$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5098c5c3-9013-3bb5-a48f-f9bcbd62ab57.roa File: 5098c5c3-9013-3bb5-a48f-f9bcbd62ab57.roa (raw, json) Hash identifier: cyKsLSO7F9+ysXi+Zo3qSr26ZJ26eXDY47NlwHaSKME= Subject key identifier: 9E:17:57:B1:FD:AE:FD:4F:DD:C0:13:E2:F7:95:F1:2B:11:44:B7:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B944226B236B6AC0636F72040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5098c5c3-9013-3bb5-a48f-f9bcbd62ab57.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 50.96.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:26:b2:36:b6:ac:06:36:f7:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=4de25acc-a8ed-443d-9ef9-01a6eba0e888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:2a:b6:2d:c9:69:d7:ad:18:1e:ba:db:8f: 31:f5:ca:80:df:50:02:66:67:ab:a6:ab:cc:4c:d3: 62:27:31:e9:7e:9d:76:3c:e9:95:84:bb:d8:95:16: da:95:a6:91:4f:73:48:9c:2d:4b:a5:0c:f9:94:f1: 0e:9d:e5:d7:09:61:cb:02:cf:6f:0c:9b:c0:11:5e: b7:7d:6d:8e:26:96:3a:c3:de:8c:cf:82:73:8f:7b: 5b:1c:f5:72:f5:42:4c:64:8f:cf:38:da:39:0f:a9: d0:8b:9f:8a:29:08:e6:26:7f:9d:37:73:7f:c6:86: a4:50:0b:5c:65:d0:e6:6b:ae:6c:b3:bc:57:18:7d: 3c:6e:c7:23:68:c6:1b:73:bf:13:36:99:ad:0d:0d: d4:7e:3a:74:5a:73:b1:60:ac:e6:ab:c0:b7:41:31: 2b:89:98:37:d9:0f:88:37:ae:31:99:82:73:c8:f2: a2:bb:b5:75:75:e2:28:e7:79:4e:82:b0:5e:76:ff: be:2f:37:3d:37:14:bc:f2:7f:c5:9b:ac:b9:3c:a4: 08:5c:b8:7a:35:0c:5c:a6:25:5e:2c:b1:6e:c6:c0: 1b:69:30:b9:ce:a5:f7:2e:48:6c:87:41:24:be:1c: 4e:d8:c1:f9:13:52:48:31:35:90:37:64:40:bb:2b: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:17:57:B1:FD:AE:FD:4F:DD:C0:13:E2:F7:95:F1:2B:11:44:B7:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5098c5c3-9013-3bb5-a48f-f9bcbd62ab57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d8:e1:e5:90:78:4a:31:ef:e1:d7:49:51:a4:0c:0e:45:bd: c8:ef:26:9b:f8:ce:13:33:32:fe:ff:98:3b:dc:02:47:d3:46: 0d:54:33:99:ea:1c:15:6e:5b:cc:fb:f7:40:22:7b:b8:df:66: 7c:1d:d5:59:ce:1a:cb:92:f9:57:8a:e1:dc:ad:fe:f8:3b:28: 8b:8c:00:9e:32:88:44:96:b8:4d:47:46:ef:f5:f3:64:eb:a6: 36:41:4b:99:85:9d:37:6b:b5:22:da:dc:e3:93:27:34:0f:ff: 54:4a:80:83:3f:ab:3d:5d:74:c1:3d:50:00:f3:df:19:e1:ba: ff:8c:b3:d0:43:0b:77:11:55:9d:8e:18:0a:ea:56:70:58:64: fa:1c:46:99:88:0c:50:3c:53:c9:aa:f0:85:9d:b9:86:f5:3d: fc:92:15:96:55:bc:ee:58:2e:2b:b3:aa:0a:39:1a:90:39:93: 9f:9a:08:2f:3f:e6:54:d6:2b:87:34:65:65:92:c2:82:46:15: 0f:d3:21:52:42:47:b3:f8:dd:a6:0a:85:d8:d1:fe:e5:15:e3: b9:62:5c:fc:fc:1d:89:c1:f3:e3:94:5d:6a:eb:c7:32:db:e4: 2c:de:ee:e0:59:9d:1b:f6:67:03:38:26:92:ff:74:f0:58:68: 7c:6d:e9:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiayNrasBjb3IEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk NGRlMjVhY2MtYThlZC00NDNkLTllZjktMDFhNmViYTBlODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZIqti3JadetGB66248x9cqA31ACZmerpqvM TNNiJzHpfp12POmVhLvYlRbalaaRT3NInC1LpQz5lPEOneXXCWHLAs9vDJvAEV63 fW2OJpY6w96Mz4Jzj3tbHPVy9UJMZI/PONo5D6nQi5+KKQjmJn+dN3N/xoakUAtc ZdDma65ss7xXGH08bscjaMYbc78TNpmtDQ3Ufjp0WnOxYKzmq8C3QTEriZg32Q+I N64xmYJzyPKiu7V1deIo53lOgrBedv++Lzc9NxS88n/Fm6y5PKQIXLh6NQxcpiVe LLFuxsAbaTC5zqX3Lkhsh0EkvhxO2MH5E1JIMTWQN2RAuyuK1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4XV7H9rv1P3cAT4veV8SsRRLfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTA5OGM1YzMtOTAxMy0z YmI1LWE0OGYtZjliY2JkNjJhYjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPY4eWQeEox7+HXSVGkDA5FvcjvJpv4zhMzMv7/mDvcAkfTRg1UM5nq HBVuW8z790Aie7jfZnwd1VnOGsuS+VeK4dyt/vg7KIuMAJ4yiESWuE1HRu/182Tr pjZBS5mFnTdrtSLa3OOTJzQP/1RKgIM/qz1ddME9UADz3xnhuv+Ms9BDC3cRVZ2O GArqVnBYZPocRpmIDFA8U8mq8IWduYb1PfySFZZVvO5YLiuzqgo5GpA5k5+aCC8/ 5lTWK4c0ZWWSwoJGFQ/TIVJCR7P43aYKhdjR/uUV47liXPz8HYnB8+OUXWrrxzLb 5Cze7uBZnRv2ZwM4JpL/dPBYaHxt6es= -----END CERTIFICATE-----Generated at Mon Oct 20 03:24:02 2025 by rpki-client