$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d91b169-9193-3cff-8f17-62a1c0564ce0.roa File: 5d91b169-9193-3cff-8f17-62a1c0564ce0.roa (raw, json) Hash identifier: UWoUwfo2k6BMLu6koO1b5DZknjk5XhympBg+g/eoV5A= Subject key identifier: EA:7E:19:2D:09:4A:6A:54:A1:80:A9:10:1E:D1:26:CB:CF:F6:8B:58 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA0BC089D5E7A2F8C1CC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d91b169-9193-3cff-8f17-62a1c0564ce0.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 50.96.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0b:c0:89:d5:e7:a2:f8:c1:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=fe5d21d8-eebe-4710-bb0a-f6132977b668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:0b:d8:3c:31:89:ba:c0:5a:37:98:e1:e9: 8a:02:5c:43:41:4b:1d:cb:9a:25:ab:2d:53:09:c4: 06:fe:78:13:04:50:5e:92:22:35:18:80:39:d8:8a: 32:14:9b:a1:15:90:2c:7c:19:97:bb:77:eb:a0:e6: 87:4f:0d:fd:3c:51:63:24:2f:2e:36:60:92:fd:f0: e8:d0:4f:59:db:43:ea:3f:c4:71:07:df:65:79:51: f8:44:74:70:50:f1:1b:1b:f5:bf:08:80:c2:fb:4e: 16:c5:06:d0:e2:13:f6:97:56:21:6c:86:db:3f:28: fd:18:0f:10:2d:3a:97:4d:42:a5:b8:7d:b6:a4:58: 2b:0f:b2:c0:0f:67:cf:29:60:af:cf:5e:1a:af:15: 7f:0f:52:9d:71:41:9b:3c:96:09:6c:0b:b4:0e:96: 70:78:51:a3:49:f2:df:2c:4a:8f:cb:5c:94:21:79: bc:41:1d:04:4b:13:cc:a6:ce:7e:b0:e0:fb:24:31: bf:d9:a0:1e:5a:f6:fc:8e:4f:76:1b:d8:1d:01:4d: 42:58:87:45:3f:fc:66:e4:14:dc:55:13:18:82:19: c2:3f:e8:85:b5:00:5c:96:c8:8d:0c:fb:e9:14:37: 98:1f:1e:92:53:5d:c7:bd:f7:cb:e8:c4:49:7a:05: 12:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7E:19:2D:09:4A:6A:54:A1:80:A9:10:1E:D1:26:CB:CF:F6:8B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d91b169-9193-3cff-8f17-62a1c0564ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:0e:19:7c:cf:70:4e:cf:ac:20:3a:de:e7:a6:1b:cf:53:83: fc:ad:02:1b:a3:72:e6:5b:0b:99:bd:e7:70:67:2c:41:70:ba: 2f:ba:37:b6:10:37:d0:07:5b:6b:91:7a:ab:8c:e9:c4:9c:59: 62:6d:58:93:e5:fb:28:64:71:f4:b9:43:16:54:dd:63:0d:8d: 6f:07:31:da:f7:99:18:d7:0c:ac:00:ac:2a:fc:fa:3d:64:ea: 30:3f:eb:df:1b:0c:83:12:f2:90:07:bb:df:03:3e:84:f3:fc: 2b:42:6d:e7:12:73:83:68:29:db:d4:d5:7d:25:b9:f7:12:a2: f2:30:b4:46:e2:c8:44:3f:a5:c2:b3:e7:b2:1e:11:72:39:86: 3a:36:27:74:a6:2d:c8:a5:0e:1d:4c:e0:5a:9b:25:35:af:be: 1e:71:96:8b:c4:65:4f:df:1b:a4:12:83:a5:c7:b3:79:e2:f1: 3c:a0:a7:5c:76:7d:28:50:41:a6:7c:9e:a1:e7:4e:19:12:e2: c5:18:5e:97:21:75:09:bf:e2:d4:ca:d1:e7:a9:9b:9d:20:26: a2:aa:1f:04:f2:31:d7:03:0a:54:cc:ae:80:f7:1b:e4:55:89: f4:b3:ed:5e:cb:06:af:0f:5c:a2:8a:55:89:50:6a:32:19:74: 86:80:01:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgvAidXnovjBzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ZmU1ZDIxZDgtZWViZS00NzEwLWJiMGEtZjYxMzI5NzdiNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFkL2DwxibrAWjeY4emKAlxDQUsdy5olqy1T CcQG/ngTBFBekiI1GIA52IoyFJuhFZAsfBmXu3froOaHTw39PFFjJC8uNmCS/fDo 0E9Z20PqP8RxB99leVH4RHRwUPEbG/W/CIDC+04WxQbQ4hP2l1YhbIbbPyj9GA8Q LTqXTUKluH22pFgrD7LAD2fPKWCvz14arxV/D1KdcUGbPJYJbAu0DpZweFGjSfLf LEqPy1yUIXm8QR0ESxPMps5+sOD7JDG/2aAeWvb8jk92G9gdAU1CWIdFP/xm5BTc VRMYghnCP+iFtQBclsiNDPvpFDeYHx6SU13HvffL6MRJegUSswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp+GS0JSmpUoYCpEB7RJsvP9otYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWQ5MWIxNjktOTE5My0z Y2ZmLThmMTctNjJhMWMwNTY0Y2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmAWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcOGXzPcE7PrCA63uemG89Tg/ytAhujcuZbC5m953BnLEFwui+6N7YQ N9AHW2uRequM6cScWWJtWJPl+yhkcfS5QxZU3WMNjW8HMdr3mRjXDKwArCr8+j1k 6jA/698bDIMS8pAHu98DPoTz/CtCbecSc4NoKdvU1X0lufcSovIwtEbiyEQ/pcKz 57IeEXI5hjo2J3SmLcilDh1M4FqbJTWvvh5xlovEZU/fG6QSg6XHs3ni8Tygp1x2 fShQQaZ8nqHnThkS4sUYXpchdQm/4tTK0eepm50gJqKqHwTyMdcDClTMroD3G+RV ifSz7V7LBq8PXKKKVYlQajIZdIaAAV4= -----END CERTIFICATE-----Generated at Sun May 11 10:43:08 2025 by rpki-client