$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b9d8ef6-873c-33e3-a672-0ded0f70d877.roa File: 0b9d8ef6-873c-33e3-a672-0ded0f70d877.roa (raw, json) Hash identifier: 2hH6mMi3bWgKlmEGJMpreaQNGicJeWxG2+x6ioRGjCY= Subject key identifier: CC:83:99:AE:31:59:62:D1:5C:C7:A1:38:06:A4:D3:58:52:79:93:38 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111841930A51146F3B59E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b9d8ef6-873c-33e3-a672-0ded0f70d877.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 50.96.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:18:41:93:0a:51:14:6f:3b:59:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=1d674422-df99-4a95-9ed4-11ef0d9c7f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:1c:1c:34:16:37:c7:09:5c:af:f5:52:71: 3c:c4:6a:39:64:58:eb:b6:8a:d9:79:f4:4f:3d:ff: a8:bb:6a:c7:0b:a1:50:c8:d3:3b:a5:a7:0b:63:27: ee:fd:a8:dc:a7:85:8c:54:1e:15:04:e2:38:f8:74: 78:2d:78:a4:f3:52:fb:9e:7e:9c:f2:d6:55:93:c9: 11:74:d3:30:8b:8e:b7:01:a1:9b:b2:6d:b0:ac:4e: 78:4a:87:26:ec:be:a2:58:bd:d1:6c:55:e5:54:10: 86:47:90:d9:e0:3d:70:b6:03:8c:57:d7:7d:58:34: 0a:3b:ec:a3:d5:1d:fc:26:66:ff:74:ae:df:e2:9f: 4b:72:71:da:f6:9f:1a:29:e0:e4:aa:c4:32:a6:e2: 75:30:d7:9a:9b:3a:30:e1:54:36:b7:3a:27:df:fd: 36:ed:48:1f:84:04:b0:17:09:60:07:b9:d0:fd:a3: 12:c4:f5:ad:ae:55:aa:80:e2:c7:b4:8b:88:63:be: a3:7d:86:85:b7:8e:7c:47:8a:31:b6:bd:8a:60:d3: d6:71:81:47:dd:0c:bc:f9:c5:75:88:f2:94:be:e3: 77:cf:b3:df:21:c3:34:7c:c1:a8:ec:fd:ab:b1:f9: 8d:10:7b:ff:63:9d:3d:d7:28:63:fb:f5:dd:c7:8b: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:83:99:AE:31:59:62:D1:5C:C7:A1:38:06:A4:D3:58:52:79:93:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b9d8ef6-873c-33e3-a672-0ded0f70d877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ce:6e:fb:4d:e2:15:0c:0d:8e:ee:dc:70:42:af:b6:f4:32: 08:26:3b:f9:6f:7c:d2:c1:4f:e5:7a:ab:38:d8:8c:da:02:33: 36:57:fc:fd:d1:e7:c8:93:1c:f5:4d:d3:55:5b:23:fc:4e:72: e0:eb:ea:74:eb:1e:c5:8b:31:ea:2a:d7:10:9c:f1:b1:12:3b: 39:e5:ee:f9:b9:81:5c:98:99:a4:a8:b8:79:f0:be:21:2b:7a: 1f:cd:f3:cd:15:eb:74:ef:a8:54:fd:aa:dd:e8:13:22:c8:e2: 72:29:00:85:49:81:f3:ee:f2:7b:fa:38:77:7b:df:f6:d9:2a: 74:3c:da:c4:88:b5:26:c6:94:89:b9:8a:28:74:02:30:33:9b: 58:f0:ed:96:9d:56:12:d3:4c:38:ca:0c:ed:35:e3:fc:d8:7a: f7:9a:e4:aa:89:57:da:cd:aa:c0:ea:0e:20:fd:66:80:8c:61: ba:48:4a:b9:3d:72:64:05:ab:c3:b4:98:8a:00:48:bc:5c:45: 35:50:dc:77:50:6b:4b:a1:84:7d:55:fe:23:a9:42:7d:8f:40: 33:ef:57:f6:25:da:bf:27:5e:a0:22:0a:98:7b:62:53:55:52: 67:05:02:33:75:c5:fc:7a:dd:16:e3:f6:e5:87:61:a3:66:c8: ed:62:0c:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSERhBkwpRFG87WeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MWQ2NzQ0MjItZGY5OS00YTk1LTllZDQtMTFlZjBkOWM3ZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntYcHDQWN8cJXK/1UnE8xGo5ZFjrtorZefRP Pf+ou2rHC6FQyNM7pacLYyfu/ajcp4WMVB4VBOI4+HR4LXik81L7nn6c8tZVk8kR dNMwi463AaGbsm2wrE54Socm7L6iWL3RbFXlVBCGR5DZ4D1wtgOMV9d9WDQKO+yj 1R38Jmb/dK7f4p9LcnHa9p8aKeDkqsQypuJ1MNeamzow4VQ2tzon3/027UgfhASw FwlgB7nQ/aMSxPWtrlWqgOLHtIuIY76jfYaFt458R4oxtr2KYNPWcYFH3Qy8+cV1 iPKUvuN3z7PfIcM0fMGo7P2rsfmNEHv/Y5091yhj+/Xdx4tDywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyDma4xWWLRXMehOAak01hSeZM4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI5ZDhlZjYtODczYy0z M2UzLWE2NzItMGRlZDBmNzBkODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7ObvtN4hUMDY7u3HBCr7b0MggmO/lvfNLBT+V6qzjYjNoCMzZX/P3R 58iTHPVN01VbI/xOcuDr6nTrHsWLMeoq1xCc8bESOznl7vm5gVyYmaSouHnwviEr eh/N880V63TvqFT9qt3oEyLI4nIpAIVJgfPu8nv6OHd73/bZKnQ82sSItSbGlIm5 iih0AjAzm1jw7ZadVhLTTDjKDO014/zYevea5KqJV9rNqsDqDiD9ZoCMYbpISrk9 cmQFq8O0mIoASLxcRTVQ3HdQa0uhhH1V/iOpQn2PQDPvV/Yl2r8nXqAiCph7YlNV UmcFAjN1xfx63Rbj9uWHYaNmyO1iDLA= -----END CERTIFICATE-----Generated at Wed Apr 9 05:19:59 2025 by rpki-client