$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7782a31b-25cb-3916-abba-2f8109418177.roa File: 7782a31b-25cb-3916-abba-2f8109418177.roa (raw, json) Hash identifier: WVJepHrUHYb69GHV1f/qHwllxHrxWxXVAXIcqecPwmA= Subject key identifier: 00:8B:9C:86:12:71:21:9C:4D:A7:B1:53:25:50:2D:17:63:E4:6B:E4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4CD895778DDEEE687B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7782a31b-25cb-3916-abba-2f8109418177.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 394183 IP address blocks: 50.96.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4c:d8:95:77:8d:de:ee:68:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=30305928-7c61-49ed-87bb-1e1618e315fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:37:86:3e:d9:3b:4a:a7:2e:76:1c:5b:78:f4: 74:dd:ef:a7:df:de:8a:78:7f:a0:9b:93:6d:95:2a: 32:51:50:b7:aa:50:4f:0e:56:c1:69:2b:db:e6:d5: 3b:d0:2e:fd:ba:cf:e5:ac:42:0d:82:09:1d:62:34: 59:f6:db:94:35:62:22:0d:f7:86:40:4a:b6:f0:63: 95:b3:f2:ad:fa:26:ce:6e:4e:9d:5e:50:d0:51:25: 5a:0f:00:d9:d3:54:0a:35:7a:c9:6e:81:04:e9:88: aa:94:b2:40:aa:0b:77:7c:ac:38:e0:9f:4d:8c:4f: 32:f4:15:28:f8:54:78:41:0c:60:18:d2:41:1b:74: 33:c4:65:f5:d7:be:00:62:2b:c1:bc:56:12:f1:b7: 3f:36:b5:79:bb:24:4c:32:10:bf:3e:d4:ef:60:a4: a1:6d:8b:36:c0:c5:ae:3b:e4:72:f1:2e:9a:c5:8f: eb:14:7a:33:17:09:39:24:de:ec:73:f7:0d:fa:5d: 59:cd:a8:ab:02:0a:92:d5:d2:12:a1:0a:bb:6c:cb: f0:96:09:b6:f1:93:aa:6b:80:2f:d5:ca:2d:e7:e4: e1:d0:4e:d8:a3:2b:79:40:8f:c8:12:36:b9:e6:5d: c2:ee:5b:95:76:a5:cd:0d:b1:88:ba:db:26:fd:71: a7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8B:9C:86:12:71:21:9C:4D:A7:B1:53:25:50:2D:17:63:E4:6B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7782a31b-25cb-3916-abba-2f8109418177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3f:df:3a:c6:0a:d5:f7:fd:7b:72:a7:70:c9:73:5a:14:48: ec:94:b9:8b:a0:1d:cc:17:02:44:1a:04:20:ee:36:2b:26:14: 19:dd:3c:01:fa:90:33:a8:07:a3:2e:d6:e0:83:7d:06:70:43: 04:bc:ff:da:fe:ac:e0:dc:49:2d:0a:77:67:07:eb:4c:09:5f: 3c:b1:88:b6:a8:e7:cd:95:9a:4a:c9:a3:5c:2a:32:11:d7:1b: 45:21:bd:a5:3d:31:4e:13:06:8d:56:32:9f:88:24:68:c5:69: e1:95:57:17:46:4b:35:af:a6:10:35:76:c2:2a:4c:4a:8b:9b: 85:0f:4d:62:1a:8b:f3:98:4d:ba:8f:aa:85:dc:0d:97:6f:cd: 8c:54:3a:ed:62:9c:f7:f8:32:88:b2:fe:14:c5:f4:78:eb:23: d2:80:e4:1b:b8:4e:a8:7f:79:26:5d:d2:e6:57:46:b4:5d:aa: 92:33:42:8e:8f:90:3e:66:fa:ff:53:80:08:10:bc:39:c9:a3: fd:fc:13:f4:7b:7e:fe:08:72:aa:7b:f6:c7:c4:1f:41:db:a3: 58:a2:9f:f1:6b:0c:f8:7a:ff:4f:fd:44:78:74:5c:16:cf:45: 53:19:bb:03:e2:3d:5a:a8:36:2d:28:78:11:f1:73:15:09:5b: cf:26:5c:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkzYlXeN3u5oe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzAzMDU5MjgtN2M2MS00OWVkLTg3YmItMWUxNjE4ZTMxNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jeGPtk7SqcudhxbePR03e+n396KeH+gm5Nt lSoyUVC3qlBPDlbBaSvb5tU70C79us/lrEINggkdYjRZ9tuUNWIiDfeGQEq28GOV s/Kt+ibObk6dXlDQUSVaDwDZ01QKNXrJboEE6YiqlLJAqgt3fKw44J9NjE8y9BUo +FR4QQxgGNJBG3QzxGX1174AYivBvFYS8bc/NrV5uyRMMhC/PtTvYKShbYs2wMWu O+Ry8S6axY/rFHozFwk5JN7sc/cN+l1ZzairAgqS1dISoQq7bMvwlgm28ZOqa4Av 1cot5+Th0E7Yoyt5QI/IEja55l3C7luVdqXNDbGIutsm/XGnRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACLnIYScSGcTaexUyVQLRdj5GvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzc4MmEzMWItMjVjYi0z OTE2LWFiYmEtMmY4MTA5NDE4MTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA/3zrGCtX3/Xtyp3DJc1oUSOyUuYugHcwXAkQaBCDuNismFBndPAH6 kDOoB6Mu1uCDfQZwQwS8/9r+rODcSS0Kd2cH60wJXzyxiLao582VmkrJo1wqMhHX G0UhvaU9MU4TBo1WMp+IJGjFaeGVVxdGSzWvphA1dsIqTEqLm4UPTWIai/OYTbqP qoXcDZdvzYxUOu1inPf4Moiy/hTF9HjrI9KA5Bu4Tqh/eSZd0uZXRrRdqpIzQo6P kD5m+v9TgAgQvDnJo/38E/R7fv4Icqp79sfEH0Hbo1iin/FrDPh6/0/9RHh0XBbP RVMZuwPiPVqoNi0oeBHxcxUJW88mXIE= -----END CERTIFICATE-----Generated at Mon May 12 12:49:40 2025 by rpki-client