L6+jurW1mxyQRxuQDbQgStHmki6VA2d52BXhvX0kEo7jyFvpAhR/487USvryAKIO /HYbTzJ6NvFwBt66CqpwszE//llBkeZTxglhHrkyhiRHRJqS7dtSTsSe9hxycnac Pgmq5HR/J5HFyG2NiJL055SLVmsbA6vz8PultI2HcTYClA2OYP2XcyDnwZp5q6IA pKZ+PTxmlZ4XBcD5VIMoy2lxZP7X/5AvGSlgMPVCJNjU6q8uq8nEbTjUdqx7Q/zH YpukPHNKENhJk97PW1N8eiQnkKDYo2g= -----END CERTIFICATE-----Generated at Tue Jul 1 17:54:21 2025 by rpki-client