$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0de91a36-21ad-3a19-b00b-c7ba59483f14.roa File: 0de91a36-21ad-3a19-b00b-c7ba59483f14.roa (raw, json) Hash identifier: DpkHRohX9XkViTbhesA0HTH2jxg4USPPyQzhwpF+esE= Subject key identifier: ED:00:6D:9F:AC:E4:D0:31:8D:58:83:5D:16:A0:2D:DC:D6:C6:0C:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C5DA2E9F90835099B9F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0de91a36-21ad-3a19-b00b-c7ba59483f14.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 50.96.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:5d:a2:e9:f9:08:35:09:9b:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=462fc38a-600c-41ee-83a3-36e21cc64c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:0f:8e:b1:4b:21:91:a3:b3:40:41:74:bd: b7:5a:56:58:f2:6b:16:de:2a:52:7a:12:88:46:51: 93:12:b0:b8:18:44:41:ad:6a:bf:0e:86:18:08:42: 1f:66:c0:90:69:7b:2f:42:1e:8c:26:76:3c:d2:ea: 20:c3:08:55:8c:b3:52:89:32:ae:f6:45:04:07:f4: c7:99:0d:c2:9e:dd:8a:c5:19:29:90:d8:eb:af:42: e6:11:bc:1e:42:25:38:58:4f:23:88:32:3a:6e:af: cb:9d:14:1a:e9:19:92:46:5f:5d:a8:0c:8e:d8:67: f1:5c:3b:25:0c:67:42:b4:20:1b:36:a0:fb:a3:64: 38:71:59:1c:f5:19:5a:09:f8:e3:25:4b:7f:a3:38: 26:59:ed:4c:33:f5:0e:f9:4f:ed:db:08:8d:a1:5a: 51:48:87:0a:8f:fe:03:53:ca:9a:81:b0:68:97:c4: d9:cc:49:6f:73:34:e2:68:2f:58:64:a2:a7:6b:f0: e7:a2:7d:c1:2e:71:11:4f:8e:80:2c:bf:c4:86:07: 5b:94:c0:00:68:35:66:68:66:3b:9d:57:ea:a5:bb: 1d:83:ff:55:e9:08:78:80:bb:45:65:63:32:d8:49: 5c:dd:f4:e1:ac:61:07:d5:6f:49:61:5a:69:ab:45: 2a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:00:6D:9F:AC:E4:D0:31:8D:58:83:5D:16:A0:2D:DC:D6:C6:0C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0de91a36-21ad-3a19-b00b-c7ba59483f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:1b:95:f2:3f:14:4f:1b:eb:f5:55:b4:6c:83:44:c8:7a:c2: 5b:2d:b6:f4:7f:10:86:e0:64:e7:dc:ec:62:8c:3c:09:58:3e: 5f:db:09:52:1c:36:b2:e3:e1:73:20:e5:51:8f:d1:31:78:d0: a7:18:03:cb:14:29:e5:a7:cf:03:22:40:d9:f6:12:8a:53:04: 10:60:0e:b3:d1:e9:01:dd:66:81:d0:86:2b:0e:24:28:10:16: 62:90:a4:4d:fd:91:8c:75:24:4b:f7:48:63:d8:95:0a:79:ec: 29:8e:ac:0c:56:4f:7f:c9:52:4f:a7:22:ef:31:68:53:4a:b2: 17:91:fd:ef:ea:48:e5:64:23:bd:bf:c7:27:e8:51:86:89:59: 8f:72:7a:76:fb:a1:7c:1e:2d:dd:05:58:97:9e:84:b4:20:8e: 84:2d:2b:02:42:4f:19:a6:15:b5:5f:61:4b:6b:e2:66:17:93: ae:9c:81:d0:88:ff:a3:0c:ad:6b:33:d9:42:8b:b6:9e:85:b2: de:45:a1:58:fd:8e:27:7f:7a:9a:31:98:a4:95:88:bb:9d:24: c1:3c:1a:04:ff:71:f7:0f:ba:dd:14:24:56:a0:08:56:35:6d: b7:17:6a:75:23:54:db:13:87:ae:6c:a4:63:c9:21:33:f1:a9: 09:2f:bd:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLF2i6fkINQmbn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NDYyZmMzOGEtNjAwYy00MWVlLTgzYTMtMzZlMjFjYzY0YzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrcPjrFLIZGjs0BBdL23WlZY8msW3ipSehKI RlGTErC4GERBrWq/DoYYCEIfZsCQaXsvQh6MJnY80uogwwhVjLNSiTKu9kUEB/TH mQ3Cnt2KxRkpkNjrr0LmEbweQiU4WE8jiDI6bq/LnRQa6RmSRl9dqAyO2GfxXDsl DGdCtCAbNqD7o2Q4cVkc9RlaCfjjJUt/ozgmWe1MM/UO+U/t2wiNoVpRSIcKj/4D U8qagbBol8TZzElvczTiaC9YZKKna/Dnon3BLnERT46ALL/EhgdblMAAaDVmaGY7 nVfqpbsdg/9V6Qh4gLtFZWMy2Elc3fThrGEH1W9JYVppq0UqNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0AbZ+s5NAxjViDXRagLdzWxgzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGRlOTFhMzYtMjFhZC0z YTE5LWIwMGItYzdiYTU5NDgzZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsblfI/FE8b6/VVtGyDRMh6wlsttvR/EIbgZOfc7GKMPAlYPl/bCVIc NrLj4XMg5VGP0TF40KcYA8sUKeWnzwMiQNn2EopTBBBgDrPR6QHdZoHQhisOJCgQ FmKQpE39kYx1JEv3SGPYlQp57CmOrAxWT3/JUk+nIu8xaFNKsheR/e/qSOVkI72/ xyfoUYaJWY9yenb7oXweLd0FWJeehLQgjoQtKwJCTxmmFbVfYUtr4mYXk66cgdCI /6MMrWsz2UKLtp6Fst5FoVj9jid/epoxmKSViLudJME8GgT/cfcPut0UJFagCFY1 bbcXanUjVNsTh65spGPJITPxqQkvvQk= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:20 2025 by rpki-client