$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e9439d6-a2c5-3f88-b02c-dc81ae99f030.roa File: 4e9439d6-a2c5-3f88-b02c-dc81ae99f030.roa (raw, json) Hash identifier: m0jEpe/DwvvkdOkIh6IhuYGRUh0dtVK1kpO6kqzw6q0= Subject key identifier: 6A:EC:2C:BE:09:08:15:53:DF:29:8F:F2:7E:62:90:C4:54:1D:9F:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B7F523F8F35F0141384246980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e9439d6-a2c5-3f88-b02c-dc81ae99f030.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 50.96.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3f:8f:35:f0:14:13:84:24:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=24ba1efc-5f43-4efe-ba7e-8e90966c5fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:83:80:6d:9d:4d:3f:45:3b:d9:7f:4a:4b:8c: 3e:b3:65:8c:0a:b1:44:5a:ca:89:b4:de:4f:2f:59: a7:0c:44:c2:25:0f:9e:69:55:49:2a:7e:be:22:59: b9:4c:8d:8a:13:3e:83:b5:32:5b:27:08:7e:c2:c1: 1e:79:04:ae:ab:8f:57:0c:e9:31:65:db:e0:3a:21: c4:f1:ce:30:92:33:4e:69:f0:73:0e:34:a5:80:01: 41:39:ca:70:2c:4a:2b:bb:1b:bd:17:bf:85:43:d0: 50:96:e2:f8:7f:4b:5f:68:b5:4a:cb:9a:7e:4f:50: ce:57:4d:55:0a:d6:fc:40:99:76:44:ea:11:f8:b2: 92:02:aa:c9:1e:09:6f:29:51:20:90:ea:1f:6a:50: 71:49:73:4a:a2:37:fd:66:43:05:30:65:cb:02:56: 6b:22:e3:53:25:1c:35:14:83:55:79:b7:6e:e6:cd: b7:9f:ea:40:3f:6c:d2:f3:45:50:d1:d3:3b:97:ba: 18:66:d5:c6:91:c8:e6:74:28:d3:0d:82:e4:47:70: d8:23:22:c2:e6:dc:c6:06:e8:8c:1c:d7:60:23:b1: bb:eb:71:c0:3b:08:18:eb:16:d8:38:40:c8:4a:70: e5:34:3c:c0:0a:e3:03:ab:de:a6:b3:67:bf:aa:b8: dc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EC:2C:BE:09:08:15:53:DF:29:8F:F2:7E:62:90:C4:54:1D:9F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e9439d6-a2c5-3f88-b02c-dc81ae99f030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:6d:da:4f:ef:d9:cd:78:bc:ab:2c:f1:a7:af:bc:76:27:c7: 78:0a:ea:ab:9c:fe:95:75:e0:a8:97:9c:ff:61:69:52:ca:db: c9:0a:7b:c1:ba:42:d9:54:fd:1b:4d:12:10:46:0e:62:17:b2: 04:6e:f5:d6:77:44:3b:10:3a:af:32:ad:63:34:d5:a1:35:8a: 43:96:e4:31:db:20:2a:85:da:10:c5:46:71:45:2b:ee:62:ce: 60:6d:ce:fe:ba:a4:df:6d:6d:a2:0d:37:a7:97:7a:45:1d:8d: b4:1a:16:e2:28:2c:d7:c2:8c:ff:45:20:8b:6e:ac:26:53:3d: cc:2e:7d:2a:46:a1:bc:18:d1:ca:a5:c3:0b:09:ec:e3:3e:a3: bd:e1:11:cc:8a:63:13:ad:75:c3:af:29:c6:70:3d:23:54:b7: b4:11:ee:92:49:59:12:0e:98:af:79:c9:5a:50:ec:42:c9:d7: 51:60:1f:be:3a:be:a2:00:ca:e1:cd:37:63:1b:a3:65:9d:ca: c1:33:32:09:a8:65:01:2c:65:22:1d:b3:01:3a:b1:b5:80:f1: 3f:91:8e:09:3c:9c:f7:1d:54:04:d5:dc:d9:bd:88:ec:07:99: 2b:11:4b:ce:38:bc:2a:85:17:e9:ec:b4:b9:3d:35:75:89:e5: 05:2d:0f:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uj+PNfAUE4QkaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MjRiYTFlZmMtNWY0My00ZWZlLWJhN2UtOGU5MDk2NmM1ZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoOAbZ1NP0U72X9KS4w+s2WMCrFEWsqJtN5P L1mnDETCJQ+eaVVJKn6+Ilm5TI2KEz6DtTJbJwh+wsEeeQSuq49XDOkxZdvgOiHE 8c4wkjNOafBzDjSlgAFBOcpwLEoruxu9F7+FQ9BQluL4f0tfaLVKy5p+T1DOV01V Ctb8QJl2ROoR+LKSAqrJHglvKVEgkOofalBxSXNKojf9ZkMFMGXLAlZrIuNTJRw1 FINVebdu5s23n+pAP2zS80VQ0dM7l7oYZtXGkcjmdCjTDYLkR3DYIyLC5tzGBuiM HNdgI7G763HAOwgY6xbYOEDISnDlNDzACuMDq96ms2e/qrjc6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrsLL4JCBVT3ymP8n5ikMRUHZ9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGU5NDM5ZDYtYTJjNS0z Zjg4LWIwMmMtZGM4MWFlOTlmMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANt2k/v2c14vKss8aevvHYnx3gK6quc/pV14KiXnP9haVLK28kKe8G6 QtlU/RtNEhBGDmIXsgRu9dZ3RDsQOq8yrWM01aE1ikOW5DHbICqF2hDFRnFFK+5i zmBtzv66pN9tbaINN6eXekUdjbQaFuIoLNfCjP9FIIturCZTPcwufSpGobwY0cql wwsJ7OM+o73hEcyKYxOtdcOvKcZwPSNUt7QR7pJJWRIOmK95yVpQ7ELJ11FgH746 vqIAyuHNN2Mbo2WdysEzMgmoZQEsZSIdswE6sbWA8T+Rjgk8nPcdVATV3Nm9iOwH mSsRS844vCqFF+nstLk9NXWJ5QUtDzo= -----END CERTIFICATE-----Generated at Mon Oct 20 03:23:51 2025 by rpki-client