$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9714679-7e23-3e0c-a9ac-644ebe6e1511.roa File: c9714679-7e23-3e0c-a9ac-644ebe6e1511.roa (raw, json) Hash identifier: Mo5oqooskJ8iKWJYmvDe0L67NGJf6Qkjw0aO6bigNi0= Subject key identifier: CD:56:6F:2B:11:9E:3B:3D:24:3A:2C:F6:B0:89:6B:B1:F2:E4:49:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21118889D3992266D107780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9714679-7e23-3e0c-a9ac-644ebe6e1511.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 50.96.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:18:88:9d:39:92:26:6d:10:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=6a23b1df-9347-4994-a14a-ab126c664105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d4:6b:a7:91:d5:76:6e:8c:a7:2f:a4:8d:d0: 5c:b5:c2:37:88:0a:9a:f7:51:f8:10:b0:7d:26:fd: dd:b9:a4:df:5b:d4:7b:17:cf:f1:bf:e9:36:72:b2: ca:d6:eb:95:9e:73:bd:b0:18:c0:07:95:83:0e:fb: 06:3f:8a:b5:5d:8a:b4:06:be:a9:26:34:83:cc:d1: fa:f8:8c:63:a1:ca:8e:87:dd:d5:32:3d:90:4f:4d: 44:17:28:ef:63:f5:7e:c7:3f:c1:f4:81:f4:b0:da: 77:ee:ac:bd:69:de:ba:74:ae:a3:d6:f8:88:9a:8d: b1:57:02:55:39:40:0f:20:81:ff:4e:45:90:38:d9: d2:3d:5b:89:79:67:72:30:4b:d8:b7:0e:2e:3d:fd: 0e:c4:db:da:06:3f:8b:e6:ce:58:b1:c9:c3:6c:4c: bd:e0:61:7b:94:ab:10:fa:ef:b8:e5:67:16:99:c5: b3:ca:18:0e:f5:d1:36:3d:23:ff:2d:4e:14:e7:2c: e6:ae:c9:f0:74:1d:15:70:4b:e6:9e:c7:a1:fe:9f: 71:e1:79:27:ad:97:ac:70:e7:91:e5:cb:ac:d9:c3: b4:24:f0:25:5e:3a:91:65:bb:f9:e6:f7:c1:cb:8b: 3e:b5:78:49:19:73:92:a1:f4:49:d3:1d:88:4e:eb: 62:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:56:6F:2B:11:9E:3B:3D:24:3A:2C:F6:B0:89:6B:B1:F2:E4:49:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9714679-7e23-3e0c-a9ac-644ebe6e1511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c3:a0:11:4e:54:a0:2c:62:16:49:0a:c4:f9:8d:90:22:82: 09:76:9b:9a:67:34:16:45:f8:5e:c5:5c:99:d6:1b:62:33:f6: 84:33:9c:66:ab:ed:8c:2f:5d:11:14:c2:b0:f5:7f:b0:26:e8: 36:80:4f:ba:26:a5:93:85:af:ba:cb:46:2d:ce:14:3c:61:6d: e7:09:ff:b1:89:90:50:24:10:3d:c1:10:f7:00:38:bc:e1:45: 9f:dc:b5:59:69:dd:a3:42:ed:fd:b8:9d:1a:d4:25:bb:36:45: 41:d3:a3:aa:08:4a:8e:2f:17:2d:41:9a:6d:6b:cc:67:c9:9f: e3:d9:5a:32:4b:b4:99:41:60:c6:78:f5:f2:f4:18:7d:b8:4a: 69:a0:fb:59:1d:ac:7d:51:13:dd:a3:24:f6:ae:93:ad:cd:0b: fc:c0:4a:4c:f7:33:25:b0:fd:65:1a:58:95:6f:eb:6a:2e:47: 09:9a:14:26:b5:7f:12:d3:74:e8:1a:da:15:bc:98:ce:72:6e: ed:83:71:79:14:41:1b:f3:74:ce:cd:b2:76:4d:a5:2c:1d:c1: c3:70:38:81:3d:4f:5a:0e:91:15:44:c2:fb:38:08:8b:6b:aa: 7e:e6:5b:5c:88:95:26:d4:8d:b2:4b:4a:ca:03:17:33:18:e2: c1:aa:06:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSERiInTmSJm0Qd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NmEyM2IxZGYtOTM0Ny00OTk0LWExNGEtYWIxMjZjNjY0MTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39Rrp5HVdm6Mpy+kjdBctcI3iAqa91H4ELB9 Jv3duaTfW9R7F8/xv+k2crLK1uuVnnO9sBjAB5WDDvsGP4q1XYq0Br6pJjSDzNH6 +IxjocqOh93VMj2QT01EFyjvY/V+xz/B9IH0sNp37qy9ad66dK6j1viImo2xVwJV OUAPIIH/TkWQONnSPVuJeWdyMEvYtw4uPf0OxNvaBj+L5s5YscnDbEy94GF7lKsQ +u+45WcWmcWzyhgO9dE2PSP/LU4U5yzmrsnwdB0VcEvmnseh/p9x4XknrZescOeR 5cus2cO0JPAlXjqRZbv55vfBy4s+tXhJGXOSofRJ0x2ITutikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1WbysRnjs9JDos9rCJa7Hy5EkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzk3MTQ2NzktN2UyMy0z ZTBjLWE5YWMtNjQ0ZWJlNmUxNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7DoBFOVKAsYhZJCsT5jZAiggl2m5pnNBZF+F7FXJnWG2Iz9oQznGar 7YwvXREUwrD1f7Am6DaAT7ompZOFr7rLRi3OFDxhbecJ/7GJkFAkED3BEPcAOLzh RZ/ctVlp3aNC7f24nRrUJbs2RUHTo6oISo4vFy1Bmm1rzGfJn+PZWjJLtJlBYMZ4 9fL0GH24Smmg+1kdrH1RE92jJPauk63NC/zASkz3MyWw/WUaWJVv62ouRwmaFCa1 fxLTdOga2hW8mM5ybu2DcXkUQRvzdM7NsnZNpSwdwcNwOIE9T1oOkRVEwvs4CItr qn7mW1yIlSbUjbJLSsoDFzMY4sGqBjk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:11 2025 by rpki-client