$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa File: 4ece68d6-689f-306d-aad5-aefc8447de5f.roa (raw, json) Hash identifier: DhcD49x9fziRaNOpojPi6x9M/4k7mT9X+aldJRkVZXI= Subject key identifier: 2D:CA:11:20:F0:1E:B1:33:63:8E:D7:89:D7:2A:88:78:F0:86:B5:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA881F4B8D0A750615A9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 50.96.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:88:1f:4b:8d:0a:75:06:15:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=e6f50f23-7b23-43d3-8f2b-29ed4e73d09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ff:7e:41:19:3f:59:d8:4a:e3:41:e0:fc:50: 03:14:65:29:de:e9:33:1d:35:18:ad:53:28:57:58: cd:08:17:d0:a3:b0:b4:30:b3:b0:21:b9:67:5c:e3: 0f:39:9f:70:b7:8f:64:2f:10:6c:59:95:20:28:14: ba:59:6d:be:e4:30:5c:96:13:ff:61:64:0e:ca:57: 29:85:19:39:89:34:b1:f3:c3:cc:bc:c5:77:99:7b: 87:39:8d:9a:b7:c0:89:96:59:9d:4f:d9:b7:f6:6e: fc:d7:6f:ff:17:d3:43:39:d8:30:26:9c:78:46:66: 47:e7:7f:eb:c1:34:37:f2:3b:2b:61:24:be:55:2e: 7b:88:0c:58:0d:0f:5f:dc:66:e2:d5:a7:34:48:a9: 52:e5:01:aa:61:3c:1c:ee:02:4c:7c:b7:ee:08:5d: 4c:b5:fa:c1:d5:6f:9b:4f:7c:36:8d:5d:70:9e:98: 43:e6:64:62:ff:9c:f9:38:7a:b0:23:01:20:62:2f: e0:15:a4:29:03:d6:06:38:9e:a3:57:b8:c3:18:1e: ad:84:7e:91:75:4a:6b:b0:be:6c:45:08:b8:03:b2: 20:ea:de:fa:ea:40:ce:cf:c1:9a:86:38:2e:df:4a: 09:aa:82:b4:c7:64:b7:7e:75:d5:53:90:e2:3f:d5: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:11:20:F0:1E:B1:33:63:8E:D7:89:D7:2A:88:78:F0:86:B5:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:5b:8a:c2:0f:85:02:76:64:8e:4d:bd:72:61:ef:70:c2:1a: 2f:49:3d:17:74:23:56:1d:49:f7:a0:86:17:87:5a:bb:6f:c6: cc:5b:6d:d5:16:f6:2d:78:b8:5a:be:0d:57:ce:b3:c6:ee:87: 88:2c:21:22:b5:7d:28:57:83:71:af:69:eb:67:0f:fd:2b:20: 33:c6:b5:2f:ac:d8:af:b0:20:56:0d:ba:c3:16:6e:3b:0d:92: 7d:5d:d4:75:99:28:04:05:a5:d9:d1:8b:b5:db:f7:16:76:4b: 2f:30:8a:8f:89:c1:d5:2c:48:99:97:85:84:e9:12:bb:b5:ca: da:cd:ff:bb:8b:45:55:df:00:db:76:9a:12:91:9f:dc:0c:9b: 8f:37:a3:5d:5a:41:dc:e0:a6:09:3b:8f:3a:28:a3:1e:d6:89: 03:73:91:b3:40:f3:82:1b:36:9c:44:af:f7:ba:e7:25:f7:d3: 5a:28:8f:4c:8e:27:1c:2d:ed:95:ec:34:96:0f:7a:31:2b:f1: 4f:19:a0:84:c0:cb:dc:ff:c0:4a:33:c7:d8:ed:03:3f:50:8c: 6b:73:8d:ee:b7:3a:ac:8a:5d:2b:c3:8e:92:7c:98:cc:c4:56: 88:2e:fb:a8:1a:9b:f9:42:19:25:2f:f8:be:9d:c5:0a:e8:67: 07:ef:42:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qogfS40KdQYVqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZTZmNTBmMjMtN2IyMy00M2QzLThmMmItMjllZDRlNzNkMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv9+QRk/WdhK40Hg/FADFGUp3ukzHTUYrVMo V1jNCBfQo7C0MLOwIblnXOMPOZ9wt49kLxBsWZUgKBS6WW2+5DBclhP/YWQOylcp hRk5iTSx88PMvMV3mXuHOY2at8CJllmdT9m39m7812//F9NDOdgwJpx4RmZH53/r wTQ38jsrYSS+VS57iAxYDQ9f3Gbi1ac0SKlS5QGqYTwc7gJMfLfuCF1MtfrB1W+b T3w2jV1wnphD5mRi/5z5OHqwIwEgYi/gFaQpA9YGOJ6jV7jDGB6thH6RdUprsL5s RQi4A7Ig6t766kDOz8Gahjgu30oJqoK0x2S3fnXVU5DiP9WCdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3KESDwHrEzY47XidcqiHjwhrU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGVjZTY4ZDYtNjg5Zi0z MDZkLWFhZDUtYWVmYzg0NDdkZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExbisIPhQJ2ZI5NvXJh73DCGi9JPRd0I1YdSfeghheHWrtvxsxbbdUW 9i14uFq+DVfOs8buh4gsISK1fShXg3GvaetnD/0rIDPGtS+s2K+wIFYNusMWbjsN kn1d1HWZKAQFpdnRi7Xb9xZ2Sy8wio+JwdUsSJmXhYTpEru1ytrN/7uLRVXfANt2 mhKRn9wMm483o11aQdzgpgk7jzooox7WiQNzkbNA84IbNpxEr/e65yX301ooj0yO Jxwt7ZXsNJYPejEr8U8ZoITAy9z/wEozx9jtAz9QjGtzje63OqyKXSvDjpJ8mMzE Vogu+6gam/lCGSUv+L6dxQroZwfvQpA= -----END CERTIFICATE-----Generated at Sun Jun 29 06:42:36 2025 by rpki-client