$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50e7e9c4-baa6-39cf-bb0f-7a7cc00afaad.roa File: 50e7e9c4-baa6-39cf-bb0f-7a7cc00afaad.roa (raw, json) Hash identifier: FRqgyPW5ZbNppmPg21dmmeevdJDRc8FYa5De6RFEenQ= Subject key identifier: 49:C8:43:C4:BF:E4:11:C0:4E:A2:FB:C6:C3:64:25:C0:FF:9C:92:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA20F84DC4FCD5688CFA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50e7e9c4-baa6-39cf-bb0f-7a7cc00afaad.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 50.96.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:20:f8:4d:c4:fc:d5:68:8c:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=a87e1433-6aaf-4859-8567-ee7be0a9040d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:32:61:a7:08:f7:ad:e9:4b:86:f5:06:a0:af: f4:b0:7f:43:b6:c2:65:f7:a0:97:99:6b:5c:5e:04: 35:63:33:bf:7b:f2:a4:81:99:92:78:b2:ba:ea:17: b2:47:7b:f1:7c:ef:14:9f:39:4e:36:6a:6a:d7:06: 86:9a:51:23:f3:e7:77:4a:9c:1e:04:2f:36:fd:39: 31:41:70:82:ea:67:9f:2e:72:9c:bd:01:dd:61:48: 58:5a:07:9e:95:cf:63:b2:7e:3b:47:9a:29:31:9f: 72:f9:15:e4:65:e8:c7:cf:70:e9:37:de:61:32:43: c4:b7:d5:a3:b5:81:0f:c4:e3:ba:68:43:b8:6c:aa: ac:8a:32:60:e6:30:21:73:6f:dc:c9:e5:e5:80:1f: ee:24:ec:2d:f5:76:12:3a:d7:66:74:f3:e6:ad:46: f9:15:00:75:cf:3f:04:f6:a7:d0:63:e5:1c:ff:05: e1:01:04:4d:93:9b:93:5b:5c:b5:48:61:87:ca:a0: db:93:36:2c:a7:38:63:9c:1b:7f:40:92:a9:28:75: 86:37:3a:a5:a3:67:c4:ae:a0:5d:d9:8d:b2:39:25: 18:78:8d:6e:4b:cc:a9:37:ff:fc:18:a9:b9:6e:96: c5:12:bb:8e:a2:d4:c3:25:12:a3:11:8a:7f:f1:aa: f1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C8:43:C4:BF:E4:11:C0:4E:A2:FB:C6:C3:64:25:C0:FF:9C:92:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50e7e9c4-baa6-39cf-bb0f-7a7cc00afaad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:de:b1:40:ec:8a:66:b6:4a:6b:00:d6:bb:3d:fd:4b:eb:18: 83:b8:15:b6:20:a6:dd:e6:22:4f:76:dc:4b:a0:bc:da:7a:53: 6d:05:b5:9b:86:2e:61:9f:57:e3:16:36:5a:26:3a:45:c3:51: f7:ed:ff:d8:ae:72:31:d6:a1:c9:88:1d:2a:62:81:48:d4:5e: bd:0c:94:8e:bd:3e:f9:66:41:78:92:2a:ad:40:08:a3:d9:2c: 4e:cd:31:2a:94:dd:b2:cc:54:6a:ff:4a:43:13:2e:48:d3:0f: e1:e4:6e:2d:71:05:21:fc:76:91:49:e0:58:9a:ca:75:0a:50: fb:f8:ea:0c:e6:3e:e3:6e:cf:0d:3f:f2:2b:0f:c1:ba:d3:ba: dc:26:c6:e8:a2:34:20:d5:53:5f:b5:91:57:b8:1b:58:0b:72: 40:72:1b:94:45:48:12:aa:c7:c7:ee:2d:5b:0b:67:6a:17:c5: b9:55:2d:91:0c:06:2b:c3:f2:06:aa:07:2a:87:65:cf:1a:33: 10:1b:fa:14:cb:2a:88:b5:fa:06:89:33:77:8e:a1:2d:e1:67: ee:6b:6b:12:9e:82:57:9c:9b:c9:bc:01:2c:b6:3f:91:53:2b: 6b:bb:16:82:c4:0f:61:54:6d:71:1d:97:11:94:0a:39:d0:23: a5:6b:26:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiD4TcT81WiM+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk YTg3ZTE0MzMtNmFhZi00ODU5LTg1NjctZWU3YmUwYTkwNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzJhpwj3relLhvUGoK/0sH9DtsJl96CXmWtc XgQ1YzO/e/KkgZmSeLK66heyR3vxfO8UnzlONmpq1waGmlEj8+d3SpweBC82/Tkx QXCC6mefLnKcvQHdYUhYWgeelc9jsn47R5opMZ9y+RXkZejHz3DpN95hMkPEt9Wj tYEPxOO6aEO4bKqsijJg5jAhc2/cyeXlgB/uJOwt9XYSOtdmdPPmrUb5FQB1zz8E 9qfQY+Uc/wXhAQRNk5uTW1y1SGGHyqDbkzYspzhjnBt/QJKpKHWGNzqlo2fErqBd 2Y2yOSUYeI1uS8ypN//8GKm5bpbFEruOotTDJRKjEYp/8arxYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnIQ8S/5BHATqL7xsNkJcD/nJIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTBlN2U5YzQtYmFhNi0z OWNmLWJiMGYtN2E3Y2MwMGFmYWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHesUDsima2SmsA1rs9/UvrGIO4FbYgpt3mIk923EugvNp6U20FtZuG LmGfV+MWNlomOkXDUfft/9iucjHWocmIHSpigUjUXr0MlI69PvlmQXiSKq1ACKPZ LE7NMSqU3bLMVGr/SkMTLkjTD+Hkbi1xBSH8dpFJ4FiaynUKUPv46gzmPuNuzw0/ 8isPwbrTutwmxuiiNCDVU1+1kVe4G1gLckByG5RFSBKqx8fuLVsLZ2oXxblVLZEM BivD8gaqByqHZc8aMxAb+hTLKoi1+gaJM3eOoS3hZ+5raxKeglecm8m8ASy2P5FT K2u7FoLED2FUbXEdlxGUCjnQI6VrJsE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:04 2025 by rpki-client