$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9761d531-6b31-3351-b19d-f5977ae11d1d.roa File: 9761d531-6b31-3351-b19d-f5977ae11d1d.roa (raw, json) Hash identifier: qUpvkfiOxmUtzsgqFG9cV/Af+L+YLVc28ZVUhuDoCe4= Subject key identifier: 63:47:B4:0F:76:7B:DD:32:42:4F:F8:B4:49:BF:30:D1:27:77:64:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA09C38054E64DAA068B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9761d531-6b31-3351-b19d-f5977ae11d1d.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 50.96.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:09:c3:80:54:e6:4d:aa:06:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=c97cc3dd-41f8-4e59-8278-f9caa0fd0d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:c0:bb:8f:7b:cc:11:48:c6:af:2c:d5:28: f8:95:4b:ae:51:55:70:77:d0:b3:8f:7a:96:b7:e3: d3:38:cb:a5:9c:66:98:d3:b0:7f:82:21:f3:40:b1: 89:34:59:b7:6f:75:38:5e:41:ad:54:c9:b1:f2:01: 31:2b:52:e2:d9:2c:c4:a5:d8:67:4e:e4:23:a5:32: 08:a7:89:a0:db:6f:5f:d7:4e:80:ab:d3:d5:83:5a: e3:99:90:dc:9c:c7:cc:03:19:8f:0e:2f:48:6d:50: 2c:58:00:d7:f1:14:2e:36:07:76:39:91:f4:36:f3: 02:6c:23:40:cc:f6:d9:b3:0c:60:68:90:7d:a0:02: 90:08:ff:c2:ca:90:9e:c9:4e:6c:e3:6c:e3:1a:f2: 14:f4:05:38:a1:1d:9a:5e:0c:e2:b8:e6:7c:06:4f: fb:de:a2:42:10:4b:98:1f:2b:0e:d9:58:02:2f:10: 17:e1:68:bc:6f:3f:60:df:bd:1f:02:07:52:5c:25: 95:42:53:a2:2e:fd:2e:cb:98:ef:e5:ac:cb:c0:ac: df:68:37:b6:48:fe:87:9f:28:dd:93:69:14:a5:85: 05:b5:bf:ff:c0:ab:f2:74:2f:87:98:09:46:36:eb: cc:21:39:c3:eb:c1:74:51:4f:9b:08:d7:1a:e1:68: 41:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:47:B4:0F:76:7B:DD:32:42:4F:F8:B4:49:BF:30:D1:27:77:64:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9761d531-6b31-3351-b19d-f5977ae11d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:35:32:82:fa:ea:ae:24:7d:b3:20:ac:2c:cd:13:d5:8a:54: be:a7:5e:45:c5:fb:0d:ae:3c:26:4f:95:6c:e7:ca:9a:d2:3c: 7b:4c:41:69:07:b5:ff:f1:06:c8:28:92:b0:b7:2b:91:b4:87: 9d:65:6b:2e:72:6d:5a:5b:5e:ea:50:75:c3:61:ae:92:1d:c6: 62:43:b9:e9:df:52:03:82:9d:d2:a3:bf:a1:17:00:4b:69:de: f7:db:fe:14:6a:13:31:81:c7:11:c5:8c:02:b9:75:f8:e2:11: ff:98:82:40:7c:00:a4:8c:e6:84:24:88:c1:2c:a7:54:fc:4c: d7:aa:ea:fa:de:81:08:22:b4:52:6d:56:76:d7:2e:81:fa:fc: 34:c7:3c:3f:74:3a:1b:e3:37:63:bf:01:f2:e0:e6:0d:af:9e: b2:56:c8:25:b3:76:41:d9:7e:80:13:a7:05:dc:93:0c:1a:9b: db:eb:d5:6e:ae:b3:45:ba:f8:91:5c:20:c0:48:54:3f:2a:80: a2:88:08:09:cc:b1:e0:a1:51:4f:7d:a2:1d:8b:ca:62:d2:fc: a1:9b:e3:80:41:99:7d:58:34:b2:fe:c3:ee:16:ae:db:6f:dd: 60:e6:e1:70:d6:21:87:ac:6e:29:27:83:dc:a7:9d:08:cf:e8: 61:11:87:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgnDgFTmTaoGi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk Yzk3Y2MzZGQtNDFmOC00ZTU5LTgyNzgtZjljYWEwZmQwZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM3Au497zBFIxq8s1Sj4lUuuUVVwd9Czj3qW t+PTOMulnGaY07B/giHzQLGJNFm3b3U4XkGtVMmx8gExK1Li2SzEpdhnTuQjpTII p4mg229f106Aq9PVg1rjmZDcnMfMAxmPDi9IbVAsWADX8RQuNgd2OZH0NvMCbCNA zPbZswxgaJB9oAKQCP/CypCeyU5s42zjGvIU9AU4oR2aXgziuOZ8Bk/73qJCEEuY HysO2VgCLxAX4Wi8bz9g370fAgdSXCWVQlOiLv0uy5jv5azLwKzfaDe2SP6Hnyjd k2kUpYUFtb//wKvydC+HmAlGNuvMITnD68F0UU+bCNca4WhBLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNHtA92e90yQk/4tEm/MNEnd2TSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTc2MWQ1MzEtNmIzMS0z MzUxLWIxOWQtZjU5NzdhZTExZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMmAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk1MoL66q4kfbMgrCzNE9WKVL6nXkXF+w2uPCZPlWznyprSPHtMQWkH tf/xBsgokrC3K5G0h51lay5ybVpbXupQdcNhrpIdxmJDuenfUgOCndKjv6EXAEtp 3vfb/hRqEzGBxxHFjAK5dfjiEf+YgkB8AKSM5oQkiMEsp1T8TNeq6vregQgitFJt VnbXLoH6/DTHPD90OhvjN2O/AfLg5g2vnrJWyCWzdkHZfoATpwXckwwam9vr1W6u s0W6+JFcIMBIVD8qgKKICAnMseChUU99oh2LymLS/KGb44BBmX1YNLL+w+4Wrttv 3WDm4XDWIYesbikng9ynnQjP6GERh1c= -----END CERTIFICATE-----Generated at Sun May 11 15:40:29 2025 by rpki-client