$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa File: 8cf117f2-112a-3cfb-9363-44ee9405c70d.roa (raw, json) Hash identifier: m4kpKQjZXghAaBtsITEMfHwj6ykoqOz1iKrhjL2MNeU= Subject key identifier: C2:AB:D5:70:69:AF:A7:88:2E:0C:56:71:AC:B1:5B:F6:45:75:BB:26 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7166C6F51875DBC4E0D280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 50.96.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:66:c6:f5:18:75:db:c4:e0:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=323b46d8-7b64-4b8a-a623-5451285c7d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:79:f3:b6:d5:b4:75:38:31:bc:70:78:f3:77: aa:2b:b9:df:13:4f:6b:bd:26:64:6c:50:90:ae:77: e9:52:62:18:bc:db:b5:3e:39:42:f5:a8:67:4e:a0: c5:86:3a:9e:42:31:f1:87:9d:3d:27:c0:f1:91:f4: d0:be:9d:a9:17:e7:f0:78:00:30:d8:1c:5c:5d:8f: 51:ae:87:ce:7c:e5:a6:7b:4f:57:11:22:0c:87:22: a6:1a:f1:38:19:83:92:df:30:87:06:f9:2b:20:16: c9:94:c7:e8:f7:4f:7c:06:3e:8b:fe:fa:c4:66:ef: 8a:b4:dc:ea:bd:fe:69:47:73:cc:35:5b:3d:d2:33: dd:06:1c:fa:62:8d:85:13:f2:f9:48:2c:44:4b:c4: 37:e7:a3:52:ec:cc:44:2b:c3:a5:ad:0f:48:46:1b: 25:45:7e:7e:69:ef:b1:f4:e2:5b:ab:b6:09:85:e6: e5:35:b8:cd:9c:10:f2:18:13:61:44:43:cb:f9:fb: 52:6d:53:61:f8:1a:6a:52:5b:be:d2:b0:42:74:74: 4b:94:a5:ec:ec:48:d0:02:fb:19:57:6b:fa:08:dc: 06:bb:8b:58:df:0a:fb:45:d5:7d:89:50:f4:e0:ae: 6d:c7:d9:13:e0:c8:2d:ae:83:d3:26:dd:d4:54:e1: b8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AB:D5:70:69:AF:A7:88:2E:0C:56:71:AC:B1:5B:F6:45:75:BB:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:fb:75:07:3a:92:8c:3c:00:ce:c6:6b:64:94:3d:15:e3:7f: 36:22:31:18:cb:a7:da:8f:72:07:50:80:d9:fb:7c:39:82:90: 27:9e:28:f6:2a:03:fe:5a:f7:f5:6a:4e:31:dc:89:41:d1:3a: 96:10:41:40:eb:dc:bb:7d:91:7f:ba:d7:cb:e6:1e:65:41:85: 17:70:6f:49:f1:25:39:09:35:32:6b:70:89:00:9f:6f:d3:5a: 58:29:38:ab:1b:88:be:66:6c:da:fe:5b:3a:a3:a1:31:cf:ff: 19:72:58:87:ca:da:7d:58:6c:97:33:6e:6d:a2:94:41:cc:c8: 44:0f:e5:61:0e:f6:df:94:e6:f4:9c:b6:ae:2a:5c:d3:9f:41: bd:68:c6:c5:e1:ba:35:21:48:6f:aa:17:df:44:6f:99:0c:e8: 98:89:d4:f5:22:f0:12:8e:39:f2:c4:1f:c8:43:2a:f6:4d:43: 25:31:78:98:a9:17:a8:00:9e:aa:a8:3f:5f:78:7a:bf:11:92: 2d:bc:7e:dd:2c:cf:94:90:8a:fe:06:cb:ea:a8:65:1e:45:01: d9:61:a6:9f:ef:47:f0:6e:a3:85:58:29:42:1b:07:90:25:51: 93:0b:e2:f1:8d:a9:1a:d2:b3:e6:87:9a:c8:d7:c2:cc:ae:9f: 05:26:43:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWbG9Rh128Tg0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MzIzYjQ2ZDgtN2I2NC00YjhhLWE2MjMtNTQ1MTI4NWM3ZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnnzttW0dTgxvHB483eqK7nfE09rvSZkbFCQ rnfpUmIYvNu1PjlC9ahnTqDFhjqeQjHxh509J8DxkfTQvp2pF+fweAAw2BxcXY9R rofOfOWme09XESIMhyKmGvE4GYOS3zCHBvkrIBbJlMfo9098Bj6L/vrEZu+KtNzq vf5pR3PMNVs90jPdBhz6Yo2FE/L5SCxES8Q356NS7MxEK8OlrQ9IRhslRX5+ae+x 9OJbq7YJheblNbjNnBDyGBNhREPL+ftSbVNh+BpqUlu+0rBCdHRLlKXs7EjQAvsZ V2v6CNwGu4tY3wr7RdV9iVD04K5tx9kT4MgtroPTJt3UVOG4HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKr1XBpr6eILgxWcayxW/ZFdbsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGNmMTE3ZjItMTEyYS0z Y2ZiLTkzNjMtNDRlZTk0MDVjNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMmAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF77dQc6kow8AM7Ga2SUPRXjfzYiMRjLp9qPcgdQgNn7fDmCkCeeKPYq A/5a9/VqTjHciUHROpYQQUDr3Lt9kX+618vmHmVBhRdwb0nxJTkJNTJrcIkAn2/T WlgpOKsbiL5mbNr+WzqjoTHP/xlyWIfK2n1YbJczbm2ilEHMyEQP5WEO9t+U5vSc tq4qXNOfQb1oxsXhujUhSG+qF99Eb5kM6JiJ1PUi8BKOOfLEH8hDKvZNQyUxeJip F6gAnqqoP194er8Rki28ft0sz5SQiv4Gy+qoZR5FAdlhpp/vR/Buo4VYKUIbB5Al UZML4vGNqRrSs+aHmsjXwsyunwUmQ4g= -----END CERTIFICATE-----Generated at Fri Mar 14 13:52:38 2025 by rpki-client