$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa File: 8cf117f2-112a-3cfb-9363-44ee9405c70d.roa (raw, json) Hash identifier: e644qfPfve9gsTKAE/Ozhu1Nfejpp40gf51erVC/lDg= Subject key identifier: BB:41:62:6F:AE:E8:BE:9E:4E:FE:8E:F6:61:02:01:26:FB:41:BF:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6690D806037C099964B780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 50.96.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:90:d8:06:03:7c:09:99:64:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=591bea3c-f4e1-44dc-9839-00d3096c9be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:72:ce:05:32:f0:85:ec:40:0a:f5:86:38: eb:27:42:af:c5:19:e8:b6:71:a3:1b:cc:9c:c8:ae: 6f:6c:b9:2e:a8:3f:b5:59:96:4e:9c:50:77:13:0f: 57:5e:96:a4:e1:7c:bb:5c:0e:6c:59:13:b2:e1:c4: a0:04:cd:70:5e:aa:eb:1d:ef:8a:88:72:0a:39:b6: ae:76:6f:39:41:fa:77:f9:b2:f0:5d:99:c6:d4:1d: d7:81:25:81:35:af:96:99:3f:af:49:5f:1e:1a:d1: 1a:e4:59:81:e0:cd:aa:7e:b5:66:94:89:48:1c:6a: d6:9d:0a:96:1a:47:f3:49:af:25:88:79:5b:2c:d0: 3b:dd:20:ea:a1:12:25:6c:46:fe:f7:22:3e:f5:77: d9:83:87:f7:40:2c:fa:4a:b4:04:fa:d2:2e:f9:1e: e0:5b:2d:69:91:3c:5a:76:26:7f:91:d9:92:c5:32: c6:33:12:71:f6:5a:84:26:1a:e2:79:97:70:3b:1b: c7:39:6b:ac:c2:12:ab:38:53:b3:3f:14:0c:02:3f: 92:40:01:7b:48:e9:da:2a:9e:86:d2:02:79:6a:75: 70:10:4d:46:0e:1c:4a:13:84:b3:88:6f:c3:7f:86: b5:0d:3b:38:09:a3:e0:ae:fb:39:e0:58:ea:68:f1: c5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:41:62:6F:AE:E8:BE:9E:4E:FE:8E:F6:61:02:01:26:FB:41:BF:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:69:6f:1f:c6:ae:bf:41:52:84:eb:b7:f4:aa:fb:40:5f:21: c9:39:c8:cf:cf:e1:83:49:b6:ba:16:95:43:a9:60:ef:9a:da: 8b:df:05:28:52:de:f3:35:d3:c2:07:3e:73:a7:3b:54:cb:c6: 71:07:80:4d:1a:df:27:88:c9:cb:f0:98:48:ce:ba:ab:03:e5: a7:ee:57:bf:6d:b1:68:b1:35:69:99:40:a6:b8:51:47:46:99: d4:b4:db:80:b1:02:9a:24:68:d1:5b:2c:4e:dd:a8:7b:e9:5f: 45:31:30:9f:eb:50:7d:0d:83:9b:58:9d:b1:48:56:1c:76:22: c6:7d:10:5e:13:da:5c:fa:aa:c5:2d:ab:94:c0:8b:36:ea:54: d3:e3:0b:76:76:c9:b0:7e:4f:3c:23:60:ba:9d:da:08:86:ba: ea:c0:d0:2f:07:85:b7:b3:a8:a4:6a:97:4f:32:40:0d:47:ce: e7:fb:24:6d:48:7c:1b:99:77:d0:44:3d:08:6e:a2:45:b0:20: 06:e9:db:7f:15:c9:cf:1d:1b:7d:8a:eb:87:a1:bb:c8:5e:cf: 45:20:1c:bb:98:b6:ad:a1:8a:91:45:ae:8d:4f:82:fc:95:b8: 00:3f:1e:50:5a:19:eb:57:af:f5:7c:f1:02:3e:3b:e4:57:ee: 7a:78:45:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpDYBgN8CZlkt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NTkxYmVhM2MtZjRlMS00NGRjLTk4MzktMDBkMzA5NmM5YmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzihyzgUy8IXsQAr1hjjrJ0KvxRnotnGjG8yc yK5vbLkuqD+1WZZOnFB3Ew9XXpak4Xy7XA5sWROy4cSgBM1wXqrrHe+KiHIKObau dm85Qfp3+bLwXZnG1B3XgSWBNa+WmT+vSV8eGtEa5FmB4M2qfrVmlIlIHGrWnQqW GkfzSa8liHlbLNA73SDqoRIlbEb+9yI+9XfZg4f3QCz6SrQE+tIu+R7gWy1pkTxa diZ/kdmSxTLGMxJx9lqEJhrieZdwOxvHOWuswhKrOFOzPxQMAj+SQAF7SOnaKp6G 0gJ5anVwEE1GDhxKE4SziG/Df4a1DTs4CaPgrvs54FjqaPHFbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtBYm+u6L6eTv6O9mECASb7Qb8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGNmMTE3ZjItMTEyYS0z Y2ZiLTkzNjMtNDRlZTk0MDVjNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMmAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEppbx/Grr9BUoTrt/Sq+0BfIck5yM/P4YNJtroWlUOpYO+a2ovfBShS 3vM108IHPnOnO1TLxnEHgE0a3yeIycvwmEjOuqsD5afuV79tsWixNWmZQKa4UUdG mdS024CxApokaNFbLE7dqHvpX0UxMJ/rUH0Ng5tYnbFIVhx2IsZ9EF4T2lz6qsUt q5TAizbqVNPjC3Z2ybB+TzwjYLqd2giGuurA0C8HhbezqKRql08yQA1Hzuf7JG1I fBuZd9BEPQhuokWwIAbp238Vyc8dG32K64ehu8hez0UgHLuYtq2hipFFro1PgvyV uAA/HlBaGetXr/V88QI+O+RX7np4RQE= -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:42 2025 by rpki-client