$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/157db028-771f-323b-9944-ce053ce2571d.roa File: 157db028-771f-323b-9944-ce053ce2571d.roa (raw, json) Hash identifier: tZ8KDcKtdbnhkUirOGPts7iqdNy9Qa8BY4NhuWPrVzw= Subject key identifier: 63:64:C8:B1:05:44:39:DF:AC:17:48:41:80:5E:B7:DA:41:4C:D7:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A3CD2A3F5B9359FDAD84DAA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/157db028-771f-323b-9944-ce053ce2571d.roa Signing time: Thu 19 Jun 2025 00:33:41 +0000 ROA not before: Thu 19 Jun 2025 00:33:41 +0000 ROA not after: Wed 17 Sep 2025 00:33:41 +0000 asID: 7029 IP address blocks: 50.96.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:d2:a3:f5:b9:35:9f:da:d8:4d:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 19 00:33:41 2025 GMT Not After : Sep 17 00:33:41 2025 GMT Subject: CN=ffd7f8e2-b0de-4ca0-b81e-c5bd0d4ca398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b4:c9:af:a1:f8:59:87:f2:60:4f:64:e4:01: 59:85:4e:fc:c4:ed:05:a3:0a:ca:53:21:a1:91:f2: 8e:6e:4d:d2:66:e8:fd:d8:cf:6e:8d:63:05:24:b2: fe:17:43:86:b4:2c:ea:33:1f:21:9a:64:1a:9a:7f: 28:9e:ad:5b:fa:92:39:0c:2f:e6:4e:68:01:6a:11: ee:7c:c0:e3:13:bb:cd:b3:5d:07:b4:44:99:c9:08: 2f:6a:74:ed:45:93:6a:7f:32:b5:57:3e:31:26:ea: 99:7e:61:b2:25:95:a1:cb:ae:b4:3f:e6:55:3f:4f: 53:02:1c:4d:3d:da:ad:9d:ef:18:27:be:da:d2:1d: 51:80:23:19:e4:b7:d1:38:86:0c:95:98:e5:db:ba: 6c:67:9d:69:5a:a4:4d:3a:17:b8:f0:31:72:be:02: 7c:1b:f2:2c:7b:87:11:b9:f9:ee:50:3c:76:fa:ae: 85:c8:1a:19:94:68:47:22:9b:97:8f:9f:ec:3b:ca: 54:c1:19:34:e0:ac:76:47:7f:30:f2:2c:c4:26:b7: 63:18:25:90:67:a4:f6:46:d1:f4:f4:0b:37:e5:90: 6c:ef:95:f0:2d:ef:54:5d:58:f1:d2:ab:73:85:65: 88:62:f5:ac:13:33:c4:49:83:89:d5:c7:5a:3c:a2: 93:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:64:C8:B1:05:44:39:DF:AC:17:48:41:80:5E:B7:DA:41:4C:D7:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/157db028-771f-323b-9944-ce053ce2571d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:54:35:ef:09:d9:08:9f:c2:ee:35:a6:3e:6e:87:38:8a:21: 84:18:95:54:14:3d:55:4a:eb:79:0d:49:df:20:6e:21:e3:cb: ac:cf:71:70:7e:5e:14:18:94:cf:9b:11:eb:fd:18:71:1a:55: 4b:10:39:b7:2f:d2:f3:42:d4:13:4d:5b:24:9e:22:62:ee:06: 3d:04:95:57:14:0e:f6:e1:15:dc:c6:19:27:99:23:92:96:23: 06:a2:b9:dd:28:72:e2:47:91:37:b3:4e:b4:9d:6c:44:bb:56: 2c:eb:d1:77:09:00:fd:2c:0b:6b:7c:fc:f0:81:04:d7:ab:6c: 78:09:81:d2:8b:35:e5:a4:db:df:64:73:ad:fe:75:ab:2e:6f: 3f:65:81:69:66:b1:31:23:4e:ec:3d:bc:e8:43:34:39:a9:2e: 49:df:b2:b6:8b:1a:c9:21:b9:ce:cb:a8:6b:14:d6:89:d3:0c: 0f:f3:6d:d9:f6:b9:96:a4:fd:00:0a:31:0f:6c:ce:cb:c2:05: f6:8a:96:2e:8e:77:6f:f5:51:37:ad:49:c1:f0:d9:2f:99:bb: 6d:cc:c0:40:a1:ce:bf:2f:d5:95:a6:99:79:8c:b8:b1:57:a9: 52:80:00:21:c8:ef:95:15:0e:e3:0f:c9:fa:37:ef:b8:48:70: 08:70:06:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo80qP1uTWf2thNqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxOTAwMzM0MVoXDTI1MDkxNzAwMzM0MVowLzEtMCsGA1UEAxMk ZmZkN2Y4ZTItYjBkZS00Y2EwLWI4MWUtYzViZDBkNGNhMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7TJr6H4WYfyYE9k5AFZhU78xO0FowrKUyGh kfKObk3SZuj92M9ujWMFJLL+F0OGtCzqMx8hmmQamn8onq1b+pI5DC/mTmgBahHu fMDjE7vNs10HtESZyQgvanTtRZNqfzK1Vz4xJuqZfmGyJZWhy660P+ZVP09TAhxN Pdqtne8YJ77a0h1RgCMZ5LfROIYMlZjl27psZ51pWqRNOhe48DFyvgJ8G/Ise4cR ufnuUDx2+q6FyBoZlGhHIpuXj5/sO8pUwRk04Kx2R38w8izEJrdjGCWQZ6T2RtH0 9As35ZBs75XwLe9UXVjx0qtzhWWIYvWsEzPESYOJ1cdaPKKTswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNkyLEFRDnfrBdIQYBet9pBTNedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTU3ZGIwMjgtNzcxZi0z MjNiLTk5NDQtY2UwNTNjZTI1NzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRUNe8J2Qifwu41pj5uhziKIYQYlVQUPVVK63kNSd8gbiHjy6zPcXB+ XhQYlM+bEev9GHEaVUsQObcv0vNC1BNNWySeImLuBj0ElVcUDvbhFdzGGSeZI5KW Iwaiud0ocuJHkTezTrSdbES7Vizr0XcJAP0sC2t8/PCBBNerbHgJgdKLNeWk299k c63+dasubz9lgWlmsTEjTuw9vOhDNDmpLknfsraLGskhuc7LqGsU1onTDA/zbdn2 uZak/QAKMQ9szsvCBfaKli6Od2/1UTetScHw2S+Zu23MwEChzr8v1ZWmmXmMuLFX qVKAACHI75UVDuMPyfo377hIcAhwBtY= -----END CERTIFICATE-----Generated at Wed Jul 9 14:00:26 2025 by rpki-client