$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0de91a36-21ad-3a19-b00b-c7ba59483f14.roa File: 0de91a36-21ad-3a19-b00b-c7ba59483f14.roa (raw, json) Hash identifier: XvMTpZx7DupsbnZNZAuK2piiFeckytL3Wb0uD2o7TVw= Subject key identifier: AF:09:CC:72:01:A8:D7:C0:44:40:CB:64:45:25:F7:14:1A:C5:54:56 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D16586D5EE7005AA04467580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0de91a36-21ad-3a19-b00b-c7ba59483f14.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 50.96.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:86:d5:ee:70:05:aa:04:46:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=db3aa834-1f85-4fb7-9baf-0b740a9895b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:40:85:f5:20:b7:a9:dd:78:c9:4c:de:23: ce:c7:1c:30:f3:40:f7:0a:57:d4:60:51:d8:90:4f: cb:2f:8f:a6:48:d0:40:5f:f6:18:46:67:d0:b1:40: 6e:b9:92:3e:73:32:a0:c6:e4:5c:fc:5c:c7:7a:54: 82:ae:69:ba:10:ef:fe:57:8f:fa:eb:05:88:e2:a5: 21:88:66:cb:02:6c:1d:5b:57:bf:41:67:b9:83:71: 28:7d:dd:2a:f5:15:0e:33:8b:50:b0:e8:21:26:79: 7e:61:82:6d:9a:f9:f1:81:6d:28:1e:64:6c:c8:3e: d0:a4:a5:f6:59:91:97:18:a4:33:31:51:e6:76:b4: 78:8c:5f:22:6b:62:ae:8a:5b:66:f6:83:4d:e7:a5: bc:7a:4f:16:84:5a:e4:9f:a5:a2:aa:cb:0b:17:66: b3:2f:ca:52:c1:95:cd:fe:4e:85:2c:7b:8c:e8:8e: 2f:0c:a5:74:b7:ba:46:f1:5e:6e:a9:23:98:be:65: 91:ed:64:fc:49:54:21:99:b8:4b:d7:41:94:9a:bf: c6:fb:3a:63:6c:f4:b9:d7:6c:58:84:91:eb:b1:bf: 60:ac:09:2f:06:39:5a:ae:6a:e7:e0:3d:5e:f8:37: 99:c3:6d:e9:16:ef:c8:20:bc:f8:ad:43:6b:0b:7a: fe:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:09:CC:72:01:A8:D7:C0:44:40:CB:64:45:25:F7:14:1A:C5:54:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0de91a36-21ad-3a19-b00b-c7ba59483f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f6:53:1d:bf:b3:36:85:17:ed:02:31:41:3e:b8:11:97:5f: ab:82:ee:0c:3d:04:cb:16:d5:5f:57:14:86:3f:85:79:94:fa: 93:51:0c:65:a8:7f:10:a2:3c:0b:79:fe:3f:13:1f:1f:10:c5: d0:15:81:2b:b4:e8:08:d7:89:7f:54:28:d5:66:b4:ef:be:f7: 50:5a:18:58:6c:ca:c2:3b:06:4f:ca:55:b9:8c:9b:61:83:92: 0a:c5:cb:71:2f:1e:00:2a:e1:d1:7c:38:f2:11:03:50:a8:2d: 2f:76:e7:54:98:98:65:ad:95:cf:02:80:c1:7f:ff:ab:3a:df: cc:97:78:17:a3:4d:2f:78:4f:17:2f:92:40:bd:d3:30:f9:9e: ce:31:82:4e:51:82:e8:bf:11:3c:50:6a:cb:1d:d5:4f:9c:e4: 49:0a:e7:e0:94:ba:8c:44:e0:f4:66:90:5b:f8:74:b4:05:e4: c0:0f:31:18:c7:2d:61:29:eb:81:32:59:76:b4:97:eb:42:15: 13:c7:1f:4c:0f:69:94:b3:05:dc:42:4f:f2:63:be:f1:45:a3: 9c:d2:ce:97:6c:d9:51:2e:54:6a:81:1d:23:f4:50:70:12:bf: fa:ff:b3:c0:44:db:cd:d2:6b:ea:79:dd:d8:5a:75:ff:1a:2b: fa:9e:9c:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYbV7nAFqgRGdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZGIzYWE4MzQtMWY4NS00ZmI3LTliYWYtMGI3NDBhOTg5NWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1hAhfUgt6ndeMlM3iPOxxww80D3ClfUYFHY kE/LL4+mSNBAX/YYRmfQsUBuuZI+czKgxuRc/FzHelSCrmm6EO/+V4/66wWI4qUh iGbLAmwdW1e/QWe5g3Eofd0q9RUOM4tQsOghJnl+YYJtmvnxgW0oHmRsyD7QpKX2 WZGXGKQzMVHmdrR4jF8ia2Kuiltm9oNN56W8ek8WhFrkn6WiqssLF2azL8pSwZXN /k6FLHuM6I4vDKV0t7pG8V5uqSOYvmWR7WT8SVQhmbhL10GUmr/G+zpjbPS512xY hJHrsb9grAkvBjlarmrn4D1e+DeZw23pFu/IILz4rUNrC3r+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8JzHIBqNfAREDLZEUl9xQaxVRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGRlOTFhMzYtMjFhZC0z YTE5LWIwMGItYzdiYTU5NDgzZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf2Ux2/szaFF+0CMUE+uBGXX6uC7gw9BMsW1V9XFIY/hXmU+pNRDGWo fxCiPAt5/j8THx8QxdAVgSu06AjXiX9UKNVmtO++91BaGFhsysI7Bk/KVbmMm2GD kgrFy3EvHgAq4dF8OPIRA1CoLS9251SYmGWtlc8CgMF//6s638yXeBejTS94Txcv kkC90zD5ns4xgk5Rgui/ETxQassd1U+c5EkK5+CUuoxE4PRmkFv4dLQF5MAPMRjH LWEp64EyWXa0l+tCFRPHH0wPaZSzBdxCT/JjvvFFo5zSzpds2VEuVGqBHSP0UHAS v/r/s8BE283Sa+p53dhadf8aK/qenB0= -----END CERTIFICATE-----Generated at Mon Jun 16 02:49:27 2025 by rpki-client