$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/704ff5e1-1914-3e79-b7d5-5fd923826a5b.roa File: 704ff5e1-1914-3e79-b7d5-5fd923826a5b.roa (raw, json) Hash identifier: 4REGa0pvCr0skgN+QJxDNKHG1ogvs0ZeAiOgMAXPQ6w= Subject key identifier: 25:80:4F:09:60:9D:39:26:CD:0F:65:77:DD:B2:D2:41:AA:4E:B8:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EA70B6C14413925D5080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/704ff5e1-1914-3e79-b7d5-5fd923826a5b.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 50.96.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ea:70:b6:c1:44:13:92:5d:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=7bc23f6b-8213-47c9-a284-42a5b95a937e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:34:c1:d1:e8:a5:8d:3e:73:07:b0:22:e2: ae:42:01:86:64:a1:b5:14:ca:03:24:15:c3:31:61: 4c:0e:a3:7f:64:ee:16:72:0d:5e:30:54:ed:fc:35: f9:7d:82:45:bb:2b:81:cf:80:46:7e:60:fd:88:73: 61:8e:17:8f:d3:02:80:1e:b6:56:31:17:de:d5:aa: ae:bf:fc:16:f8:07:5e:44:38:e0:5d:0b:c1:5e:0f: 00:83:63:c0:8e:55:3b:d8:27:86:1d:68:40:ad:09: 5f:03:ba:0a:43:86:ba:a9:5f:d0:e2:a4:fc:f6:93: 8c:b8:17:32:55:62:32:3e:f3:a8:82:13:31:be:d5: 85:46:d9:3c:33:53:6c:c1:e8:1b:e0:4d:f3:11:56: 17:82:67:e6:41:eb:76:bf:60:f4:36:f7:15:89:fc: 57:0e:46:22:ac:22:13:9a:b6:b4:13:82:2a:80:02: 27:32:c1:6d:ec:5e:39:7c:d9:4f:9f:b0:cd:93:5c: 88:b4:c0:02:0f:dd:20:61:f6:ba:69:b4:41:e4:76: 0c:60:3f:aa:99:83:47:75:16:06:6d:2b:99:65:0d: 91:4f:e0:ae:da:4f:e4:95:4f:d5:99:b3:f1:18:3b: 6c:24:d8:2b:db:69:24:2e:ac:23:79:3b:68:93:a3: 22:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:80:4F:09:60:9D:39:26:CD:0F:65:77:DD:B2:D2:41:AA:4E:B8:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/704ff5e1-1914-3e79-b7d5-5fd923826a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:5e:b4:f4:d0:6e:27:71:69:74:0a:70:c3:78:a4:c1:01:29: 30:fa:8a:bb:47:bf:5f:c6:a5:85:15:56:16:9e:a9:6d:36:3d: f7:fb:8c:e0:00:df:12:1d:b4:17:8a:42:7c:6f:b4:af:08:cc: cd:25:20:d1:de:91:12:95:a9:b8:73:19:38:f0:41:b9:8b:46: 20:28:7d:3d:cd:1e:6a:2d:18:16:f5:e9:93:fd:6c:3f:6e:7d: a6:08:5a:8d:bc:c7:68:83:f5:df:b2:a3:20:4d:b4:13:b2:3f: fa:68:26:8d:21:17:30:9b:4d:67:15:36:f6:4f:5e:30:6a:37: 7a:73:1c:ab:a2:58:ea:0b:6c:47:8f:8d:6e:36:06:af:28:ec: 68:99:9e:84:8d:44:d0:9e:17:b7:da:37:a1:c1:42:30:1e:08: 5d:13:fd:0c:74:3a:74:f6:de:23:1b:17:6a:8b:3d:45:9c:1d: a0:7f:4a:5b:4f:55:10:b6:ee:6e:70:c2:80:0f:a9:14:30:a8: 4b:cb:41:57:b2:b4:9b:dc:2f:0e:14:a4:ec:50:ae:6f:d5:e9: 3f:2b:e3:f1:f6:b7:f5:6d:63:fc:83:e8:00:79:02:09:b1:c9: 8d:5a:af:73:77:fe:0c:f7:50:2b:95:d4:45:00:a3:3e:91:de: 10:d3:7f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOpwtsFEE5JdUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk N2JjMjNmNmItODIxMy00N2M5LWEyODQtNDJhNWI5NWE5MzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNA0wdHopY0+cwewIuKuQgGGZKG1FMoDJBXD MWFMDqN/ZO4Wcg1eMFTt/DX5fYJFuyuBz4BGfmD9iHNhjheP0wKAHrZWMRfe1aqu v/wW+AdeRDjgXQvBXg8Ag2PAjlU72CeGHWhArQlfA7oKQ4a6qV/Q4qT89pOMuBcy VWIyPvOoghMxvtWFRtk8M1Nswegb4E3zEVYXgmfmQet2v2D0NvcVifxXDkYirCIT mra0E4IqgAInMsFt7F45fNlPn7DNk1yItMACD90gYfa6abRB5HYMYD+qmYNHdRYG bSuZZQ2RT+Cu2k/klU/VmbPxGDtsJNgr22kkLqwjeTtok6MiMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWATwlgnTkmzQ9ld92y0kGqTriUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzA0ZmY1ZTEtMTkxNC0z ZTc5LWI3ZDUtNWZkOTIzODI2YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRetPTQbidxaXQKcMN4pMEBKTD6irtHv1/GpYUVVhaeqW02Pff7jOAA 3xIdtBeKQnxvtK8IzM0lINHekRKVqbhzGTjwQbmLRiAofT3NHmotGBb16ZP9bD9u faYIWo28x2iD9d+yoyBNtBOyP/poJo0hFzCbTWcVNvZPXjBqN3pzHKuiWOoLbEeP jW42Bq8o7GiZnoSNRNCeF7faN6HBQjAeCF0T/Qx0OnT23iMbF2qLPUWcHaB/SltP VRC27m5wwoAPqRQwqEvLQVeytJvcLw4UpOxQrm/V6T8r4/H2t/VtY/yD6AB5Agmx yY1ar3N3/gz3UCuV1EUAoz6R3hDTf5o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:11 2025 by rpki-client