$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34369aa8-0896-3e8f-b764-c2a5457fe097.roa File: 34369aa8-0896-3e8f-b764-c2a5457fe097.roa (raw, json) Hash identifier: NRsr4D2bBTt3hktXJAenYAodq0j/83mMoZAVJ/18o/0= Subject key identifier: DD:EB:D0:20:5F:36:10:76:DA:DE:AD:19:28:29:F3:F3:39:1F:14:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE118E0E9727C39A0C50300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34369aa8-0896-3e8f-b764-c2a5457fe097.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 50.96.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:18:e0:e9:72:7c:39:a0:c5:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=1e41603f-a58b-4b33-b09e-e6ead340c4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0b:77:53:87:11:ed:8f:a8:7c:fe:bf:32:45: a0:fe:8e:e5:fd:15:aa:37:e8:53:b7:e6:1e:15:a6: 20:34:47:a0:9a:73:ad:0e:1e:a0:9e:7f:22:2a:88: 0f:a9:5c:93:1e:c3:1d:4d:51:43:be:ae:28:ba:91: 3f:b3:be:3c:59:10:61:b1:e4:c9:78:bc:c3:6c:54: 11:ae:b6:16:b0:be:9d:87:0a:3c:02:7d:96:ab:a5: 7e:b4:4c:e4:a8:32:ce:b1:da:4e:4c:da:ab:d8:8c: 9a:4c:e3:dd:89:d7:60:25:b4:c4:38:a0:eb:c5:8c: 84:ae:0d:35:e7:96:1c:19:ab:cb:b2:ab:67:a8:6d: 82:31:79:a9:a5:2c:00:7d:84:7c:64:0e:2d:f8:ec: ff:76:c6:e6:b8:06:a3:dc:95:7c:c2:3c:ed:8c:3c: 4f:85:33:d2:38:84:77:c1:3e:59:50:a3:86:48:93: 30:cd:ca:76:dd:ca:35:0e:f0:da:b1:b5:83:ec:f2: a8:0f:08:e0:46:30:32:5c:d3:40:db:83:ab:3e:d2: 25:06:db:6b:4b:e7:ae:84:a3:08:ea:3d:54:4c:63: cd:ef:be:b8:fe:1f:5d:f3:57:40:4a:8d:52:41:38: b4:b0:ae:84:93:80:d2:24:86:a4:22:2f:cb:98:4f: eb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EB:D0:20:5F:36:10:76:DA:DE:AD:19:28:29:F3:F3:39:1F:14:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34369aa8-0896-3e8f-b764-c2a5457fe097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:2b:e1:7b:fb:0d:e1:7c:cd:92:a3:60:52:83:d5:f6:37:5c: e1:71:fd:5f:14:8c:e2:f6:8e:8b:e7:8e:41:82:9c:86:06:fd: 5b:fc:b9:c4:6e:6d:98:00:6a:80:ee:72:6b:5b:ab:af:b2:d7: bc:ab:f8:51:0d:27:d1:80:07:cf:62:7a:bb:e6:21:b4:ad:f1: a7:05:83:ae:d9:7f:4a:f0:5d:77:e2:20:dc:01:ec:4c:05:73: 0d:3a:47:d2:35:3f:bb:cf:18:ac:61:c6:de:ad:b1:4c:c7:5a: fd:f2:35:07:35:c4:04:5b:32:be:c8:78:67:0f:ca:63:ed:0d: 32:b6:fc:31:18:e0:c4:ff:c8:65:1b:1d:ae:ce:da:5e:0f:5e: 5d:41:47:0b:99:7b:33:95:90:82:6a:3b:da:ff:69:32:e4:d8: d5:b8:58:3a:7d:e6:a0:b6:a1:39:24:bf:28:a6:6d:b7:09:10: 26:3e:7e:7b:25:b4:76:87:82:3b:c5:ba:b7:20:77:8c:1c:9a: 36:ea:ad:db:5e:e3:40:8d:28:dd:0b:a5:e2:fa:e9:65:cb:ff: c0:96:a7:99:df:e1:21:21:c4:ab:95:0d:44:4c:c3:68:fc:87: df:09:d6:f0:8d:86:7b:66:42:15:1b:82:3a:da:fc:0f:43:aa: e9:3f:eb:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Rjg6XJ8OaDFAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MWU0MTYwM2YtYTU4Yi00YjMzLWIwOWUtZTZlYWQzNDBjNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAt3U4cR7Y+ofP6/MkWg/o7l/RWqN+hTt+Ye FaYgNEegmnOtDh6gnn8iKogPqVyTHsMdTVFDvq4oupE/s748WRBhseTJeLzDbFQR rrYWsL6dhwo8An2Wq6V+tEzkqDLOsdpOTNqr2IyaTOPdiddgJbTEOKDrxYyErg01 55YcGavLsqtnqG2CMXmppSwAfYR8ZA4t+Oz/dsbmuAaj3JV8wjztjDxPhTPSOIR3 wT5ZUKOGSJMwzcp23co1DvDasbWD7PKoDwjgRjAyXNNA24OrPtIlBttrS+euhKMI 6j1UTGPN7764/h9d81dASo1SQTi0sK6Ek4DSJIakIi/LmE/rHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3r0CBfNhB22t6tGSgp8/M5HxS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzQzNjlhYTgtMDg5Ni0z ZThmLWI3NjQtYzJhNTQ1N2ZlMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgr4Xv7DeF8zZKjYFKD1fY3XOFx/V8UjOL2jovnjkGCnIYG/Vv8ucRu bZgAaoDucmtbq6+y17yr+FENJ9GAB89iervmIbSt8acFg67Zf0rwXXfiINwB7EwF cw06R9I1P7vPGKxhxt6tsUzHWv3yNQc1xARbMr7IeGcPymPtDTK2/DEY4MT/yGUb Ha7O2l4PXl1BRwuZezOVkIJqO9r/aTLk2NW4WDp95qC2oTkkvyimbbcJECY+fnsl tHaHgjvFurcgd4wcmjbqrdte40CNKN0LpeL66WXL/8CWp5nf4SEhxKuVDURMw2j8 h98J1vCNhntmQhUbgjra/A9Dquk/6zQ= -----END CERTIFICATE-----Generated at Fri Mar 14 08:42:44 2025 by rpki-client