$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e2ffb83-392d-3ebe-9456-e86a8f666c45.roa File: 1e2ffb83-392d-3ebe-9456-e86a8f666c45.roa (raw, json) Hash identifier: sIFhIoMhVpfVKPcHFncyV6tSSNjlZBZhalVFkYdMJvI= Subject key identifier: 7D:1E:C7:22:9E:E3:FF:EA:E1:8E:57:07:4B:57:D2:7E:48:8D:34:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210E9CBDF51B347BF6757C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e2ffb83-392d-3ebe-9456-e86a8f666c45.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 50.96.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:e9:cb:df:51:b3:47:bf:67:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=b6e92efd-5031-4c3f-9e5f-237b270dcb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:53:9e:57:48:d6:10:84:88:24:57:0f:c8:9e: 44:7e:ed:1c:b2:c8:0f:d0:42:21:4c:13:50:25:4b: e1:c5:b1:63:e8:ea:f4:40:55:fa:bf:b0:a1:8d:1d: bc:c7:45:53:53:e0:aa:ca:f2:cf:2f:6b:fd:48:57: e3:1d:51:53:d0:36:1f:39:b3:48:91:ba:a9:56:3c: 9c:94:18:02:2a:29:3f:0c:15:d0:b2:bc:3b:df:32: a7:cc:b0:e1:41:84:83:06:5b:4c:7b:f3:23:0e:26: a9:2e:80:01:6f:7b:05:9d:16:8b:56:da:cb:03:8d: fe:d9:90:24:97:87:dd:6b:ac:56:1a:c3:44:ff:76: eb:e8:29:b2:51:e1:fc:69:ac:16:2d:84:12:42:36: 2d:44:11:19:d3:1e:6c:dc:7f:98:93:0e:95:07:c7: 3d:68:fb:f7:3c:41:a1:07:f6:86:51:c2:26:0d:3a: f0:16:2e:d5:14:b4:67:2f:98:4b:5f:e3:07:dc:04: 3f:c9:49:16:99:45:26:5b:52:2e:2a:aa:36:6b:48: f9:8b:b7:61:5a:55:76:49:b2:2d:ac:d9:50:79:57: 5c:83:b1:6d:9d:3b:16:a1:d2:a7:b6:14:86:9f:11: e6:61:ae:8d:b0:b5:66:6c:64:f8:95:e7:78:f4:97: 0d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1E:C7:22:9E:E3:FF:EA:E1:8E:57:07:4B:57:D2:7E:48:8D:34:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e2ffb83-392d-3ebe-9456-e86a8f666c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c0:77:f8:24:31:3d:9a:fe:53:7f:b5:ec:00:b0:f0:cc:33: 74:22:8b:88:8b:bc:1b:fa:08:51:55:10:31:9a:88:77:a1:8a: f5:3f:ef:dc:91:15:7c:0a:d3:2c:3d:22:8c:d0:2d:b7:e7:c4: ec:58:31:33:83:9a:28:24:8c:a4:d3:88:26:14:be:eb:93:9a: c9:9f:7d:bf:54:38:bb:1f:92:96:71:f8:1e:b2:3a:f0:b8:56: 02:4a:60:14:bc:d3:fd:9f:31:37:44:5b:c4:02:55:40:23:d3: 38:ee:72:38:a3:fb:49:8e:95:8b:c8:f6:cf:e4:0d:98:62:f0: fb:ca:40:59:5a:e4:64:27:a6:e7:5f:ef:f9:1c:3e:78:29:26: b4:6a:86:03:93:cd:83:87:92:c0:ab:3a:7d:27:94:a8:2a:0c: 9a:fe:9e:a6:d2:fb:1e:39:3a:9c:36:65:41:4d:1b:ff:9d:08: 19:a8:a3:7a:db:fe:a8:e0:f7:98:04:d9:cc:62:f4:08:69:0f: 87:07:d0:97:79:0c:95:82:c8:77:c2:06:a8:bb:07:2f:98:0f: 4e:35:be:d6:c5:56:7f:ce:8d:34:b3:d2:b9:19:df:c6:bf:88: d7:7c:99:63:54:1c:08:85:10:73:dc:d2:84:f6:66:0a:98:b6: 1e:6e:ba:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOnL31GzR79nV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YjZlOTJlZmQtNTAzMS00YzNmLTllNWYtMjM3YjI3MGRjYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplOeV0jWEISIJFcPyJ5Efu0cssgP0EIhTBNQ JUvhxbFj6Or0QFX6v7ChjR28x0VTU+CqyvLPL2v9SFfjHVFT0DYfObNIkbqpVjyc lBgCKik/DBXQsrw73zKnzLDhQYSDBltMe/MjDiapLoABb3sFnRaLVtrLA43+2ZAk l4fda6xWGsNE/3br6CmyUeH8aawWLYQSQjYtRBEZ0x5s3H+Ykw6VB8c9aPv3PEGh B/aGUcImDTrwFi7VFLRnL5hLX+MH3AQ/yUkWmUUmW1IuKqo2a0j5i7dhWlV2SbIt rNlQeVdcg7FtnTsWodKnthSGnxHmYa6NsLVmbGT4led49JcNNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0exyKe4//q4Y5XB0tX0n5IjTRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWUyZmZiODMtMzkyZC0z ZWJlLTk0NTYtZTg2YThmNjY2YzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzAd/gkMT2a/lN/tewAsPDMM3Qii4iLvBv6CFFVEDGaiHehivU/79yR FXwK0yw9IozQLbfnxOxYMTODmigkjKTTiCYUvuuTmsmffb9UOLsfkpZx+B6yOvC4 VgJKYBS80/2fMTdEW8QCVUAj0zjucjij+0mOlYvI9s/kDZhi8PvKQFla5GQnpudf 7/kcPngpJrRqhgOTzYOHksCrOn0nlKgqDJr+nqbS+x45Opw2ZUFNG/+dCBmoo3rb /qjg95gE2cxi9AhpD4cH0Jd5DJWCyHfCBqi7By+YD041vtbFVn/OjTSz0rkZ38a/ iNd8mWNUHAiFEHPc0oT2ZgqYth5uupY= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:23 2025 by rpki-client