$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dbd7895-f3ba-3d0d-b188-30de2693e387.roa File: 4dbd7895-f3ba-3d0d-b188-30de2693e387.roa (raw, json) Hash identifier: 1FuCGJQneW2JyiGQuOe+vkp3dPjj0qokCdfVcDx5aFA= Subject key identifier: 39:AC:AA:EE:64:CB:3D:57:00:2A:06:ED:62:39:FF:E4:56:AA:84:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A2AE8FB00B243CBAEDAE8F240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dbd7895-f3ba-3d0d-b188-30de2693e387.roa Signing time: Thu 12 Jun 2025 14:34:08 +0000 ROA not before: Thu 12 Jun 2025 14:34:08 +0000 ROA not after: Wed 10 Sep 2025 14:34:08 +0000 asID: 7029 IP address blocks: 50.96.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:e8:fb:00:b2:43:cb:ae:da:e8:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 12 14:34:08 2025 GMT Not After : Sep 10 14:34:08 2025 GMT Subject: CN=311e7bd5-93e7-4673-83ff-fe3f6963e4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:53:51:5f:09:e9:78:ef:bc:e8:f0:92:3b:4e: d4:41:dc:2e:03:ac:1e:24:77:25:eb:05:2e:2e:4f: 24:19:00:6e:45:2a:a3:32:d8:19:b7:fa:8e:2f:8c: 23:ef:6e:1a:96:7c:93:7e:20:e4:d1:4c:86:cb:57: d8:ca:32:a9:e3:03:00:8e:f7:33:87:87:04:a3:73: ad:1a:49:b5:89:91:83:6e:dd:30:1d:f6:f0:65:f6: 0d:de:84:23:3f:03:43:05:22:8c:77:cb:53:14:d9: 8b:60:69:d5:96:24:b3:c1:e1:a6:95:c2:37:ad:5c: 7b:6b:94:93:e3:37:2c:24:19:13:e4:db:86:78:07: 21:59:6e:d3:ee:dd:0c:8e:c7:1f:2d:64:17:28:df: 98:2d:af:8a:05:8e:dc:0f:4f:70:7f:44:52:90:12: 2b:3a:c4:dd:7b:85:6c:37:ae:9b:47:64:f7:53:ce: 90:b0:7a:d1:67:c8:10:3a:de:92:52:d1:ba:29:05: 13:1a:24:f2:9f:d3:af:2d:3a:b5:68:80:be:43:d5: 13:47:ac:7e:4b:51:75:34:9d:c5:5b:9d:db:9a:4e: 3d:c2:15:68:48:d4:ec:1a:f3:b5:68:24:2e:d5:83: 8a:00:d1:b0:56:30:8c:cc:54:95:a8:1c:24:11:50: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AC:AA:EE:64:CB:3D:57:00:2A:06:ED:62:39:FF:E4:56:AA:84:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dbd7895-f3ba-3d0d-b188-30de2693e387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:de:d8:d9:80:1f:89:a5:96:c0:ae:5d:5f:74:7a:1d:63:f9: 32:91:66:a6:5e:9c:22:3f:0c:5b:8a:c3:34:3c:2e:b6:d6:66: 53:a4:0b:bc:eb:ef:5c:c2:e1:f7:78:40:c6:c8:e7:27:89:67: e4:2e:13:ae:66:db:0c:0a:b1:af:2b:5c:3a:79:a1:c9:e5:29: bd:08:f2:65:a6:95:e5:c5:47:63:e1:5a:4d:03:83:ee:72:f1: f6:88:1e:70:0d:7a:83:3e:35:5e:7c:97:89:7d:95:a6:2d:16: 68:64:a2:2b:16:8d:c2:a5:20:69:c9:0c:52:64:e1:00:bc:b2: 65:76:27:b2:db:1d:b3:b6:de:1c:37:39:dc:9b:e6:24:db:0d: f1:7c:d0:47:cc:4f:05:f9:9c:17:18:1d:aa:d7:3f:ea:e4:57: ff:aa:c6:3f:b8:4a:ce:81:ce:e2:2e:44:68:01:a5:c6:7e:02: 9f:44:6e:fa:2b:ee:af:06:af:0f:c4:59:6c:e7:fd:5a:58:99: 6c:9f:46:d7:e9:a8:e8:16:08:70:2b:18:ec:98:e8:d5:34:11: da:a9:4b:89:34:75:88:b5:89:b6:8e:81:83:99:1c:59:a4:80: 26:a5:15:18:9b:8c:41:4b:13:3e:17:a4:20:f6:36:62:11:dc: a7:35:90:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoq6PsAskPLrtro8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxMjE0MzQwOFoXDTI1MDkxMDE0MzQwOFowLzEtMCsGA1UEAxMk MzExZTdiZDUtOTNlNy00NjczLTgzZmYtZmUzZjY5NjNlNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11NRXwnpeO+86PCSO07UQdwuA6weJHcl6wUu Lk8kGQBuRSqjMtgZt/qOL4wj724alnyTfiDk0UyGy1fYyjKp4wMAjvczh4cEo3Ot Gkm1iZGDbt0wHfbwZfYN3oQjPwNDBSKMd8tTFNmLYGnVliSzweGmlcI3rVx7a5ST 4zcsJBkT5NuGeAchWW7T7t0MjscfLWQXKN+YLa+KBY7cD09wf0RSkBIrOsTde4Vs N66bR2T3U86QsHrRZ8gQOt6SUtG6KQUTGiTyn9OvLTq1aIC+Q9UTR6x+S1F1NJ3F W53bmk49whVoSNTsGvO1aCQu1YOKANGwVjCMzFSVqBwkEVB74wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmsqu5kyz1XACoG7WI5/+RWqoQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGRiZDc4OTUtZjNiYS0z ZDBkLWIxODgtMzBkZTI2OTNlMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmBTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/e2NmAH4mllsCuXV90eh1j+TKRZqZenCI/DFuKwzQ8LrbWZlOkC7zr 71zC4fd4QMbI5yeJZ+QuE65m2wwKsa8rXDp5ocnlKb0I8mWmleXFR2PhWk0Dg+5y 8faIHnANeoM+NV58l4l9laYtFmhkoisWjcKlIGnJDFJk4QC8smV2J7LbHbO23hw3 Odyb5iTbDfF80EfMTwX5nBcYHarXP+rkV/+qxj+4Ss6BzuIuRGgBpcZ+Ap9Ebvor 7q8Grw/EWWzn/VpYmWyfRtfpqOgWCHArGOyY6NU0EdqpS4k0dYi1ibaOgYOZHFmk gCalFRibjEFLEz4XpCD2NmIR3Kc1kCI= -----END CERTIFICATE-----Generated at Mon Jun 30 22:49:27 2025 by rpki-client