$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/329556ab-7a53-3bd1-b4db-6fbe43223b99.roa File: 329556ab-7a53-3bd1-b4db-6fbe43223b99.roa (raw, json) Hash identifier: 0BNCPOq8f6Sqbkm28AJ13l1KGVcjR3WIWPWe/zO//BM= Subject key identifier: B1:D6:5C:C1:A7:25:0D:D6:BF:AA:BC:46:D4:08:86:B1:7A:8A:77:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DA7103DA08F78E428828B180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/329556ab-7a53-3bd1-b4db-6fbe43223b99.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 50.96.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:03:da:08:f7:8e:42:88:28:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=0b35a598-d3c4-428e-8f9e-a36598ad4fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:c9:0f:c3:3a:29:78:16:e8:10:70:52:9c: b0:18:8e:e0:21:31:b2:40:8d:02:0c:24:f5:0d:97: ea:13:42:8c:e0:47:39:f1:87:0a:e2:5e:d7:19:d7: b0:3d:63:dc:e7:7e:31:e5:27:2b:22:06:a5:9f:65: 81:25:42:6d:9c:3f:89:ec:01:f3:62:a5:47:5c:33: fe:f6:08:7f:22:dd:f5:84:02:ab:20:f2:8d:cf:41: 89:70:44:15:6b:50:0b:1f:ba:f9:e6:12:7b:2d:ab: 10:e0:c2:c6:29:a9:f0:df:f2:b8:eb:2d:30:90:76: 2a:63:db:74:68:fa:df:f0:94:89:e2:e8:74:01:fb: 2f:ac:dc:71:a0:60:2a:51:d2:4c:19:b1:31:c3:bd: df:15:46:1a:0d:ab:bc:6d:55:eb:5d:40:ab:fa:e3: dc:75:c1:1e:39:d4:bb:1e:11:3b:45:c3:39:f7:d4: 1e:c8:c4:5b:4e:5d:4d:40:92:cd:3f:53:36:70:7d: d2:2b:0d:da:10:7d:e7:09:c9:6f:ef:46:ba:ed:ae: a0:50:c8:85:0d:e4:89:18:a2:16:12:e5:19:ec:35: 2e:8e:4e:60:48:40:4a:fc:e0:cc:db:a7:ea:c3:3b: d7:68:a7:43:29:7f:0d:bf:f4:10:e1:cf:29:c0:e0: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D6:5C:C1:A7:25:0D:D6:BF:AA:BC:46:D4:08:86:B1:7A:8A:77:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/329556ab-7a53-3bd1-b4db-6fbe43223b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3f:ad:6b:c6:d3:33:2b:98:c1:6b:9e:d2:05:15:00:56:ab: 2b:c7:70:2c:50:cc:7a:f3:f3:33:89:91:90:eb:57:8d:09:12: 19:04:cc:22:a7:b0:11:ff:ad:d9:1c:a7:7c:d9:7f:34:1c:a9: 97:4a:d0:a9:c8:50:87:eb:f6:77:ea:0c:02:c0:79:00:ae:f9: fe:92:81:69:2a:55:eb:ac:61:39:e9:c2:8b:25:51:4f:b4:13: f8:9c:08:4a:db:f1:93:48:8c:39:c6:0a:d9:2d:7d:99:b7:4f: a1:05:8c:69:dc:dc:d4:11:c1:8e:fe:ba:8b:37:01:e4:26:31: a5:88:6f:9e:a4:dd:e7:37:e5:f1:58:3a:92:ba:b7:eb:eb:e9: e9:ba:4a:3d:43:c7:1d:99:72:de:cf:55:b3:50:c6:58:5b:45: a1:fb:d6:1d:3f:82:1a:6f:25:ce:60:3b:87:90:b0:f9:75:c2: 8f:dc:52:a5:5b:c1:42:1e:61:90:4a:fa:2d:36:7e:35:59:cf: b4:ed:d5:02:5b:17:b1:94:17:ec:ec:35:37:31:47:49:b0:da: 6b:cd:d5:40:97:b4:30:de:d3:e7:4f:2c:18:7e:ad:d0:01:e3: 17:31:8a:42:3b:10:4e:5d:20:4a:58:c5:dc:c8:28:44:91:3c: c3:5f:c3:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQPaCPeOQogosYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk MGIzNWE1OTgtZDNjNC00MjhlLThmOWUtYTM2NTk4YWQ0ZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGrJD8M6KXgW6BBwUpywGI7gITGyQI0CDCT1 DZfqE0KM4Ec58YcK4l7XGdewPWPc534x5ScrIgaln2WBJUJtnD+J7AHzYqVHXDP+ 9gh/It31hAKrIPKNz0GJcEQVa1ALH7r55hJ7LasQ4MLGKanw3/K46y0wkHYqY9t0 aPrf8JSJ4uh0AfsvrNxxoGAqUdJMGbExw73fFUYaDau8bVXrXUCr+uPcdcEeOdS7 HhE7RcM599QeyMRbTl1NQJLNP1M2cH3SKw3aEH3nCclv70a67a6gUMiFDeSJGKIW EuUZ7DUujk5gSEBK/ODM26fqwzvXaKdDKX8Nv/QQ4c8pwOBoawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHWXMGnJQ3Wv6q8RtQIhrF6incQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzI5NTU2YWItN2E1My0z YmQxLWI0ZGItNmZiZTQzMjIzYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmDrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY/rWvG0zMrmMFrntIFFQBWqyvHcCxQzHrz8zOJkZDrV40JEhkEzCKn sBH/rdkcp3zZfzQcqZdK0KnIUIfr9nfqDALAeQCu+f6SgWkqVeusYTnpwoslUU+0 E/icCErb8ZNIjDnGCtktfZm3T6EFjGnc3NQRwY7+uos3AeQmMaWIb56k3ec35fFY OpK6t+vr6em6Sj1Dxx2Zct7PVbNQxlhbRaH71h0/ghpvJc5gO4eQsPl1wo/cUqVb wUIeYZBK+i02fjVZz7Tt1QJbF7GUF+zsNTcxR0mw2mvN1UCXtDDe0+dPLBh+rdAB 4xcxikI7EE5dIEpYxdzIKESRPMNfw2w= -----END CERTIFICATE-----Generated at Wed Apr 9 23:33:47 2025 by rpki-client