$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa240ee4-f6b4-357b-954e-d09a4875efda.roa File: aa240ee4-f6b4-357b-954e-d09a4875efda.roa (raw, json) Hash identifier: ONWEu/rozrgjw78nDH1pMqZY4KziDFTxgFW+MPrWjUM= Subject key identifier: 41:B7:70:D2:F2:8D:04:D6:55:D6:B6:B7:72:BB:39:B9:FB:FC:FC:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA09D08587299DE41F9180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa240ee4-f6b4-357b-954e-d09a4875efda.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 50.96.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:09:d0:85:87:29:9d:e4:1f:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=7c8647a4-2761-4378-95fc-7a568625cb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:34:a0:32:97:de:3d:6b:7a:3e:af:c0:29:21: 71:ec:35:b3:6f:19:4b:1b:35:eb:cb:17:52:6d:f8: 06:eb:64:ac:01:97:bb:4d:b3:cb:72:15:0e:d3:5d: bf:16:bf:2a:61:ca:e9:00:84:3c:d1:8d:63:8e:3d: cf:eb:6e:98:33:99:c6:b9:2c:5d:bd:8c:57:e0:fc: 7c:07:3a:30:85:df:58:f2:53:bd:e9:02:f4:76:8c: 6c:15:9e:af:b3:44:62:29:a4:7f:81:12:a5:6d:36: 05:d4:8f:5c:09:f1:1e:74:b7:00:a6:31:11:05:9e: 11:8c:f8:31:76:8c:df:af:22:5b:a0:37:85:d9:d8: fa:8f:ad:89:00:e7:f1:47:40:4e:31:01:ed:77:b1: 74:0b:64:d9:54:ee:e4:d0:f9:17:67:c8:65:b7:76: 8e:d5:bd:13:18:12:06:e9:1e:bd:72:f8:05:e6:f8: 53:58:5b:7a:5e:8e:f7:d1:ff:5d:e3:17:e9:80:d5: 95:c9:1f:92:ad:89:02:88:3f:a0:f8:9e:4b:5b:d8: df:09:38:fd:2d:24:cc:4e:5e:d7:81:f1:cd:12:0f: d5:23:40:49:14:4c:04:1e:49:3c:54:97:fd:4b:18: 07:b9:8b:8f:92:eb:72:21:c2:9c:c4:9c:d9:bd:b4: 4b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B7:70:D2:F2:8D:04:D6:55:D6:B6:B7:72:BB:39:B9:FB:FC:FC:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa240ee4-f6b4-357b-954e-d09a4875efda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e0:05:32:fc:30:52:aa:e4:1e:81:d8:e5:a6:28:1d:cf:3d: 38:93:0e:50:56:ff:0d:fd:49:7f:fd:e1:cd:1e:a9:6d:a1:51: e1:6b:50:2a:f5:20:5d:5d:de:65:3a:1c:df:d8:3a:2a:87:dd: 74:75:9e:c4:e5:3a:5b:64:29:a3:24:fa:26:57:6f:e5:73:08: c1:34:91:01:b1:08:46:6c:1c:a0:19:ab:e3:23:ab:fd:09:f8: 02:cb:c0:2e:6a:f9:56:4b:15:7c:91:49:83:cc:0b:17:e8:48: f9:d1:89:ba:3f:33:56:ff:63:6e:ca:df:c1:08:10:c2:a7:f4: 53:50:0d:55:bd:a3:47:51:ed:c3:b8:19:bb:0f:9f:b7:35:1f: d8:6e:fd:e9:1d:27:b7:99:8f:f0:59:c9:ef:01:f5:24:ab:f8: 4d:dd:8e:25:bb:ae:76:e6:ba:31:b0:58:61:9b:95:c0:be:a0: 67:33:e4:8b:f1:c2:13:bf:a0:ed:5b:2c:d9:ce:35:4c:7c:39: 2c:05:28:2a:4e:8e:16:1e:cf:20:24:e0:36:b5:26:b1:70:f0: a0:3c:e9:de:17:3c:a6:a8:ba:43:ab:4f:8e:eb:d5:4b:0a:d9: dd:98:7e:b2:f0:2d:32:7b:f0:eb:e8:df:16:c2:77:1d:43:71: 48:df:dc:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgnQhYcpneQfkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk N2M4NjQ3YTQtMjc2MS00Mzc4LTk1ZmMtN2E1Njg2MjVjYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjSgMpfePWt6Pq/AKSFx7DWzbxlLGzXryxdS bfgG62SsAZe7TbPLchUO012/Fr8qYcrpAIQ80Y1jjj3P626YM5nGuSxdvYxX4Px8 Bzowhd9Y8lO96QL0doxsFZ6vs0RiKaR/gRKlbTYF1I9cCfEedLcApjERBZ4RjPgx dozfryJboDeF2dj6j62JAOfxR0BOMQHtd7F0C2TZVO7k0PkXZ8hlt3aO1b0TGBIG 6R69cvgF5vhTWFt6Xo730f9d4xfpgNWVyR+SrYkCiD+g+J5LW9jfCTj9LSTMTl7X gfHNEg/VI0BJFEwEHkk8VJf9SxgHuYuPkutyIcKcxJzZvbRLwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG3cNLyjQTWVda2t3K7Obn7/PwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEyNDBlZTQtZjZiNC0z NTdiLTk1NGUtZDA5YTQ4NzVlZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmAXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbgBTL8MFKq5B6B2OWmKB3PPTiTDlBW/w39SX/94c0eqW2hUeFrUCr1 IF1d3mU6HN/YOiqH3XR1nsTlOltkKaMk+iZXb+VzCME0kQGxCEZsHKAZq+Mjq/0J +ALLwC5q+VZLFXyRSYPMCxfoSPnRibo/M1b/Y27K38EIEMKn9FNQDVW9o0dR7cO4 GbsPn7c1H9hu/ekdJ7eZj/BZye8B9SSr+E3djiW7rnbmujGwWGGblcC+oGcz5Ivx whO/oO1bLNnONUx8OSwFKCpOjhYezyAk4Da1JrFw8KA86d4XPKaoukOrT47r1UsK 2d2YfrLwLTJ78Ovo3xbCdx1DcUjf3DA= -----END CERTIFICATE-----Generated at Sun Jun 15 11:41:58 2025 by rpki-client