$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0858105d-530a-3c65-b8d5-11a254af58e9.roa File: 0858105d-530a-3c65-b8d5-11a254af58e9.roa (raw, json) Hash identifier: 8piTDkG6MZBeFqHIKZx9xVwL+93yXdzdv6KLZ7F6ScA= Subject key identifier: 95:0A:99:26:DE:9E:E9:70:2F:D1:E7:70:AD:81:16:3C:47:D6:1B:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B944224EFC2603BE72D297880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0858105d-530a-3c65-b8d5-11a254af58e9.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 50.96.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:24:ef:c2:60:3b:e7:2d:29:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=cf686cf0-0c38-48f4-83dd-6abaabfc49bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:ba:29:d2:3f:e9:62:62:d3:95:82:e5:f4: 09:cd:1e:6f:90:5b:6c:73:f6:25:9a:48:22:d7:78: 48:2b:8e:83:a3:a6:fc:f7:3f:2a:6f:f0:ad:2b:9d: 7b:c0:6c:4d:6d:0c:80:b7:4b:56:8a:4d:2f:18:ac: 65:6f:5f:8f:8d:85:77:be:48:ae:6f:e8:b6:e1:45: 04:b3:44:e3:60:42:3f:f1:b3:c8:a6:23:81:41:9c: 18:91:cb:b4:32:a0:2a:2c:bd:dd:f7:50:48:0b:14: 94:b7:00:26:4c:fe:6d:eb:e9:d4:96:64:a4:0b:95: e0:0b:f0:8a:42:85:4f:eb:2f:37:bd:e4:ae:a7:85: 89:c4:2e:a7:df:03:f6:97:d6:7e:bc:b3:1e:7b:37: cb:d2:81:37:91:39:48:57:38:0a:6f:ea:1c:e4:fd: 13:7a:16:90:38:2c:e9:40:3e:db:70:a5:37:b9:de: 01:54:1c:d9:82:9f:42:63:8e:b7:c0:43:5e:df:df: ac:e3:ce:b1:3d:86:92:97:bf:a5:cd:17:04:b7:b4: 74:cf:91:75:a6:70:ae:47:b1:b3:fd:d1:a7:f5:dd: 36:1d:05:85:51:c1:1c:9d:e3:12:4a:77:df:1f:2d: 56:6c:37:d4:54:cb:f7:be:fd:cd:4a:0c:bc:da:e2: 4f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0A:99:26:DE:9E:E9:70:2F:D1:E7:70:AD:81:16:3C:47:D6:1B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0858105d-530a-3c65-b8d5-11a254af58e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:3f:87:9d:88:92:aa:13:e0:e7:ec:33:99:89:a4:77:e0:3e: 48:87:3d:ea:54:ab:98:60:8d:c3:a7:0d:20:08:50:9b:16:26: b8:b1:0c:5a:f9:b6:ee:1b:90:e3:90:bd:7a:8b:86:70:36:a0: a4:2b:e7:92:f1:e5:68:30:4d:f5:9d:ce:d2:84:7d:0c:da:3f: 71:2d:14:78:bf:05:b9:b1:3d:7d:09:a1:e0:12:bf:44:03:dd: 19:c5:89:f4:06:0c:8e:87:fc:16:ed:ad:99:e0:fd:5e:2d:e4: 4f:a9:af:99:e0:9a:87:09:3a:fd:a6:3b:ef:7d:84:41:0a:30: 7f:9d:02:89:bb:2d:59:7a:9f:fa:92:91:94:27:fd:13:fd:90: fb:ae:bc:d3:be:f9:a8:29:b2:d0:29:34:c3:e2:c5:69:19:16: de:58:78:ed:0a:9d:7a:d9:7d:cd:c2:fc:f1:7f:2b:6e:fa:3b: 00:c4:a8:e6:ce:9b:68:48:96:6d:04:8a:64:34:2a:e5:39:c0: d4:cb:82:c1:41:a5:60:aa:2d:5f:75:04:f2:03:67:30:00:8b: 17:f2:7b:43:39:8b:00:93:22:62:83:36:79:35:80:52:ef:28: 8e:d7:1c:f6:d3:19:f0:02:a3:31:6a:79:af:93:f4:03:c0:1b: ad:35:9a:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiTvwmA75y0peIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk Y2Y2ODZjZjAtMGMzOC00OGY0LTgzZGQtNmFiYWFiZmM0OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW26KdI/6WJi05WC5fQJzR5vkFtsc/Ylmkgi 13hIK46Do6b89z8qb/CtK517wGxNbQyAt0tWik0vGKxlb1+PjYV3vkiub+i24UUE s0TjYEI/8bPIpiOBQZwYkcu0MqAqLL3d91BICxSUtwAmTP5t6+nUlmSkC5XgC/CK QoVP6y83veSup4WJxC6n3wP2l9Z+vLMeezfL0oE3kTlIVzgKb+oc5P0TehaQOCzp QD7bcKU3ud4BVBzZgp9CY463wENe39+s486xPYaSl7+lzRcEt7R0z5F1pnCuR7Gz /dGn9d02HQWFUcEcneMSSnffHy1WbDfUVMv3vv3NSgy82uJPBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUKmSbenulwL9HncK2BFjxH1hsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDg1ODEwNWQtNTMwYS0z YzY1LWI4ZDUtMTFhMjU0YWY1OGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc/h52IkqoT4OfsM5mJpHfgPkiHPepUq5hgjcOnDSAIUJsWJrixDFr5 tu4bkOOQvXqLhnA2oKQr55Lx5WgwTfWdztKEfQzaP3EtFHi/BbmxPX0JoeASv0QD 3RnFifQGDI6H/BbtrZng/V4t5E+pr5ngmocJOv2mO+99hEEKMH+dAom7LVl6n/qS kZQn/RP9kPuuvNO++agpstApNMPixWkZFt5YeO0KnXrZfc3C/PF/K276OwDEqObO m2hIlm0EimQ0KuU5wNTLgsFBpWCqLV91BPIDZzAAixfye0M5iwCTImKDNnk1gFLv KI7XHPbTGfACozFqea+T9APAG601mgU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:43 2025 by rpki-client