$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa File: 8cf117f2-112a-3cfb-9363-44ee9405c70d.roa (raw, json) Hash identifier: /oJRPpcrO5Hb4Y6pW6/QkNfX4UeKUdAqZQRxlnY1eSo= Subject key identifier: D6:72:47:99:FF:5C:45:D9:FA:CE:50:3A:83:3E:B8:C3:07:03:6C:CB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB5747F6B93933F08A2ED70 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 50.96.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:74:7f:6b:93:93:3f:08:a2:ed:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=d4b5b8d8-f9a8-47e5-9725-14f97f1716f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9f:46:53:90:e3:3b:40:da:10:c1:a1:18:16: e8:a4:8d:fe:95:d7:1d:46:d6:ae:90:bf:b8:76:19: e9:f8:e9:95:e1:98:12:83:df:0f:0b:c4:c6:b1:14: 67:00:1c:cc:31:26:30:ef:f5:b2:c8:49:06:25:f5: dc:5d:34:2a:d7:31:1f:65:ee:e0:fa:ca:eb:b1:28: ec:db:eb:5f:b7:a5:f8:a7:cf:63:67:f2:70:0d:f2: a8:1e:1e:90:82:2d:41:0f:70:13:30:67:f2:f9:12: 3d:1a:09:40:6f:12:0c:41:57:c9:97:1a:dc:30:7b: 3c:c3:40:55:41:fc:05:d0:de:09:34:3c:29:a1:90: 90:01:f4:d6:4a:b9:e5:d9:91:3f:c6:3a:7b:6b:21: 3d:61:a2:99:c6:32:69:be:e6:39:7b:3d:2f:e1:04: dd:2b:a0:49:3c:45:71:ea:05:d6:ef:19:7f:4f:37: 99:ec:59:62:17:4f:66:8f:7d:fa:33:05:f4:95:17: d6:4a:e8:61:96:bc:9d:93:95:cb:cc:5a:d3:1c:36: 84:61:8a:33:e1:8e:fd:b1:5a:df:9e:73:55:db:26: 96:70:11:5e:21:c7:88:df:d5:1d:04:8d:c2:35:c5: 2b:60:70:90:c0:19:02:0a:7f:5a:2e:f5:28:6d:83: a0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:72:47:99:FF:5C:45:D9:FA:CE:50:3A:83:3E:B8:C3:07:03:6C:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:74:32:de:d7:c3:94:0f:b8:97:3a:ea:9c:16:ab:43:08:ea: c4:74:94:7a:ff:85:5c:3d:5b:e4:38:d5:e1:33:ec:38:39:fb: c9:7f:9d:1c:83:91:8a:46:1e:81:f4:de:7f:95:fe:c2:7d:5c: a4:e4:1d:cd:cc:d6:d5:28:ce:56:13:7d:d4:08:de:85:e6:6c: 0d:7e:f6:31:5e:22:7a:bf:cc:e2:33:23:08:d2:f3:21:04:d2: a4:38:6b:e9:bb:de:85:6f:44:cb:75:43:c2:76:5b:6e:1f:d0: 88:4f:13:ed:14:fe:9e:02:5e:8d:23:f2:d5:2a:07:7d:be:8e: 08:9a:e5:18:9a:97:59:0f:37:a2:e9:26:c2:e5:ae:f5:33:b8: b5:c8:38:50:63:56:0a:7d:fa:76:09:41:cb:d1:6b:ca:e0:66: f1:c0:61:58:d3:f2:ed:c3:8e:fd:e8:3e:bb:3e:16:a9:7f:73: da:ee:aa:2a:fa:11:5b:d3:24:a5:71:c3:e3:9d:db:85:db:2e: 4f:36:3f:1b:a5:47:f1:38:db:9f:b6:ef:9b:e1:e7:fd:86:b1: 9a:fe:41:83:eb:eb:fc:cc:de:7a:19:de:69:ce:64:75:62:e1: a8:de:81:9f:56:ba:22:cf:73:1b:20:d1:87:fb:0e:e2:be:a2: 60:a8:76:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXR/a5OTPwii7XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk ZDRiNWI4ZDgtZjlhOC00N2U1LTk3MjUtMTRmOTdmMTcxNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp9GU5DjO0DaEMGhGBbopI3+ldcdRtaukL+4 dhnp+OmV4ZgSg98PC8TGsRRnABzMMSYw7/WyyEkGJfXcXTQq1zEfZe7g+srrsSjs 2+tft6X4p89jZ/JwDfKoHh6Qgi1BD3ATMGfy+RI9GglAbxIMQVfJlxrcMHs8w0BV QfwF0N4JNDwpoZCQAfTWSrnl2ZE/xjp7ayE9YaKZxjJpvuY5ez0v4QTdK6BJPEVx 6gXW7xl/TzeZ7FliF09mj336MwX0lRfWSuhhlrydk5XLzFrTHDaEYYoz4Y79sVrf nnNV2yaWcBFeIceI39UdBI3CNcUrYHCQwBkCCn9aLvUobYOgRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZyR5n/XEXZ+s5QOoM+uMMHA2zLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGNmMTE3ZjItMTEyYS0z Y2ZiLTkzNjMtNDRlZTk0MDVjNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMmAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJV0Mt7Xw5QPuJc66pwWq0MI6sR0lHr/hVw9W+Q41eEz7Dg5+8l/nRyD kYpGHoH03n+V/sJ9XKTkHc3M1tUozlYTfdQI3oXmbA1+9jFeInq/zOIzIwjS8yEE 0qQ4a+m73oVvRMt1Q8J2W24f0IhPE+0U/p4CXo0j8tUqB32+jgia5Rial1kPN6Lp JsLlrvUzuLXIOFBjVgp9+nYJQcvRa8rgZvHAYVjT8u3Djv3oPrs+Fql/c9ruqir6 EVvTJKVxw+Od24XbLk82PxulR/E425+275vh5/2GsZr+QYPr6/zM3noZ3mnOZHVi 4ajegZ9WuiLPcxsg0Yf7DuK+omCodio= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:48 2025 by rpki-client