$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e2ffb83-392d-3ebe-9456-e86a8f666c45.roa File: 1e2ffb83-392d-3ebe-9456-e86a8f666c45.roa (raw, json) Hash identifier: tYJu5V5FrbsAz1ytVfZtPTWAB86rkdjKrHdI41yu8v8= Subject key identifier: 27:21:AF:F8:56:5D:9E:6E:ED:D6:98:14:7C:51:05:52:06:27:4E:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A10E6BE76A8DB10FF1010 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e2ffb83-392d-3ebe-9456-e86a8f666c45.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 50.96.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:10:e6:be:76:a8:db:10:ff:10:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=45e06613-c5c7-4c22-8d16-d4441c7a3ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:83:81:b7:54:ba:1a:95:4e:cd:93:b0:b8:22: 0e:16:35:aa:77:a2:b2:e0:62:4d:97:b4:9b:40:7f: 1e:43:d9:fc:4d:6c:14:8c:b0:d5:76:bb:9d:45:bb: b1:32:19:bd:48:ac:45:b9:7e:f7:e2:8d:58:0a:ff: 06:c3:9c:19:5f:94:84:0e:af:f4:a4:b2:85:70:d2: 0f:72:32:e2:8f:90:8c:30:01:7b:33:3a:d4:d3:ef: ed:dd:e8:7f:61:bf:d5:d1:3f:0c:ac:74:8f:c9:89: d0:2c:1b:6e:4a:80:a7:d1:83:6a:cd:fa:ae:d9:b8: 56:3f:12:40:77:3d:7d:ff:ae:a8:5d:40:9d:99:f2: be:d4:8b:19:ca:81:e4:8b:5f:1e:43:03:ed:f4:e3: d9:f4:59:98:7d:32:92:81:ab:2a:7d:4d:2c:48:ff: 75:8c:1a:d3:f7:a1:75:37:c8:a5:0a:27:fe:f4:71: 9e:ef:b0:67:cb:57:e3:73:6c:90:da:91:c3:c3:5d: 02:c0:d7:22:68:1a:14:36:98:f5:9f:8d:1c:99:5b: eb:87:1b:39:54:af:93:75:ce:c7:8d:17:62:13:bf: 5f:2f:d2:b6:3a:22:60:67:7a:7f:e3:02:64:b0:1b: fa:57:11:d5:3e:86:e6:ed:d8:16:02:b6:c4:c9:38: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:21:AF:F8:56:5D:9E:6E:ED:D6:98:14:7C:51:05:52:06:27:4E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e2ffb83-392d-3ebe-9456-e86a8f666c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:73:8f:9a:4f:2c:8d:40:47:b9:66:bf:ec:69:f3:16:45:55: be:6d:99:3e:a4:78:a4:13:c1:4a:4e:d6:cc:e2:47:1a:0c:c7: 49:5a:81:a1:db:85:c8:ab:f6:15:83:74:a3:4a:e1:f6:ad:b4: dd:7b:36:66:69:eb:03:03:d3:33:ea:2d:c7:52:f1:41:19:7b: e4:cf:f1:7c:66:c5:8e:2d:e3:0c:e4:bc:0e:5d:25:25:17:1b: 11:1f:5e:fe:e9:cb:e2:87:03:de:a8:ab:2d:08:99:2c:f1:f3: aa:bb:9d:9d:87:d1:ff:d6:91:23:8c:30:fa:67:59:94:57:d5: bd:ed:fa:49:36:75:77:c0:08:c5:a1:c9:2d:5e:8f:b7:0a:4d: 03:f0:3b:19:27:9c:06:5e:32:15:6c:fb:c1:83:e3:31:f7:a6: ef:17:4a:05:a7:6a:6d:69:b2:4f:ed:8c:2f:f4:89:ac:a9:14: fe:ea:43:f8:ea:1d:8a:7f:c8:be:54:7e:f8:16:b8:4f:e2:92: ca:a0:f0:95:ff:9e:0c:6b:ff:72:d9:07:e6:6e:1c:68:2b:81: 6d:9c:a2:0c:a7:6a:f6:6f:a2:14:2d:0f:99:1d:03:9c:84:94: 84:47:6e:d4:89:5f:ad:e4:4a:ef:1d:7f:8b:04:4d:b2:90:58: 6f:b3:61:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShDmvnao2xD/EBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDVlMDY2MTMtYzVjNy00YzIyLThkMTYtZDQ0NDFjN2EzY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4OBt1S6GpVOzZOwuCIOFjWqd6Ky4GJNl7Sb QH8eQ9n8TWwUjLDVdrudRbuxMhm9SKxFuX734o1YCv8Gw5wZX5SEDq/0pLKFcNIP cjLij5CMMAF7MzrU0+/t3eh/Yb/V0T8MrHSPyYnQLBtuSoCn0YNqzfqu2bhWPxJA dz19/66oXUCdmfK+1IsZyoHki18eQwPt9OPZ9FmYfTKSgasqfU0sSP91jBrT96F1 N8ilCif+9HGe77Bny1fjc2yQ2pHDw10CwNciaBoUNpj1n40cmVvrhxs5VK+Tdc7H jRdiE79fL9K2OiJgZ3p/4wJksBv6VxHVPobm7dgWArbEyTgf8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCchr/hWXZ5u7daYFHxRBVIGJ04qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWUyZmZiODMtMzkyZC0z ZWJlLTk0NTYtZTg2YThmNjY2YzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9zj5pPLI1AR7lmv+xp8xZFVb5tmT6keKQTwUpO1sziRxoMx0lagaHb hcir9hWDdKNK4fattN17NmZp6wMD0zPqLcdS8UEZe+TP8XxmxY4t4wzkvA5dJSUX GxEfXv7py+KHA96oqy0ImSzx86q7nZ2H0f/WkSOMMPpnWZRX1b3t+kk2dXfACMWh yS1ej7cKTQPwOxknnAZeMhVs+8GD4zH3pu8XSgWnam1psk/tjC/0iaypFP7qQ/jq HYp/yL5UfvgWuE/iksqg8JX/ngxr/3LZB+ZuHGgrgW2cogynavZvohQtD5kdA5yE lIRHbtSJX63kSu8df4sETbKQWG+zYRg= -----END CERTIFICATE-----Generated at Thu May 8 00:48:44 2025 by rpki-client