$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/49987bf4-063a-3542-9234-b8eecbfe2954.roa File: 49987bf4-063a-3542-9234-b8eecbfe2954.roa (raw, json) Hash identifier: Pg7Q2FoPiyuJL12HYpdPP+fapNk6ies0H2ZeRxu/E3I= Subject key identifier: A8:D7:A2:17:9E:33:DB:B0:4F:9E:43:5E:23:CD:14:69:3E:F4:CE:2B Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849CFFF748AE1E7217DFFEED480 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/49987bf4-063a-3542-9234-b8eecbfe2954.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 30058 IP address blocks: 50.7.28.0/23 maxlen: 24 50.7.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:74:8a:e1:e7:21:7d:ff:ee:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=7dc3bae4-adbf-4923-8e6e-6fe8bc234633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:81:65:6d:93:52:81:dd:5a:ea:e9:7f:41: 6b:66:ad:9d:b4:65:fc:67:94:df:06:e1:d6:c7:34: 21:6b:f7:b8:f7:20:4f:2e:93:2e:c2:72:2b:ed:ae: b9:97:bf:ab:d3:46:89:14:d8:42:78:f9:93:f3:a5: 07:3e:a4:2e:d6:98:83:b9:5b:d7:14:cc:65:4a:f8: a5:50:80:5a:f3:69:fb:b3:24:6b:32:0e:4e:46:24: 30:23:2e:9a:76:cf:cf:61:2c:21:cf:84:a8:d0:d6: 1e:0a:2f:ad:4c:ee:46:7d:4f:5e:44:e3:b2:4a:b8: 48:de:f4:4d:90:74:4f:74:ca:56:6b:f7:d6:79:68: fb:60:46:3a:b4:95:d5:c0:65:b1:e9:cf:bf:1d:16: a9:c8:67:a3:1f:35:b0:de:6c:35:aa:12:95:e6:58: c0:26:38:b1:d2:50:24:4e:83:b5:c4:eb:df:23:d5: ab:f8:fe:c6:60:29:7c:6b:60:3f:71:79:95:e1:5e: 09:0e:0d:b0:63:7b:b2:9f:6d:86:68:54:b3:ea:48: a4:5b:fe:6e:57:a2:a2:13:3d:b2:16:1c:04:4e:4f: 58:6e:5d:80:f4:80:8f:c6:fc:0c:45:4f:db:e2:a9: a2:9a:11:25:51:4c:c7:f3:29:1d:c1:a3:a8:75:1f: e6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D7:A2:17:9E:33:DB:B0:4F:9E:43:5E:23:CD:14:69:3E:F4:CE:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/49987bf4-063a-3542-9234-b8eecbfe2954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.28.0/23 50.7.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9c:46:e8:9c:c3:33:4b:f7:3a:8c:ba:54:c8:6a:09:6c:f7: 9c:00:dd:03:3f:2f:d8:94:b2:fe:fc:93:c7:10:db:a4:ad:e8: dc:d9:7e:0d:6c:63:d5:bd:5d:40:2d:4d:4c:53:71:5d:f5:58: 32:f1:5c:81:a2:5f:05:8f:d6:57:40:2a:bd:50:f9:c5:63:a8: 08:78:9c:ff:fd:5b:5f:76:9f:e1:12:c7:15:2b:7d:d7:32:a9: 28:f7:b6:56:f0:97:65:fb:70:c2:45:b5:db:a5:76:88:d5:a7: c7:0b:01:7f:73:b1:9d:a3:63:87:24:9a:c8:96:8b:f6:dd:52: d6:96:6c:7e:ed:9b:a8:99:d6:62:5c:68:50:91:4b:05:31:69: 59:b1:4a:ad:20:97:5e:99:5e:c5:07:b9:fa:4c:31:27:87:53: 77:8d:b8:b4:0a:44:d2:98:33:6d:64:43:91:57:ae:34:8d:41: 8b:84:b8:f1:69:0c:60:48:01:f3:0b:2e:10:07:fe:57:d7:ed: 1b:be:20:6a:a0:7f:87:22:a1:23:95:ba:62:80:2b:65:9d:90: 4b:00:eb:d0:77:9e:a7:d3:21:e4:c4:58:e1:b8:25:bc:0a:ac: d5:c6:0f:69:e5:77:58:43:d1:07:6a:98:20:6a:b3:e1:a7:bd: 88:b3:de:53 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnP/3SK4echff/u1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk N2RjM2JhZTQtYWRiZi00OTIzLThlNmUtNmZlOGJjMjM0NjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/yBZW2TUoHdWurpf0FrZq2dtGX8Z5TfBuHW xzQha/e49yBPLpMuwnIr7a65l7+r00aJFNhCePmT86UHPqQu1piDuVvXFMxlSvil UIBa82n7syRrMg5ORiQwIy6ads/PYSwhz4So0NYeCi+tTO5GfU9eROOySrhI3vRN kHRPdMpWa/fWeWj7YEY6tJXVwGWx6c+/HRapyGejHzWw3mw1qhKV5ljAJjix0lAk ToO1xOvfI9Wr+P7GYCl8a2A/cXmV4V4JDg2wY3uyn22GaFSz6kikW/5uV6KiEz2y FhwETk9Ybl2A9ICPxvwMRU/b4qmimhElUUzH8ykdwaOodR/mVQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKjXoheeM9uwT55DXiPNFGk+9M4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNDk5ODdiZjQtMDYzYS0z NTQyLTkyMzQtYjhlZWNiZmUyOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBMgccAwQA Mgc/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFycRuicwzNL9zqMulTIagls95wA3QM/L9iUsv78k8cQ26St 6NzZfg1sY9W9XUAtTUxTcV31WDLxXIGiXwWP1ldAKr1Q+cVjqAh4nP/9W192n+ES xxUrfdcyqSj3tlbwl2X7cMJFtduldojVp8cLAX9zsZ2jY4ckmsiWi/bdUtaWbH7t m6iZ1mJcaFCRSwUxaVmxSq0gl16ZXsUHufpMMSeHU3eNuLQKRNKYM21kQ5FXrjSN QYuEuPFpDGBIAfMLLhAH/lfX7Ru+IGqgf4cioSOVumKAK2WdkEsA69B3nqfTIeTE WOG4JbwKrNXGD2nld1hD0QdqmCBqs+GnvYiz3lM= -----END CERTIFICATE-----Generated at Sun May 11 13:40:44 2025 by rpki-client