$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/769bbfb1-8bac-342e-89ef-c9919a4f168d.roa File: 769bbfb1-8bac-342e-89ef-c9919a4f168d.roa (raw, json) Hash identifier: tE398gLULmEqYfyRWRx2ze6MIXQ4B8b+rL8+LPkyWwM= Subject key identifier: 55:2F:71:B1:14:DA:81:3E:AB:2F:C6:E4:79:3F:0A:DE:47:96:F2:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7166D84A8A476B239DED00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/769bbfb1-8bac-342e-89ef-c9919a4f168d.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 50.96.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:66:d8:4a:8a:47:6b:23:9d:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=e644f89c-d68b-45da-b097-dae698c33826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:98:10:dd:06:30:3b:fd:b6:d3:86:9b:17:87: a0:67:30:12:87:4c:27:62:e8:29:ce:64:4b:0c:bf: 5a:ca:51:89:f8:cc:0d:6e:61:05:f5:6f:2a:4d:d8: b7:b4:e8:87:f3:34:d0:bc:ba:2b:2a:4d:8c:54:48: 9f:49:b2:2f:65:4c:b9:f5:c3:9b:1a:60:58:94:3f: f2:dc:fb:e5:aa:02:90:74:a9:1a:47:d6:d2:2b:95: 77:c4:e0:ef:03:1a:cc:08:c5:51:34:0d:52:d8:cc: 1b:30:a0:94:2b:0b:8c:fe:30:ca:d1:ba:0d:fb:21: d7:13:39:fd:57:54:80:b5:1a:c2:87:79:bf:ee:f2: a9:94:25:4b:b2:dd:ab:e5:ce:1b:26:d4:71:4b:2b: 22:0a:14:6e:00:d7:d3:95:28:90:47:a4:3b:1d:07: 8a:78:cd:1b:e6:cc:4b:ca:09:22:46:f1:85:e7:f0: e3:12:4d:ca:95:cd:8c:54:a1:86:56:70:c7:10:bd: e2:e2:39:35:91:3b:25:d7:71:35:a6:1d:ca:da:58: 3f:6f:0e:2f:4e:b7:83:a4:4a:41:ff:43:2f:70:fc: 03:12:01:45:f2:ff:64:e8:9b:87:ec:0a:db:09:07: fc:06:a2:c3:fa:21:ef:98:85:50:23:d1:11:a2:2b: a2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2F:71:B1:14:DA:81:3E:AB:2F:C6:E4:79:3F:0A:DE:47:96:F2:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/769bbfb1-8bac-342e-89ef-c9919a4f168d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:7a:3b:cc:02:1a:5b:ee:bc:d7:9f:9f:79:50:0e:21:0d:2d: 7a:7d:4d:b0:70:0b:a3:f5:31:ca:7c:f5:fe:14:8e:72:f6:d6: 21:42:31:ac:55:94:0a:ee:86:28:17:e3:23:04:f3:b1:4c:59: 98:36:5d:fb:fc:69:79:4d:d8:ed:a9:0e:3d:c4:f8:e8:80:d4: 27:73:3c:cf:9e:52:67:b7:93:07:c3:6c:c8:5d:63:54:06:50: 89:6b:53:db:69:6b:de:e0:97:10:54:15:ea:96:17:75:c4:dc: 5f:07:74:5e:fc:15:2a:80:a3:a1:d8:18:d7:21:0a:8f:58:b6: 5c:4e:33:2e:59:d5:6e:7b:f7:f4:13:b0:4f:1f:57:bb:d5:5e: b6:d2:19:89:0c:da:85:97:ae:79:7d:ba:62:a5:51:a0:4c:26: 91:d1:f5:ed:49:04:1b:82:79:54:8d:43:11:bb:e4:10:71:35: 00:7c:ae:7f:2d:e0:cb:05:df:9d:f0:ba:5e:af:09:e4:c0:1c: 9e:14:fb:f3:7a:55:b2:5f:93:5f:67:f1:7f:48:d2:c4:36:c6: 91:9d:47:06:a4:8f:ce:a6:fc:66:65:0a:28:90:28:ac:3f:f2: 4a:8a:9a:52:08:04:09:4c:0d:6a:d2:ac:8b:99:1e:95:79:c7: dc:d5:56:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWbYSopHayOd7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZTY0NGY4OWMtZDY4Yi00NWRhLWIwOTctZGFlNjk4YzMzODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpgQ3QYwO/2204abF4egZzASh0wnYugpzmRL DL9aylGJ+MwNbmEF9W8qTdi3tOiH8zTQvLorKk2MVEifSbIvZUy59cObGmBYlD/y 3PvlqgKQdKkaR9bSK5V3xODvAxrMCMVRNA1S2MwbMKCUKwuM/jDK0boN+yHXEzn9 V1SAtRrCh3m/7vKplCVLst2r5c4bJtRxSysiChRuANfTlSiQR6Q7HQeKeM0b5sxL ygkiRvGF5/DjEk3Klc2MVKGGVnDHEL3i4jk1kTsl13E1ph3K2lg/bw4vTreDpEpB /0MvcPwDEgFF8v9k6JuH7ArbCQf8BqLD+iHvmIVQI9ERoiuiNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUvcbEU2oE+qy/G5Hk/Ct5HlvLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzY5YmJmYjEtOGJhYy0z NDJlLTg5ZWYtYzk5MTlhNGYxNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx6O8wCGlvuvNefn3lQDiENLXp9TbBwC6P1Mcp89f4UjnL21iFCMaxV lAruhigX4yME87FMWZg2Xfv8aXlN2O2pDj3E+OiA1CdzPM+eUme3kwfDbMhdY1QG UIlrU9tpa97glxBUFeqWF3XE3F8HdF78FSqAo6HYGNchCo9YtlxOMy5Z1W579/QT sE8fV7vVXrbSGYkM2oWXrnl9umKlUaBMJpHR9e1JBBuCeVSNQxG75BBxNQB8rn8t 4MsF353wul6vCeTAHJ4U+/N6VbJfk19n8X9I0sQ2xpGdRwakj86m/GZlCiiQKKw/ 8kqKmlIIBAlMDWrSrIuZHpV5x9zVVlc= -----END CERTIFICATE-----Generated at Fri May 9 18:12:24 2025 by rpki-client