$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38934aa5-b219-3bc3-8233-4a3a4406ecd1.roa File: 38934aa5-b219-3bc3-8233-4a3a4406ecd1.roa (raw, json) Hash identifier: Pt7NspPdk/jJRG8u31uauzoBuxUQH0PSeB0MeijvVB8= Subject key identifier: 97:A5:C7:E9:04:65:EB:91:17:D7:71:7D:15:31:E8:79:A2:53:C8:C6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A185ADD0B16447417E700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38934aa5-b219-3bc3-8233-4a3a4406ecd1.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 50.96.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:18:5a:dd:0b:16:44:74:17:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=540d26e2-d0c2-4805-a25e-37dea0671c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:96:c7:16:99:16:2c:c8:19:85:82:1b:f3:4a: c5:bf:7f:26:42:f4:a8:7d:21:a1:1b:c7:b8:e8:17: 9b:59:84:54:82:0e:2e:1b:7f:ba:b5:e9:0f:e6:1c: 7d:fe:ea:17:f8:78:24:74:bd:6f:30:3a:69:98:0a: 7c:a7:75:cf:4a:d5:71:21:a2:05:42:26:82:56:08: 50:fe:c1:ae:28:d9:86:78:b8:9b:c3:50:da:cb:40: 28:61:4d:d0:00:5f:15:44:ec:0e:69:71:c4:26:de: 28:6a:76:54:59:c6:0c:3e:8b:9c:03:f6:dd:c6:8e: ff:51:1b:35:9c:e5:44:7c:93:86:60:97:f4:96:ef: 4e:a2:e6:7e:e7:42:9c:17:60:b3:1c:ca:e9:26:d2: b7:9f:d8:8d:1b:a3:fd:fd:bd:bb:a3:d2:c8:15:c7: 71:e4:80:21:4b:f3:ff:8c:f6:4d:34:2b:6b:02:7d: 09:fb:d4:ed:86:07:4b:c2:27:20:7f:6d:da:0a:99: 4e:8a:a7:b4:66:c3:32:1f:35:4a:dd:42:d0:8f:18: 35:3d:b8:a2:a5:87:f0:85:40:d8:35:e9:f0:7a:4b: d9:ae:fd:52:a5:11:83:3b:4e:52:ff:51:c5:11:0a: 50:48:e7:70:4c:8a:09:50:d6:e3:8b:64:e3:ba:94: 1d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A5:C7:E9:04:65:EB:91:17:D7:71:7D:15:31:E8:79:A2:53:C8:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38934aa5-b219-3bc3-8233-4a3a4406ecd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:26:9d:f2:dc:13:db:b2:14:67:d7:d8:55:92:d5:41:04:40: b4:ca:a3:b7:8c:e4:ee:9b:ea:3b:56:51:d9:9e:d3:04:82:7d: f6:b3:d1:c9:9f:ba:7a:6f:b3:49:f5:f3:81:74:3b:c5:4b:79: 17:cf:cd:3d:e8:7f:b1:7b:e9:24:47:43:1f:7e:2b:ff:91:2f: 9a:68:4d:c8:92:80:fd:21:a7:4b:3c:b0:c2:f9:4c:34:65:fa: 0c:16:af:ce:12:f6:b7:63:fe:03:85:93:91:7f:9e:52:25:8a: 92:d4:76:8d:3e:9e:3c:a9:cd:f8:ab:1a:af:df:84:e2:98:17: 6d:7b:c1:ce:4a:ee:18:54:cd:1d:38:f0:0b:23:f3:14:43:c8: 7f:5b:3e:25:02:e6:9f:3b:40:14:a2:25:ce:03:ce:3c:9b:67: e3:c8:51:67:08:a9:08:74:2f:6a:46:d9:4e:14:66:39:ae:4b: d8:64:0b:27:fc:30:5f:4a:69:f1:5b:74:e0:e6:a3:ec:4a:0e: b7:c0:3c:f4:2f:f8:38:76:fc:dd:db:1e:90:3f:0b:93:5d:25: 8c:07:79:d0:f2:47:f4:d0:eb:dc:ed:75:e2:4d:93:09:6b:29: 2a:29:bf:80:c0:ce:d2:c4:40:b2:97:64:13:56:6c:25:bd:13: e0:d6:66:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhha3QsWRHQX5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NTQwZDI2ZTItZDBjMi00ODA1LWEyNWUtMzdkZWEwNjcxYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpbHFpkWLMgZhYIb80rFv38mQvSofSGhG8e4 6BebWYRUgg4uG3+6tekP5hx9/uoX+HgkdL1vMDppmAp8p3XPStVxIaIFQiaCVghQ /sGuKNmGeLibw1Day0AoYU3QAF8VROwOaXHEJt4oanZUWcYMPoucA/bdxo7/URs1 nOVEfJOGYJf0lu9OouZ+50KcF2CzHMrpJtK3n9iNG6P9/b27o9LIFcdx5IAhS/P/ jPZNNCtrAn0J+9TthgdLwicgf23aCplOiqe0ZsMyHzVK3ULQjxg1PbiipYfwhUDY NenwekvZrv1SpRGDO05S/1HFEQpQSOdwTIoJUNbji2TjupQdNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJelx+kEZeuRF9dxfRUx6HmiU8jGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzg5MzRhYTUtYjIxOS0z YmMzLTgyMzMtNGEzYTQ0MDZlY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQmnfLcE9uyFGfX2FWS1UEEQLTKo7eM5O6b6jtWUdme0wSCffaz0cmf unpvs0n184F0O8VLeRfPzT3of7F76SRHQx9+K/+RL5poTciSgP0hp0s8sML5TDRl +gwWr84S9rdj/gOFk5F/nlIlipLUdo0+njypzfirGq/fhOKYF217wc5K7hhUzR04 8Asj8xRDyH9bPiUC5p87QBSiJc4DzjybZ+PIUWcIqQh0L2pG2U4UZjmuS9hkCyf8 MF9KafFbdODmo+xKDrfAPPQv+Dh2/N3bHpA/C5NdJYwHedDyR/TQ69ztdeJNkwlr KSopv4DAztLEQLKXZBNWbCW9E+DWZog= -----END CERTIFICATE-----Generated at Mon Apr 28 16:15:44 2025 by rpki-client