$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa File: 4ece68d6-689f-306d-aad5-aefc8447de5f.roa (raw, json) Hash identifier: 3GCZ3YYUwJ0ouX7CH2ZChdoN5qSNtfwolIvB16NChv4= Subject key identifier: D6:BB:A0:79:F4:5A:E4:CF:F7:79:BC:AC:E3:DF:8E:12:8B:07:3D:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D715F1B7A78BF3D04DB6C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 50.96.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:5f:1b:7a:78:bf:3d:04:db:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=f0f3a16f-f968-4e05-a290-15931f0c36c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:79:0c:ed:33:15:c1:45:7d:5c:81:58:d7:64: 6f:03:cd:45:69:8b:4b:40:dd:06:80:ac:c6:fb:3f: ea:2f:89:4f:0a:e7:34:89:21:5e:51:89:85:a6:65: 8b:e9:1e:42:a9:8c:35:4c:61:10:5f:e2:90:43:30: 6b:2a:5d:46:87:3e:17:c3:a7:b1:bd:79:55:7d:21: a9:38:53:3f:7d:95:e8:e0:63:5c:34:1c:80:49:dd: 6d:1e:80:28:f0:68:d5:4a:ad:9c:22:d4:6f:f0:a0: 84:c1:f5:4b:15:a9:11:f3:ab:eb:77:87:bc:b2:8b: 25:51:62:06:bf:0c:14:f0:76:8e:b2:85:49:97:59: 93:9f:ac:f6:ff:f5:60:9e:7b:8a:49:4f:4e:b3:0e: 98:12:a0:c6:ab:23:45:24:a1:b6:a4:db:08:ef:58: d9:26:50:d6:25:12:8d:29:59:93:46:33:e7:68:5f: 21:64:20:1b:0a:32:41:d8:12:af:95:04:6b:35:c4: a5:50:d6:b5:0f:52:c0:7c:05:36:4a:64:fc:17:5e: d6:f4:af:4b:b7:4f:42:f3:e4:3b:44:c5:2e:3e:8a: ad:0c:de:7e:0c:01:e5:f2:ab:40:35:85:ca:cb:49: b9:c8:1b:0c:35:8b:a9:a1:49:e4:02:ed:42:24:14: f7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BB:A0:79:F4:5A:E4:CF:F7:79:BC:AC:E3:DF:8E:12:8B:07:3D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:17:3a:73:88:a5:ce:51:0a:e0:fc:d4:20:c5:05:c4:57:96: 14:bc:5b:df:72:bb:6c:02:b0:19:a9:cd:3c:f4:a5:c2:36:43: 9e:a6:57:ca:6d:3b:70:b3:8f:2e:6b:ea:e6:86:dc:69:18:03: 79:35:d4:f3:d4:24:fa:55:06:68:1a:5c:c9:a7:22:73:a3:45: 9e:02:9b:be:19:50:c4:95:60:09:dd:e7:fc:3b:6c:f4:99:1e: 78:98:c4:d4:8b:e8:6c:89:b5:47:4d:dc:f9:25:29:e6:e0:89: f2:91:84:9f:72:38:ea:b1:e8:4e:cf:7e:54:f7:c8:f3:60:80: b3:7f:42:b8:ec:9d:02:a6:06:73:ab:9c:e5:92:a3:3e:8b:4c: dd:23:a8:28:e1:3a:20:ab:b1:97:70:8d:40:7f:f2:c8:40:f5: 85:77:96:3c:c3:5d:94:2c:31:3c:38:1b:16:e2:c3:46:7a:77: 82:e9:c3:61:a2:6d:69:ec:12:e0:be:e4:4a:4e:06:61:cd:b1: 9e:67:a6:68:5f:f3:cf:88:bb:55:86:59:bb:68:3a:54:1b:d6: 93:2f:07:91:8a:cb:60:52:2a:3f:db:22:6e:67:34:c1:38:fb: ed:48:4a:6b:d2:8d:09:45:65:5c:31:43:95:9d:f9:da:c0:79: d5:b7:d1:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcV8beni/PQTbbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZjBmM2ExNmYtZjk2OC00ZTA1LWEyOTAtMTU5MzFmMGMzNmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnkM7TMVwUV9XIFY12RvA81FaYtLQN0GgKzG +z/qL4lPCuc0iSFeUYmFpmWL6R5CqYw1TGEQX+KQQzBrKl1Ghz4Xw6exvXlVfSGp OFM/fZXo4GNcNByASd1tHoAo8GjVSq2cItRv8KCEwfVLFakR86vrd4e8soslUWIG vwwU8HaOsoVJl1mTn6z2//VgnnuKSU9Osw6YEqDGqyNFJKG2pNsI71jZJlDWJRKN KVmTRjPnaF8hZCAbCjJB2BKvlQRrNcSlUNa1D1LAfAU2SmT8F17W9K9Lt09C8+Q7 RMUuPoqtDN5+DAHl8qtANYXKy0m5yBsMNYupoUnkAu1CJBT3XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNa7oHn0WuTP93m8rOPfjhKLBz2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGVjZTY4ZDYtNjg5Zi0z MDZkLWFhZDUtYWVmYzg0NDdkZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8XOnOIpc5RCuD81CDFBcRXlhS8W99yu2wCsBmpzTz0pcI2Q56mV8pt O3Czjy5r6uaG3GkYA3k11PPUJPpVBmgaXMmnInOjRZ4Cm74ZUMSVYAnd5/w7bPSZ HniYxNSL6GyJtUdN3PklKebgifKRhJ9yOOqx6E7PflT3yPNggLN/QrjsnQKmBnOr nOWSoz6LTN0jqCjhOiCrsZdwjUB/8shA9YV3ljzDXZQsMTw4Gxbiw0Z6d4Lpw2Gi bWnsEuC+5EpOBmHNsZ5npmhf88+Iu1WGWbtoOlQb1pMvB5GKy2BSKj/bIm5nNME4 ++1ISmvSjQlFZVwxQ5Wd+drAedW30Sc= -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:54 2025 by rpki-client