$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e2ffb83-392d-3ebe-9456-e86a8f666c45.roa File: 1e2ffb83-392d-3ebe-9456-e86a8f666c45.roa (raw, json) Hash identifier: TDlsVdXXi7R3BMtmNFflK7Z8TWXkQnTiUfxJ5zCYAoc= Subject key identifier: F0:A6:21:59:1B:D8:1C:9E:9A:19:1D:97:34:48:C1:F3:C5:A8:E5:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC0415608EA9147A9A6D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e2ffb83-392d-3ebe-9456-e86a8f666c45.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 50.96.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c0:41:56:08:ea:91:47:a9:a6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c6c89f80-c5b3-4057-8d09-0c549b437f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:d7:32:f4:a3:4d:5d:27:19:ba:2a:85:c5: 20:c4:03:23:1b:d2:13:80:cb:04:05:7c:f1:ef:9f: 94:46:83:52:1e:2c:76:3d:92:67:be:c7:ca:07:12: fc:72:a3:20:cd:34:9c:57:71:f5:cd:62:a3:04:29: 69:eb:34:2a:24:14:d2:db:53:61:22:2d:c9:d3:ad: 25:d9:f3:12:d3:4b:f9:19:3a:ce:a2:31:37:54:ce: 9d:0b:62:19:c0:ef:85:ac:27:94:ce:a0:97:f5:35: 50:70:56:d0:2d:09:c0:04:dd:bc:6d:7c:b4:30:cc: b1:eb:80:7b:0b:d0:b0:a5:2a:3c:ae:24:24:f9:03: f3:6a:8f:b6:26:75:47:8c:b7:f5:cc:71:49:2c:fb: a0:b1:36:3f:6b:69:0b:96:16:ad:e8:a0:f3:34:e3: 77:0e:e2:9d:b0:76:5a:c0:d9:76:3d:65:5b:14:d1: 3e:07:e0:f0:6f:de:6f:4c:4c:aa:dc:97:12:21:eb: 1d:9d:8a:c4:af:8f:a5:5e:eb:23:51:86:56:f6:0a: bf:3e:d3:c6:a6:aa:13:38:2a:a7:a1:4d:99:9d:a5: 51:d8:79:b1:63:54:5d:e0:e3:ef:56:ca:74:97:30: 28:3e:1b:7e:72:10:e2:f7:fb:7a:0d:71:69:e4:bf: 5a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A6:21:59:1B:D8:1C:9E:9A:19:1D:97:34:48:C1:F3:C5:A8:E5:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e2ffb83-392d-3ebe-9456-e86a8f666c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e2:b5:da:19:1c:ed:7a:58:58:7b:03:48:e7:99:7f:ec:a2: 91:64:0a:30:a1:38:f2:a7:ec:ee:ab:83:16:9c:8d:e5:54:fb: 22:a9:10:50:aa:df:84:4c:a6:99:fe:23:df:12:a0:af:8e:78: ab:76:f2:1a:1e:52:72:5f:3c:13:44:ae:8c:e6:5c:f3:5c:08: 21:72:ca:b3:0f:c5:83:98:19:97:80:80:eb:8e:b8:ee:db:20: d8:3f:68:ed:9c:0b:22:3a:80:d5:31:6d:76:61:aa:43:e0:04: 1b:8a:2e:47:27:55:8d:a8:6d:cb:b2:5e:f7:44:d2:f0:fb:0f: 54:53:95:53:85:96:7f:14:51:ce:4f:1c:36:b6:f1:52:09:8d: 48:5a:e0:34:a7:fe:4a:44:3c:aa:ca:6e:37:1c:fb:d5:32:28: 6d:5d:8d:a2:1a:bb:74:b7:9e:ea:2d:e5:1b:c8:d6:2f:d1:d3: 03:f1:e2:01:f9:59:0b:d7:df:31:3d:b5:ea:cf:8a:39:b9:7e: 8d:52:c5:33:59:29:65:3a:8c:bb:66:4c:19:43:c1:c6:bd:3e: d5:71:1b:c7:2a:bb:3e:40:d2:a9:e0:d1:1c:6d:19:96:ea:f7: 09:7b:d4:ff:01:b7:7a:25:25:06:02:ef:61:4f:fc:ec:87:38: 87:5d:91:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMBBVgjqkUepptAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzZjODlmODAtYzViMy00MDU3LThkMDktMGM1NDliNDM3Zjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6LXMvSjTV0nGboqhcUgxAMjG9ITgMsEBXzx 75+URoNSHix2PZJnvsfKBxL8cqMgzTScV3H1zWKjBClp6zQqJBTS21NhIi3J060l 2fMS00v5GTrOojE3VM6dC2IZwO+FrCeUzqCX9TVQcFbQLQnABN28bXy0MMyx64B7 C9CwpSo8riQk+QPzao+2JnVHjLf1zHFJLPugsTY/a2kLlhat6KDzNON3DuKdsHZa wNl2PWVbFNE+B+Dwb95vTEyq3JcSIesdnYrEr4+lXusjUYZW9gq/PtPGpqoTOCqn oU2ZnaVR2HmxY1Rd4OPvVsp0lzAoPht+chDi9/t6DXFp5L9aKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCmIVkb2ByemhkdlzRIwfPFqOWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWUyZmZiODMtMzkyZC0z ZWJlLTk0NTYtZTg2YThmNjY2YzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXitdoZHO16WFh7A0jnmX/sopFkCjChOPKn7O6rgxacjeVU+yKpEFCq 34RMppn+I98SoK+OeKt28hoeUnJfPBNErozmXPNcCCFyyrMPxYOYGZeAgOuOuO7b INg/aO2cCyI6gNUxbXZhqkPgBBuKLkcnVY2obcuyXvdE0vD7D1RTlVOFln8UUc5P HDa28VIJjUha4DSn/kpEPKrKbjcc+9UyKG1djaIau3S3nuot5RvI1i/R0wPx4gH5 WQvX3zE9terPijm5fo1SxTNZKWU6jLtmTBlDwca9PtVxG8cquz5A0qng0RxtGZbq 9wl71P8Bt3olJQYC72FP/OyHOIddkSw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:28 2025 by rpki-client