$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/329556ab-7a53-3bd1-b4db-6fbe43223b99.roa File: 329556ab-7a53-3bd1-b4db-6fbe43223b99.roa (raw, json) Hash identifier: BwwBimVHflj36/1xRTbGQkJP4LBEobATLoi+i7nMXMs= Subject key identifier: A8:F6:77:AE:7E:AF:08:D4:5C:19:D4:55:FB:19:FA:F7:68:9F:35:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B79BCC3867EA87C93B593B360 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/329556ab-7a53-3bd1-b4db-6fbe43223b99.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 50.96.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c3:86:7e:a8:7c:93:b5:93:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=a329aad0-3b62-4655-bbc5-f8be86b8398b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a0:de:8f:43:da:fd:9e:6f:ac:8e:4c:97:c1: 7a:9d:b1:88:de:9a:55:cb:16:11:43:bf:78:54:67: 60:b0:d3:14:64:e0:a1:c0:0f:ea:2e:8f:3b:24:3a: fb:f0:93:81:ee:03:d1:a7:dd:a0:2a:37:95:1f:f7: 8d:28:dd:70:76:d9:8c:ac:22:e7:a6:55:f5:9b:2e: fc:af:c0:68:33:04:fa:4d:34:47:87:11:34:ed:fa: 2a:1c:81:60:07:b6:ba:47:52:6f:10:ea:3c:63:79: a2:96:8b:a6:26:93:d5:b7:62:54:92:32:62:af:34: 2c:94:26:70:12:4e:e9:82:bd:47:45:04:e8:e0:be: 97:d8:75:29:58:f1:d7:16:cd:6e:2c:94:c2:a2:17: 0c:dc:42:40:e8:0f:55:8f:69:ae:b3:b5:97:f0:14: 2e:c1:46:35:57:86:75:74:d1:f7:87:cd:42:bf:d6: aa:a6:79:04:95:72:a8:92:c1:f4:48:a7:b6:3a:b0: 5a:da:17:9e:43:7b:a3:d2:ca:31:9c:6b:8d:30:23: 4c:21:cd:22:b6:52:31:8f:eb:d7:35:61:92:00:3d: de:66:87:f2:2d:67:29:8a:59:b2:5a:13:c9:96:dd: 33:60:93:75:ce:8e:74:61:cb:25:10:a4:19:d9:7f: e8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F6:77:AE:7E:AF:08:D4:5C:19:D4:55:FB:19:FA:F7:68:9F:35:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/329556ab-7a53-3bd1-b4db-6fbe43223b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a8:fd:f4:29:d8:d0:43:d3:e3:60:b5:dd:e7:cf:68:9b:a1: 71:3b:79:85:cd:35:f8:a6:fb:51:c7:c6:5e:68:5a:18:fa:ea: 29:06:38:6e:e6:81:9f:b1:b7:7b:07:d7:45:f0:7b:98:0b:fd: 8a:20:6f:81:50:c2:6e:1e:8d:ba:0e:ba:ed:d3:4a:ab:3c:5a: ac:e2:1b:2d:f1:1e:b4:69:b5:d4:f0:cc:24:76:77:d6:6b:45: 5f:a2:6a:94:0b:26:4c:e0:d6:49:f5:1d:c2:e6:f8:9d:82:45: 18:05:39:f0:87:27:ef:2c:3b:af:44:66:4a:77:36:5d:3c:5f: b4:bd:72:cc:cf:f5:1e:09:fd:5c:d2:d6:be:64:3b:92:62:dd: b1:cb:67:d5:c6:2b:49:7c:4c:0b:a7:38:40:36:45:06:4c:e1: 51:5c:ee:da:fe:d1:a8:fb:36:ab:81:3c:40:8a:23:68:20:f7: 8a:74:8d:60:29:89:1c:f1:b3:60:31:5a:30:57:a2:6b:82:f0: 32:e2:d8:24:c1:dc:98:b1:0b:f9:c6:c6:4d:e6:0a:2d:83:da: 15:07:62:11:7c:ff:40:92:a2:0d:71:b3:59:a9:ea:c6:8e:20: b1:5a:d4:92:2c:e0:b5:7e:c6:04:88:aa:24:a3:96:df:f0:09: 79:87:66:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMOGfqh8k7WTs2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YTMyOWFhZDAtM2I2Mi00NjU1LWJiYzUtZjhiZTg2YjgzOThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKDej0Pa/Z5vrI5Ml8F6nbGI3ppVyxYRQ794 VGdgsNMUZOChwA/qLo87JDr78JOB7gPRp92gKjeVH/eNKN1wdtmMrCLnplX1my78 r8BoMwT6TTRHhxE07foqHIFgB7a6R1JvEOo8Y3miloumJpPVt2JUkjJirzQslCZw Ek7pgr1HRQTo4L6X2HUpWPHXFs1uLJTCohcM3EJA6A9Vj2mus7WX8BQuwUY1V4Z1 dNH3h81Cv9aqpnkElXKoksH0SKe2OrBa2heeQ3uj0soxnGuNMCNMIc0itlIxj+vX NWGSAD3eZofyLWcpilmyWhPJlt0zYJN1zo50YcslEKQZ2X/oLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKj2d65+rwjUXBnUVfsZ+vdonzWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzI5NTU2YWItN2E1My0z YmQxLWI0ZGItNmZiZTQzMjIzYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmDrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSo/fQp2NBD0+Ngtd3nz2iboXE7eYXNNfim+1HHxl5oWhj66ikGOG7m gZ+xt3sH10Xwe5gL/Yogb4FQwm4ejboOuu3TSqs8WqziGy3xHrRptdTwzCR2d9Zr RV+iapQLJkzg1kn1HcLm+J2CRRgFOfCHJ+8sO69EZkp3Nl08X7S9cszP9R4J/VzS 1r5kO5Ji3bHLZ9XGK0l8TAunOEA2RQZM4VFc7tr+0aj7NquBPECKI2gg94p0jWAp iRzxs2AxWjBXomuC8DLi2CTB3JixC/nGxk3mCi2D2hUHYhF8/0CSog1xs1mp6saO ILFa1JIs4LV+xgSIqiSjlt/wCXmHZlM= -----END CERTIFICATE-----Generated at Fri Oct 10 17:51:39 2025 by rpki-client