$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04944840-2d78-3778-aa55-a7340a83b5f1.roa File: 04944840-2d78-3778-aa55-a7340a83b5f1.roa (raw, json) Hash identifier: SKjZXUEoaC0GGmTHQ+jKHFWuoRs9gnZjpv+KvsCXOnI= Subject key identifier: C4:4E:B8:C9:F3:49:D5:E9:E8:65:3F:8C:D0:C7:1A:98:E9:91:1C:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE118EDE4783D8390F131C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04944840-2d78-3778-aa55-a7340a83b5f1.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 50.96.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:18:ed:e4:78:3d:83:90:f1:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=45cfb46c-86a1-464b-bd71-7e275ac3ce24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:5b:b6:57:c2:02:3b:4b:fa:47:87:26:ba: 7b:0e:a9:d1:6f:df:0c:91:e7:0f:24:3c:0d:a5:07: 6a:75:85:12:a2:1f:09:70:d8:37:9a:2a:23:82:21: 08:75:b4:e3:2b:9c:3c:13:03:da:c4:ac:f6:a6:e7: d1:34:3e:ac:c0:c1:8b:27:bf:b4:de:b6:7f:d2:26: 34:2c:5c:86:d4:34:5d:29:ec:4f:38:dc:91:68:53: 52:27:75:2c:e2:94:c7:c2:a5:67:6f:8d:97:7c:3b: ed:2a:87:d7:91:06:c7:71:2a:70:c2:7e:0b:01:ba: c6:9d:0c:1e:83:fb:f7:f2:f5:e0:96:04:93:6f:67: 65:00:a7:f1:3f:6a:c8:9a:a3:dd:87:30:e0:54:d9: 0a:c0:63:53:58:77:d4:b4:fa:22:f0:bf:da:df:82: 49:e4:67:b6:35:dc:83:00:b4:6e:dc:41:78:f1:33: e0:24:d3:d6:8c:23:b8:4b:5d:4e:88:67:1c:41:50: e7:bd:fb:bc:68:40:d3:54:65:ae:c0:58:26:37:d2: 38:be:10:b7:0b:09:ba:47:58:ee:bb:4e:a9:cf:37: 58:bf:5c:14:da:d4:ce:ef:84:d8:8a:13:d5:83:f6: dd:7f:f0:85:bb:ed:4f:e1:90:d6:d4:f7:7a:de:83: 6b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4E:B8:C9:F3:49:D5:E9:E8:65:3F:8C:D0:C7:1A:98:E9:91:1C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04944840-2d78-3778-aa55-a7340a83b5f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1b:0b:51:a1:1a:06:47:33:21:0c:db:5a:7d:ce:d9:65:37: ea:58:9d:a1:5e:c9:94:26:81:bc:5d:36:d5:d4:55:45:52:84: ae:fc:7b:75:e4:98:78:37:f3:b6:88:b3:15:18:8d:f5:83:b2: c1:52:80:24:4f:53:61:f1:8a:71:a9:bf:74:f0:f6:c3:e0:ac: 27:bd:ae:e0:c7:0c:55:4f:55:ae:51:c0:25:3d:72:44:a0:91: 64:ad:2c:58:c0:ea:bb:2b:38:f8:8a:05:38:c0:41:0f:ed:2e: 9b:77:a7:ce:1a:ab:2f:e9:84:9f:71:18:a2:2c:b0:ef:ef:29: 4b:42:5c:bd:68:02:d3:0c:3e:68:33:da:8d:e2:bb:5c:3b:47: f0:60:5b:36:95:71:ee:09:15:4f:0b:8b:f2:f0:6b:12:db:26: 76:6e:13:2c:52:56:9b:2a:56:41:8c:8d:d3:de:c7:70:4b:2e: 0c:0f:bf:c4:04:f5:e5:7f:02:06:ed:e2:1d:94:47:02:5a:f6: cb:12:f6:b8:16:ac:d6:85:28:eb:b9:30:86:70:82:e3:26:70: ab:73:66:a7:c2:42:a3:e9:ff:b9:b6:77:7f:27:b2:47:a9:6c: 65:08:c4:7a:9c:b2:bd:30:44:bb:6d:c1:3d:ec:a6:b9:b3:7c: 45:57:92:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Rjt5Hg9g5DxMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NDVjZmI0NmMtODZhMS00NjRiLWJkNzEtN2UyNzVhYzNjZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsNbtlfCAjtL+keHJrp7DqnRb98MkecPJDwN pQdqdYUSoh8JcNg3miojgiEIdbTjK5w8EwPaxKz2pufRND6swMGLJ7+03rZ/0iY0 LFyG1DRdKexPONyRaFNSJ3Us4pTHwqVnb42XfDvtKofXkQbHcSpwwn4LAbrGnQwe g/v38vXglgSTb2dlAKfxP2rImqPdhzDgVNkKwGNTWHfUtPoi8L/a34JJ5Ge2NdyD ALRu3EF48TPgJNPWjCO4S11OiGccQVDnvfu8aEDTVGWuwFgmN9I4vhC3Cwm6R1ju u06pzzdYv1wU2tTO74TYihPVg/bdf/CFu+1P4ZDW1Pd63oNrbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMROuMnzSdXp6GU/jNDHGpjpkRyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQ5NDQ4NDAtMmQ3OC0z Nzc4LWFhNTUtYTczNDBhODNiNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMmA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYbC1GhGgZHMyEM21p9ztllN+pYnaFeyZQmgbxdNtXUVUVShK78e3Xk mHg387aIsxUYjfWDssFSgCRPU2HxinGpv3Tw9sPgrCe9ruDHDFVPVa5RwCU9ckSg kWStLFjA6rsrOPiKBTjAQQ/tLpt3p84aqy/phJ9xGKIssO/vKUtCXL1oAtMMPmgz 2o3iu1w7R/BgWzaVce4JFU8Li/LwaxLbJnZuEyxSVpsqVkGMjdPex3BLLgwPv8QE 9eV/Agbt4h2URwJa9ssS9rgWrNaFKOu5MIZwguMmcKtzZqfCQqPp/7m2d38nskep bGUIxHqcsr0wRLttwT3sprmzfEVXkgw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:08 2025 by rpki-client