$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2af56eb6-ccb8-39a1-9ef2-435758ccff47.roa File: 2af56eb6-ccb8-39a1-9ef2-435758ccff47.roa (raw, json) Hash identifier: xX7kpBcqXu/sBc60akjoT/7khQKlVMUV1HufEUqHZqE= Subject key identifier: DE:41:82:BB:34:45:48:4A:BF:6B:DF:59:95:4C:EF:01:57:7C:2C:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B196C1198EA6F472013523B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2af56eb6-ccb8-39a1-9ef2-435758ccff47.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 50.96.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:11:98:ea:6f:47:20:13:52:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=65e33feb-bbb1-4bba-b9b8-f0aee91c2f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8c:8b:73:97:bf:d3:1b:d8:65:a0:a3:25:23: 72:a4:d5:74:df:ca:1a:69:aa:3e:2e:04:e0:b3:38: d1:3f:84:f6:44:17:09:6e:1f:b3:a1:c5:32:9e:a3: d4:d8:55:a1:56:a7:97:8d:fe:7d:4c:e0:77:61:09: dc:ea:20:83:ca:c3:8c:2b:91:47:da:50:9b:07:2c: 98:2a:63:ac:f7:56:db:e4:25:05:b1:2b:5b:4b:eb: 17:2d:57:d2:39:86:e7:54:c5:b8:b0:ec:ca:f1:b5: 3b:cb:a3:99:21:d3:0a:a4:b0:0b:cb:52:1e:21:62: ba:70:de:2d:b8:1a:d4:86:a9:a4:5f:d4:91:4d:ac: da:6c:2d:6a:31:50:76:41:dd:e7:4d:72:79:a2:3d: 2c:31:17:ff:34:61:26:04:80:55:fa:88:70:55:05: 2a:70:6d:06:24:f0:fd:61:66:58:dd:9f:62:5d:a2: 80:cc:a2:8d:a1:10:bd:72:01:89:92:bc:3f:73:f6: b1:f4:ac:35:b9:41:15:41:95:e4:f4:83:e9:4e:02: 3e:19:f6:a1:bf:eb:c7:92:5d:67:a1:25:44:75:74: 64:cf:dc:42:c2:4e:ad:e2:4e:83:f3:ed:7a:50:a1: ef:78:0e:57:a4:88:0d:1a:9f:f9:9a:34:41:b2:c1: af:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:41:82:BB:34:45:48:4A:BF:6B:DF:59:95:4C:EF:01:57:7C:2C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2af56eb6-ccb8-39a1-9ef2-435758ccff47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e4:e1:81:89:5b:1a:88:0e:3f:49:bd:5b:6f:6a:da:33:c8: f7:f9:b5:ab:bb:57:5e:50:7a:65:e6:af:70:bd:d7:e2:9c:8f: 8b:8a:e7:2c:e0:32:8a:94:b8:70:3f:b3:f4:67:e4:d7:f7:96: 60:39:fe:b7:9d:29:b5:c2:52:87:33:d9:ef:93:8e:11:d1:36: c4:37:cd:4c:3f:e6:37:a5:0a:10:94:e2:84:99:15:f8:1a:5a: 4c:59:82:ac:8d:e0:17:e4:6a:82:88:be:52:d0:9e:d8:25:d5: 9b:fb:0e:71:2c:2a:e1:0a:e3:6d:3b:c9:f5:1b:a8:fd:9f:e8: 9a:7e:52:dc:1f:3e:1c:24:e6:e2:0f:a5:61:28:c2:21:d1:83: f2:fa:71:c2:8c:52:da:b1:1f:3e:0c:23:4d:4a:28:38:97:ed: 3c:27:22:e2:be:28:5e:ea:d9:03:be:51:bc:b4:c7:b1:04:d6: 96:f3:95:c3:89:2f:23:56:5c:9b:eb:41:2f:de:11:7f:bc:93: 56:c7:5c:45:7d:53:47:92:56:06:00:cc:5b:21:07:2d:0f:d7: 06:dc:b2:11:e1:d9:cb:e8:fa:6a:44:69:81:ef:7d:62:2a:57: f3:c3:85:30:13:2f:be:3d:ac:47:46:bf:37:bb:17:0f:17:17: 8b:64:be:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBGY6m9HIBNSO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NjVlMzNmZWItYmJiMS00YmJhLWI5YjgtZjBhZWU5MWMyZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioyLc5e/0xvYZaCjJSNypNV038oaaao+LgTg szjRP4T2RBcJbh+zocUynqPU2FWhVqeXjf59TOB3YQnc6iCDysOMK5FH2lCbByyY KmOs91bb5CUFsStbS+sXLVfSOYbnVMW4sOzK8bU7y6OZIdMKpLALy1IeIWK6cN4t uBrUhqmkX9SRTazabC1qMVB2Qd3nTXJ5oj0sMRf/NGEmBIBV+ohwVQUqcG0GJPD9 YWZY3Z9iXaKAzKKNoRC9cgGJkrw/c/ax9Kw1uUEVQZXk9IPpTgI+Gfahv+vHkl1n oSVEdXRkz9xCwk6t4k6D8+16UKHveA5XpIgNGp/5mjRBssGvoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5Bgrs0RUhKv2vfWZVM7wFXfCyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmFmNTZlYjYtY2NiOC0z OWExLTllZjItNDM1NzU4Y2NmZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMmD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTk4YGJWxqIDj9JvVtvatozyPf5tau7V15QemXmr3C91+Kcj4uK5yzg MoqUuHA/s/Rn5Nf3lmA5/redKbXCUocz2e+TjhHRNsQ3zUw/5jelChCU4oSZFfga WkxZgqyN4BfkaoKIvlLQntgl1Zv7DnEsKuEK4207yfUbqP2f6Jp+UtwfPhwk5uIP pWEowiHRg/L6ccKMUtqxHz4MI01KKDiX7TwnIuK+KF7q2QO+Uby0x7EE1pbzlcOJ LyNWXJvrQS/eEX+8k1bHXEV9U0eSVgYAzFshBy0P1wbcshHh2cvo+mpEaYHvfWIq V/PDhTATL749rEdGvze7Fw8XF4tkvrA= -----END CERTIFICATE-----Generated at Fri Oct 10 20:06:29 2025 by rpki-client