$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a73270c2-ed89-3bd8-9d73-d414a1b46046.roa File: a73270c2-ed89-3bd8-9d73-d414a1b46046.roa (raw, json) Hash identifier: PUuEB/2hCW6tGQVzMN49d4VEi+Gpi1lWOYgBcVo7CxA= Subject key identifier: 57:6D:A3:10:21:B9:9B:D9:33:19:95:65:CE:A9:6F:A8:6F:64:DC:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA2A81AEDB9FF72050C140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a73270c2-ed89-3bd8-9d73-d414a1b46046.roa Signing time: Thu 20 Feb 2025 18:15:22 +0000 ROA not before: Thu 20 Feb 2025 18:15:22 +0000 ROA not after: Wed 21 May 2025 17:15:22 +0000 asID: 7029 IP address blocks: 50.96.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:2a:81:ae:db:9f:f7:20:50:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:22 2025 GMT Not After : May 21 17:15:22 2025 GMT Subject: CN=5b15ee28-3f7b-483f-aeb6-7a94c32336a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d4:1e:23:fc:33:5f:ca:d4:4a:37:99:7e:69: a6:ea:f5:37:4d:36:a9:44:f1:9b:11:ef:0b:18:29: a5:8b:5c:78:e3:73:c3:69:16:c8:09:b9:21:2f:7a: 71:86:a5:79:4b:88:c5:27:16:34:9d:eb:ac:8d:ee: 79:19:6a:f2:f4:cc:92:f4:d6:11:40:c7:0d:31:ca: 3f:1d:57:4b:6e:49:62:2c:2a:6b:f8:f5:46:7e:e9: 7e:22:bc:dc:97:ee:f3:b4:d3:c1:4f:f9:90:14:96: 98:b5:0a:ab:19:8b:8b:b7:5f:4f:ea:d8:26:d8:81: 38:bb:09:65:ad:94:57:a3:09:44:98:a6:f9:14:93: 19:58:f5:35:26:f9:58:3a:c4:81:be:ba:ff:79:e4: 75:e8:ea:e2:24:b8:6f:e4:27:f3:1c:6b:55:c3:b8: 42:28:70:e1:19:43:20:15:29:67:8b:01:3a:20:39: fa:90:7e:a0:e7:75:73:18:8d:ef:36:28:dd:e8:4f: 27:29:a5:36:fd:b7:8c:1f:6b:b4:42:88:20:ee:5a: b6:9e:e3:3c:5f:2e:7f:9b:ee:bd:e9:e7:38:33:fc: ab:42:4f:18:67:36:b1:e0:75:00:d9:25:78:89:ab: 5a:4e:b9:7b:59:e0:e3:46:c6:5a:6a:68:43:af:90: 6c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6D:A3:10:21:B9:9B:D9:33:19:95:65:CE:A9:6F:A8:6F:64:DC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a73270c2-ed89-3bd8-9d73-d414a1b46046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:06:06:e2:d9:83:02:3c:96:e2:42:14:d3:5d:83:8f:bb:9e: cc:6e:6b:a3:29:a9:e1:b7:17:18:64:b9:eb:7c:9c:8e:86:9a: 82:ea:24:1b:5e:e1:08:bf:5c:3b:b9:0d:b2:33:b1:9b:a9:73: a9:cc:ef:b4:f5:bb:49:b7:20:62:40:60:55:02:9f:b1:55:bf: 97:d1:d1:6c:69:60:08:2d:b6:70:b4:90:f2:d5:62:37:c6:6d: 4d:0e:a0:3d:70:de:91:1a:80:0b:7b:12:9c:e3:13:bf:a9:f8: 35:98:27:e9:22:d6:10:05:00:c3:7d:f4:a5:05:b8:0b:8f:e4: 9e:48:4f:33:ce:a0:74:80:ee:3a:4d:2c:05:a1:fb:a9:91:22: 1f:91:f1:93:cf:34:24:f2:75:6b:5d:c1:c4:a5:a1:79:4a:b4: f3:f1:dc:1e:4b:f5:34:b6:16:8c:4d:b5:a3:77:c1:36:61:11: 60:6c:2e:fb:c8:9c:d9:d6:2b:0f:de:be:63:1c:a2:3e:87:d8: 85:80:cc:0c:ff:4e:c1:3c:b5:60:1c:41:e8:73:65:f3:ad:c6: 2c:b8:0d:ae:0d:35:b1:c7:5c:2f:27:db:4d:8f:67:73:2d:e0: 32:8b:59:20:b5:92:e9:6e:ac:d8:de:07:62:5a:f4:ac:12:e0: e3:42:fc:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqiqBrtuf9yBQwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTUyMloXDTI1MDUyMTE3MTUyMlowLzEtMCsGA1UEAxMk NWIxNWVlMjgtM2Y3Yi00ODNmLWFlYjYtN2E5NGMzMjMzNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdQeI/wzX8rUSjeZfmmm6vU3TTapRPGbEe8L GCmli1x443PDaRbICbkhL3pxhqV5S4jFJxY0neusje55GWry9MyS9NYRQMcNMco/ HVdLbkliLCpr+PVGful+Irzcl+7ztNPBT/mQFJaYtQqrGYuLt19P6tgm2IE4uwll rZRXowlEmKb5FJMZWPU1JvlYOsSBvrr/eeR16OriJLhv5CfzHGtVw7hCKHDhGUMg FSlniwE6IDn6kH6g53VzGI3vNijd6E8nKaU2/beMH2u0Qogg7lq2nuM8Xy5/m+69 6ec4M/yrQk8YZzax4HUA2SV4iataTrl7WeDjRsZaamhDr5BsPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdtoxAhuZvZMxmVZc6pb6hvZNyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTczMjcwYzItZWQ4OS0z YmQ4LTlkNzMtZDQxNGExYjQ2MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmB2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAGBuLZgwI8luJCFNNdg4+7nsxua6MpqeG3Fxhkuet8nI6GmoLqJBte 4Qi/XDu5DbIzsZupc6nM77T1u0m3IGJAYFUCn7FVv5fR0WxpYAgttnC0kPLVYjfG bU0OoD1w3pEagAt7EpzjE7+p+DWYJ+ki1hAFAMN99KUFuAuP5J5ITzPOoHSA7jpN LAWh+6mRIh+R8ZPPNCTydWtdwcSloXlKtPPx3B5L9TS2FoxNtaN3wTZhEWBsLvvI nNnWKw/evmMcoj6H2IWAzAz/TsE8tWAcQehzZfOtxiy4Da4NNbHHXC8n202PZ3Mt 4DKLWSC1kulurNjeB2Ja9KwS4ONC/DM= -----END CERTIFICATE-----Generated at Sun Apr 6 01:09:39 2025 by rpki-client