$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa File: 4ece68d6-689f-306d-aad5-aefc8447de5f.roa (raw, json) Hash identifier: Xs8KWEOjyWeVraXZ+tpRxAgTBX/CfIbgGCpWDXBdkbc= Subject key identifier: 1A:BA:CF:C9:1D:54:C5:8A:1D:B9:4F:D6:CA:C6:A2:E0:ED:BF:0D:A4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6688D764CC8350E3E480E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 50.96.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:88:d7:64:cc:83:50:e3:e4:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=1c6a0e45-5319-474c-84ba-ec3539deb214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:0e:d9:b4:3e:eb:ac:75:3f:a7:ad:51:b7: 6d:ab:16:9e:75:ec:9a:31:a1:97:1a:43:ce:db:72: ed:e7:1a:9c:60:c4:dd:98:60:19:da:7a:76:18:26: ca:7b:43:42:34:9a:82:c6:c7:67:b3:12:92:a6:2f: b5:d0:91:ed:05:2b:0e:7a:a1:12:04:03:89:97:a9: d0:66:58:ae:e5:b9:29:6b:29:4e:de:4b:5d:10:f9: cc:79:9d:e1:c1:a1:83:bd:e4:94:a4:35:61:6b:92: 58:9a:d3:bc:87:cd:18:8f:76:7b:0a:33:13:09:35: c2:5b:46:ec:dd:33:d4:35:38:8b:cf:77:7f:ee:2f: c3:4b:c1:dd:d1:66:4c:65:c8:c3:47:e9:79:11:7e: c8:7e:63:48:bd:5f:6f:ae:2e:65:53:69:1e:f9:31: 3a:e7:c9:ab:bf:da:1b:d7:26:22:be:28:60:21:39: 24:ae:92:97:52:7e:78:1d:96:85:5f:05:ae:c1:31: 0a:e9:6f:46:67:20:bc:ef:73:33:fd:df:38:02:3d: 24:4f:60:84:4c:f9:4f:67:33:8f:e1:5d:d2:2d:a6: 46:8e:4f:c0:45:49:95:4a:b4:2d:f4:f0:76:1f:42: 05:cc:8f:d9:0c:47:8c:c6:52:a9:b6:fc:2b:53:bb: 7e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BA:CF:C9:1D:54:C5:8A:1D:B9:4F:D6:CA:C6:A2:E0:ED:BF:0D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:df:c1:9b:cf:10:60:e9:bf:54:29:ea:14:81:3c:ef:85:64: 72:6b:7f:a1:8b:09:ea:ee:3e:d0:8d:23:a4:c6:a0:fa:5a:7e: 22:12:ff:b4:f4:8a:58:99:50:15:58:78:e4:d4:bd:e4:ad:09: d9:d5:78:a6:e4:e4:5b:99:d4:30:91:61:e5:b6:70:79:a6:dd: 6f:c2:31:b7:1a:e8:84:e7:dc:94:ff:78:d7:19:50:18:cf:45: 34:b7:22:31:24:88:23:20:e7:88:1d:db:30:28:77:70:9c:ad: aa:98:76:f5:10:f2:7a:f9:12:71:d7:48:2d:a7:d2:e1:4a:96: 00:84:f8:38:ea:98:57:79:24:45:9a:7a:3f:0f:34:34:e8:20: 3d:c6:76:5f:11:48:b5:7b:b3:cf:63:5d:e5:2c:7e:e6:7f:e5: ab:59:f2:89:bd:2c:7d:69:0f:7e:bf:43:73:5d:58:65:5a:0d: 70:da:96:4e:bb:89:31:4b:b3:13:9b:e6:09:d5:2e:08:0e:d6: a3:b3:94:55:14:18:f2:a7:75:34:69:f3:56:13:1e:77:df:ac: 6d:c5:17:a1:0d:d5:32:fe:5f:f2:26:d9:2b:51:17:47:b6:20: a5:9a:90:77:7a:80:87:4b:42:40:44:74:02:0e:6f:44:13:e0: 1d:a1:c8:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZojXZMyDUOPkgOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MWM2YTBlNDUtNTMxOS00NzRjLTg0YmEtZWMzNTM5ZGViMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz80O2bQ+66x1P6etUbdtqxaedeyaMaGXGkPO 23Lt5xqcYMTdmGAZ2np2GCbKe0NCNJqCxsdnsxKSpi+10JHtBSsOeqESBAOJl6nQ Zliu5bkpaylO3ktdEPnMeZ3hwaGDveSUpDVha5JYmtO8h80Yj3Z7CjMTCTXCW0bs 3TPUNTiLz3d/7i/DS8Hd0WZMZcjDR+l5EX7IfmNIvV9vri5lU2ke+TE658mrv9ob 1yYivihgITkkrpKXUn54HZaFXwWuwTEK6W9GZyC873Mz/d84Aj0kT2CETPlPZzOP 4V3SLaZGjk/ARUmVSrQt9PB2H0IFzI/ZDEeMxlKptvwrU7t+iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBq6z8kdVMWKHblP1srGouDtvw2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGVjZTY4ZDYtNjg5Zi0z MDZkLWFhZDUtYWVmYzg0NDdkZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLfwZvPEGDpv1Qp6hSBPO+FZHJrf6GLCeruPtCNI6TGoPpafiIS/7T0 iliZUBVYeOTUveStCdnVeKbk5FuZ1DCRYeW2cHmm3W/CMbca6ITn3JT/eNcZUBjP RTS3IjEkiCMg54gd2zAod3CcraqYdvUQ8nr5EnHXSC2n0uFKlgCE+DjqmFd5JEWa ej8PNDToID3Gdl8RSLV7s89jXeUsfuZ/5atZ8om9LH1pD36/Q3NdWGVaDXDalk67 iTFLsxOb5gnVLggO1qOzlFUUGPKndTRp81YTHnffrG3FF6EN1TL+X/Im2StRF0e2 IKWakHd6gIdLQkBEdAIOb0QT4B2hyAQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:20:08 2025 by rpki-client