$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e435067-01d7-356b-8bb7-954860561b47.roa File: 8e435067-01d7-356b-8bb7-954860561b47.roa (raw, json) Hash identifier: Za60lR6kpmX6t7CNarZHBfjKswmaeDwfR/9HlULJoxM= Subject key identifier: A8:0E:D7:35:A5:86:E3:F8:D8:DA:2C:58:77:D8:7E:7D:4B:03:16:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA21594DCF844E8B498680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e435067-01d7-356b-8bb7-954860561b47.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 50.96.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:21:59:4d:cf:84:4e:8b:49:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=ced5ff7b-c61c-4456-9d8f-b653051c08a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:46:f0:f7:a5:5d:c0:a5:f7:d3:9a:ff:e4: e9:d5:cd:c5:8b:e0:f2:bc:88:f7:fd:12:ff:cf:15: 6a:ce:57:2a:bb:e4:16:8f:33:6d:80:69:c8:fa:77: bd:13:a6:93:fe:c2:30:a2:21:18:99:99:12:cf:ca: 36:a9:50:60:03:fa:b3:47:33:3d:a2:ba:a6:5b:d0: f6:c2:f9:4f:7a:34:1b:f8:11:48:ba:e5:d1:b4:28: f3:eb:40:5e:d1:e0:2e:43:b9:e5:1b:bf:d7:cf:bd: d8:24:c7:be:8f:c9:ab:02:f8:a8:a6:f3:65:10:fc: fe:38:5c:cc:b7:51:ea:8c:55:38:2e:49:7c:4b:d1: 31:fe:2d:84:7b:2c:ca:96:e6:41:0b:99:d6:bb:2a: ff:f0:47:20:25:23:68:c7:1a:8d:0f:b8:77:b0:7e: b6:ea:8a:6c:2d:d8:81:38:a5:4c:03:0b:6f:d9:c5: 7e:4e:3a:0c:09:d8:d8:e6:7b:52:d3:04:3d:3f:9a: a0:45:5e:57:93:09:3c:5e:0c:7f:30:21:4a:4b:01: 13:5d:8a:1b:03:c4:23:94:15:a6:ce:e6:3d:78:8e: d1:d2:e4:3e:bc:91:73:9b:9f:55:c2:2c:d0:6c:78: 3f:9f:96:77:de:65:aa:6a:ba:bf:e1:69:43:c6:7b: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0E:D7:35:A5:86:E3:F8:D8:DA:2C:58:77:D8:7E:7D:4B:03:16:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e435067-01d7-356b-8bb7-954860561b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d9:c1:4d:de:40:fb:74:22:28:76:94:92:9e:40:3b:a5:af: 9e:3c:55:e4:65:df:5f:2c:3c:42:90:6c:18:73:1d:80:ae:2d: fb:0c:d5:6d:5f:3e:59:a5:7e:1a:38:ae:ad:bc:24:c4:68:a0: d2:4c:08:0f:45:d7:6d:4f:e1:0d:37:8e:70:07:20:37:95:c3: 79:c3:62:b4:f7:ce:27:bb:74:fe:d7:eb:27:60:c7:13:ea:c2: ea:0d:7e:91:b7:97:83:24:8d:9c:b3:37:1b:a2:14:ae:c9:36: a1:cd:4e:64:b7:86:e1:0c:4f:0e:4d:15:a9:16:ec:4d:bc:4f: fc:dc:3e:0d:92:06:e1:c7:04:83:52:ba:4d:6a:21:84:5e:40: f4:5a:01:70:04:33:b0:a0:bd:a3:87:5e:51:9d:69:ae:89:02: 80:a1:f3:e2:0e:06:a8:98:d5:c8:b6:ad:db:d5:49:0c:cb:df: 07:cc:dc:3d:6f:98:52:41:48:5a:88:c6:e2:ec:d7:4f:6f:8d: 15:94:a6:fa:d4:ae:72:bd:ab:c4:e8:93:17:7d:0a:74:6b:37: d3:5a:01:d8:c1:18:b1:44:44:ae:a6:b8:48:ea:4e:f8:33:03: a0:2a:c0:49:1f:94:ed:da:5c:a1:45:8d:95:e6:67:da:93:96: de:0b:05:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiFZTc+ETotJhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk Y2VkNWZmN2ItYzYxYy00NDU2LTlkOGYtYjY1MzA1MWMwOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwJG8PelXcCl99Oa/+Tp1c3Fi+DyvIj3/RL/ zxVqzlcqu+QWjzNtgGnI+ne9E6aT/sIwoiEYmZkSz8o2qVBgA/qzRzM9orqmW9D2 wvlPejQb+BFIuuXRtCjz60Be0eAuQ7nlG7/Xz73YJMe+j8mrAviopvNlEPz+OFzM t1HqjFU4Lkl8S9Ex/i2EeyzKluZBC5nWuyr/8EcgJSNoxxqND7h3sH626opsLdiB OKVMAwtv2cV+TjoMCdjY5ntS0wQ9P5qgRV5Xkwk8Xgx/MCFKSwETXYobA8QjlBWm zuY9eI7R0uQ+vJFzm59VwizQbHg/n5Z33mWqarq/4WlDxnt4qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgO1zWlhuP42NosWHfYfn1LAxYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGU0MzUwNjctMDFkNy0z NTZiLThiYjctOTU0ODYwNTYxYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjZwU3eQPt0Iih2lJKeQDulr548VeRl318sPEKQbBhzHYCuLfsM1W1f Plmlfho4rq28JMRooNJMCA9F121P4Q03jnAHIDeVw3nDYrT3zie7dP7X6ydgxxPq wuoNfpG3l4MkjZyzNxuiFK7JNqHNTmS3huEMTw5NFakW7E28T/zcPg2SBuHHBINS uk1qIYReQPRaAXAEM7CgvaOHXlGdaa6JAoCh8+IOBqiY1ci2rdvVSQzL3wfM3D1v mFJBSFqIxuLs109vjRWUpvrUrnK9q8Tokxd9CnRrN9NaAdjBGLFERK6muEjqTvgz A6AqwEkflO3aXKFFjZXmZ9qTlt4LBRk= -----END CERTIFICATE-----Generated at Sun Jun 15 12:26:47 2025 by rpki-client