$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26ae0c3c-14d9-3d32-908a-838ff6616574.roa File: 26ae0c3c-14d9-3d32-908a-838ff6616574.roa (raw, json) Hash identifier: DHWy4SjV4owX36qX8cQ3BkVpQmb4aCV726uSIQBxBKo= Subject key identifier: 3F:86:93:78:7A:77:94:54:8D:4D:F6:23:F2:A7:3D:79:26:D7:2E:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB490438B89905C56444780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26ae0c3c-14d9-3d32-908a-838ff6616574.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 50.96.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:90:43:8b:89:90:5c:56:44:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=95cb9d0b-37f5-41f9-a068-e27c696c66e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:33:0a:58:be:fe:84:df:39:9f:99:45:9e:ae: f1:e4:e2:a4:68:44:ac:07:e6:ec:b8:80:ac:cd:65: cf:1f:27:7e:6c:9f:58:aa:ab:6f:f3:f9:28:b9:23: 51:81:0b:8f:1a:42:f5:86:4a:3c:65:f6:cf:a1:3c: 62:b8:b5:ba:27:e4:1a:92:eb:b5:12:e7:c5:b6:84: b7:fe:76:bc:1f:58:e3:a7:88:83:14:12:b3:f0:b8: d1:19:4f:74:4d:d3:20:61:35:ff:e1:55:9a:79:f5: 8a:e9:c6:56:22:99:43:6f:43:a7:c3:fd:d8:af:58: 8d:56:53:b2:c0:45:20:71:eb:49:85:84:25:94:3f: e3:ca:cc:01:3f:47:bf:fe:90:44:63:84:ae:7b:e3: f4:59:70:86:ca:50:97:f8:31:6b:d8:38:b0:ef:d3: 2a:82:7f:eb:04:bd:a5:06:ca:32:f9:de:62:71:0c: 77:3a:21:07:1f:bd:05:80:80:8f:67:89:8e:44:6a: 6e:61:9b:3d:b5:cf:4f:6e:6b:14:1f:1d:fb:1e:ec: 7d:9c:02:1c:f9:b8:6c:59:6d:f8:33:06:9e:48:0e: 98:c2:60:98:91:17:7e:2f:61:a8:3b:03:98:72:a2: 8a:5b:a9:f1:a5:74:30:af:d2:72:19:10:5a:c6:1b: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:86:93:78:7A:77:94:54:8D:4D:F6:23:F2:A7:3D:79:26:D7:2E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26ae0c3c-14d9-3d32-908a-838ff6616574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ad:bb:46:14:44:4d:aa:b2:51:23:0e:25:bb:d2:71:3f:06: 05:d9:04:04:fa:5c:a2:4a:31:de:7c:af:34:18:04:8b:e3:f5: 21:c7:15:57:03:5b:eb:9f:19:22:83:d8:10:3f:a5:a9:63:ca: 22:09:bb:6a:00:9e:b1:a9:67:56:93:9d:2f:5c:f7:86:c5:7f: 97:54:71:a0:11:8a:d1:d7:77:ed:96:cc:4b:ad:59:c9:53:b2: 7d:4d:66:da:b7:45:1f:7b:9f:b4:7d:10:ea:49:58:ae:80:ba: 5f:02:92:38:ad:21:b3:d6:fc:e7:c7:79:a1:ef:42:aa:b5:64: c6:06:61:56:28:ed:2d:93:fc:d0:e3:a3:00:db:1c:94:e5:9c: d3:73:f8:a3:18:33:07:5b:e0:e5:48:65:85:5c:2b:0f:15:52: 2a:e5:cc:ce:21:69:6c:6d:ab:07:83:ad:b4:7c:28:08:2d:d9: 40:9d:f9:c3:43:29:7d:a7:26:06:8d:02:26:2d:f6:d2:3e:d5: dd:97:82:f8:69:76:d8:ec:ef:44:9e:2b:df:c9:e6:37:0d:f6: ff:ef:3d:86:47:44:7e:37:15:e9:4b:db:ec:c9:a5:18:f0:fb: 57:fb:2a:33:f5:03:66:f4:45:db:57:c5:83:95:5c:2f:4d:69: 6a:87:23:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJBDi4mQXFZER4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk OTVjYjlkMGItMzdmNS00MWY5LWEwNjgtZTI3YzY5NmM2NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjMKWL7+hN85n5lFnq7x5OKkaESsB+bsuICs zWXPHyd+bJ9Yqqtv8/kouSNRgQuPGkL1hko8ZfbPoTxiuLW6J+Qakuu1EufFtoS3 /na8H1jjp4iDFBKz8LjRGU90TdMgYTX/4VWaefWK6cZWIplDb0Onw/3Yr1iNVlOy wEUgcetJhYQllD/jyswBP0e//pBEY4Sue+P0WXCGylCX+DFr2Diw79Mqgn/rBL2l Bsoy+d5icQx3OiEHH70FgICPZ4mORGpuYZs9tc9PbmsUHx37Hux9nAIc+bhsWW34 MwaeSA6YwmCYkRd+L2GoOwOYcqKKW6nxpXQwr9JyGRBaxhsAjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+Gk3h6d5RUjU32I/KnPXkm1y6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjZhZTBjM2MtMTRkOS0z ZDMyLTkwOGEtODM4ZmY2NjE2NTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6tu0YURE2qslEjDiW70nE/BgXZBAT6XKJKMd58rzQYBIvj9SHHFVcD W+ufGSKD2BA/paljyiIJu2oAnrGpZ1aTnS9c94bFf5dUcaARitHXd+2WzEutWclT sn1NZtq3RR97n7R9EOpJWK6Aul8CkjitIbPW/OfHeaHvQqq1ZMYGYVYo7S2T/NDj owDbHJTlnNNz+KMYMwdb4OVIZYVcKw8VUirlzM4haWxtqweDrbR8KAgt2UCd+cND KX2nJgaNAiYt9tI+1d2Xgvhpdtjs70SeK9/J5jcN9v/vPYZHRH43FelL2+zJpRjw +1f7KjP1A2b0RdtXxYOVXC9NaWqHIzc= -----END CERTIFICATE-----Generated at Sat May 10 19:26:08 2025 by rpki-client