$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c7a46190-3ed5-3fcd-97f1-f44e975664c6.roa File: c7a46190-3ed5-3fcd-97f1-f44e975664c6.roa (raw, json) Hash identifier: gRx6qnuc+GADl9JlKs4gwlcA3BmMlfC946jukDe8lXg= Subject key identifier: 8F:9D:94:17:3A:E6:2D:84:DD:22:4F:76:A6:E8:85:74:9E:A4:C1:FB Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A49707DBBCF7D14E0A9CB6100 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c7a46190-3ed5-3fcd-97f1-f44e975664c6.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 1239 IP address blocks: 50.7.2.0/23 maxlen: 24 50.7.26.0/24 maxlen: 24 2001:49f0:d0f3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7d:bb:cf:7d:14:e0:a9:cb:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=6f9627b5-de4f-488b-a0a7-79844acfb986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:e9:dc:ee:36:c3:fd:4b:51:aa:85:de:9c: 47:81:a6:0d:3c:84:fe:5d:f2:f8:71:18:78:c2:6f: 08:46:53:c7:e5:7b:f4:3f:94:68:5e:c9:fa:c5:55: 35:31:0d:ab:56:84:d5:a6:20:a0:3c:09:1f:98:61: 43:b5:b7:35:53:49:27:64:94:b2:44:de:c7:9d:ae: c3:07:de:39:60:72:28:5b:a9:de:54:87:0f:d1:92: 5b:84:26:76:c0:3c:95:6a:e8:96:44:b3:d8:2c:ab: 40:46:1d:6c:61:05:d0:2b:f1:2b:38:57:49:9c:9c: 57:27:c8:15:31:91:8a:ad:f1:8e:12:28:c6:d1:51: f6:f6:4a:3e:ef:5b:c4:05:a7:e2:79:f9:30:b9:cf: 73:37:fa:a4:71:0b:7d:6f:49:0c:a3:0c:bd:0e:10: 54:e2:6d:a3:4a:1b:8f:62:57:82:33:3b:d2:88:55: 0c:81:ed:d7:63:c2:ae:5b:60:89:8c:70:5e:98:ae: 94:81:93:41:36:b5:93:ca:d1:7b:77:e2:25:af:75: 4a:34:68:14:14:eb:03:6d:04:11:1a:9b:e8:0b:9e: 5d:b8:c3:4e:f9:cb:de:7a:46:76:b2:56:6a:51:1b: 8b:ed:15:ce:81:f8:e0:67:b8:2c:3b:d0:28:ed:3a: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9D:94:17:3A:E6:2D:84:DD:22:4F:76:A6:E8:85:74:9E:A4:C1:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c7a46190-3ed5-3fcd-97f1-f44e975664c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 50.7.2.0/23 50.7.26.0/24 IPv6: 2001:49f0:d0f3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:73:d2:3a:ec:5b:4b:9b:a3:5e:6a:8e:cd:4b:4d:55:09:79: 59:b2:68:e2:d4:0b:ce:1d:e5:6f:14:43:af:a3:cb:35:f9:cf: 6c:e5:2f:68:39:da:6d:c2:bc:cd:4c:03:4d:8b:a8:d3:41:c6: ec:52:25:7b:23:fb:b4:a5:ac:a5:a1:43:06:05:be:b9:63:73: ba:37:ea:24:76:c2:c3:1e:53:b1:35:6d:c6:5e:51:c8:fb:58: 7b:f3:80:d0:70:bf:0a:d5:fd:ac:e2:b7:7a:f1:65:d2:89:a7: 27:16:d5:ed:d1:13:ec:a4:0e:b6:1b:06:ca:1b:e9:05:51:e8: 4f:e7:06:89:aa:a2:b3:60:14:02:a6:d3:b8:5e:bb:d1:2a:c3: 11:df:6d:0e:cb:7a:79:5a:0f:95:12:9f:bd:7c:45:a2:76:ad: 68:42:21:67:aa:43:23:40:e4:ac:37:83:2e:87:cf:75:d9:6b: 66:59:60:1e:ba:28:5d:2c:f5:f1:8d:76:b4:fe:ef:ef:9c:d1: 94:8d:0e:f9:d4:93:a4:c7:ef:df:9a:2e:24:82:2a:3f:c9:1d: fd:fb:7d:0d:d5:75:eb:85:6e:d5:14:32:e6:c5:27:96:bd:ce: f9:22:b9:06:75:e0:45:cb:89:2b:42:8f:0c:31:9b:cf:5d:38: 2a:4b:50:f4 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEpJcH27z30U4KnLYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NmY5NjI3YjUtZGU0Zi00ODhiLWEwYTctNzk4NDRhY2ZiOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg/p3O42w/1LUaqF3pxHgaYNPIT+XfL4cRh4 wm8IRlPH5Xv0P5RoXsn6xVU1MQ2rVoTVpiCgPAkfmGFDtbc1U0knZJSyRN7Hna7D B945YHIoW6neVIcP0ZJbhCZ2wDyVauiWRLPYLKtARh1sYQXQK/ErOFdJnJxXJ8gV MZGKrfGOEijG0VH29ko+71vEBafiefkwuc9zN/qkcQt9b0kMowy9DhBU4m2jShuP YleCMzvSiFUMge3XY8KuW2CJjHBemK6UgZNBNrWTytF7d+Ilr3VKNGgUFOsDbQQR GpvoC55duMNO+cveekZ2slZqURuL7RXOgfjgZ7gsO9Ao7TryuwIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFI+dlBc65i2E3SJPdqbohXSepMH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYzdhNDYxOTAtM2VkNS0z ZmNkLTk3ZjEtZjQ0ZTk3NTY2NGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBMgcCAwQA MgcaMA8EAgACMAkDBwAgAUnw0PMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAv3PSOuxbS5ujXmqOzUtNVQl5 WbJo4tQLzh3lbxRDr6PLNfnPbOUvaDnabcK8zUwDTYuo00HG7FIleyP7tKWspaFD BgW+uWNzujfqJHbCwx5TsTVtxl5RyPtYe/OA0HC/CtX9rOK3evFl0omnJxbV7dET 7KQOthsGyhvpBVHoT+cGiaqis2AUAqbTuF670SrDEd9tDst6eVoPlRKfvXxFonat aEIhZ6pDI0DkrDeDLofPddlrZllgHrooXSz18Y12tP7v75zRlI0O+dSTpMfv35ou JIIqP8kd/ft9DdV164Vu1RQy5sUnlr3O+SK5BnXgRcuJK0KPDDGbz104KktQ9A== -----END CERTIFICATE-----Generated at Sun Jun 29 16:30:09 2025 by rpki-client