$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a970266b-fd60-3d1a-b987-e2161d5dadeb.roa File: a970266b-fd60-3d1a-b987-e2161d5dadeb.roa (raw, json) Hash identifier: fH/1vALl0UrzloPgmPZFfd7HVjzh+MvsRZL6LO0Vdsc= Subject key identifier: 1A:5E:8F:5C:53:DE:40:F5:B5:D8:87:88:72:B3:44:67:B0:9B:63:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B79BCC10874C51A00EFD82AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a970266b-fd60-3d1a-b987-e2161d5dadeb.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 50.96.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c1:08:74:c5:1a:00:ef:d8:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=32f48269-13ff-4968-b6b1-d1b9b24719a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:4c:91:1a:5e:7c:92:b9:ca:07:9c:07:d0: 8b:2c:58:27:8a:bf:43:a3:21:53:6b:01:18:f1:be: c4:ef:87:68:0b:26:21:af:93:68:b5:3d:e7:24:d5: fa:50:a5:ac:0e:17:5a:13:44:86:06:28:eb:b0:80: 3e:ed:77:35:e9:0d:e6:56:09:25:62:4b:f4:7e:70: cf:24:58:55:dc:af:ac:f8:9b:d0:c6:3c:ff:b1:e2: 5f:00:e5:fe:7d:09:f7:e6:1e:4f:d2:85:37:38:71: e4:85:b3:ff:05:80:65:39:78:ff:90:0d:14:74:df: ca:4c:30:d2:2b:62:18:58:6d:1d:65:b1:04:2f:bb: af:71:f0:4f:7b:ed:21:0c:0d:40:03:8e:df:99:72: b9:19:78:8c:33:8c:cb:8a:f5:25:9e:9f:62:51:d9: f2:bc:07:71:99:01:c6:f6:60:04:a6:fd:4d:d7:98: 8d:88:66:16:5c:4f:ae:2a:11:08:ce:2a:14:8f:20: ad:6e:b7:2b:de:21:da:64:e8:c1:7f:11:7e:e8:00: b9:12:95:46:7a:79:40:1c:89:45:a8:10:b8:ed:c7: 0b:b5:63:06:f7:1e:b8:96:61:2b:ac:b0:48:b1:77: f7:08:80:d8:17:1b:d5:31:40:3c:9f:b6:a9:6a:44: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5E:8F:5C:53:DE:40:F5:B5:D8:87:88:72:B3:44:67:B0:9B:63:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a970266b-fd60-3d1a-b987-e2161d5dadeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fe:66:c0:b1:36:65:48:4b:e1:e9:07:c3:09:a6:90:bf:12: 4a:2f:1e:be:c9:ff:35:c6:73:91:df:34:e2:f0:b1:31:c5:2c: 3c:04:22:f7:66:b9:91:51:15:6b:82:cc:ad:1c:48:9d:01:11: 0a:27:14:ea:56:32:d2:cf:6f:48:4e:60:12:93:e9:78:b6:e0: f0:69:97:48:7d:d8:1e:9e:3d:5d:f7:c8:9c:f9:d7:16:e7:7c: e6:4c:bf:f0:e2:97:8a:83:9a:67:5f:90:bd:91:95:15:35:4e: f9:be:66:fb:c3:f9:0e:5e:13:2d:a5:1f:b7:53:39:70:6f:54: 00:c4:28:49:70:86:b6:2f:bb:77:41:a9:93:b8:aa:22:30:ec: 24:9c:8d:00:64:fd:14:f6:42:7a:c5:0c:07:b6:fd:5d:09:63: 57:7e:a9:77:43:fe:96:82:7f:be:eb:e1:60:1e:77:28:21:fb: b3:19:d5:02:7c:f0:9d:d7:8d:55:a1:fc:26:12:05:ad:87:7c: 97:15:1e:3e:cd:1b:c3:3f:a7:44:df:e8:33:80:45:9a:95:c7: fc:7a:11:f0:32:53:cc:d9:d7:33:d5:79:eb:e6:0f:90:b4:8b: df:23:57:f2:82:e2:db:72:88:0c:c8:d7:30:23:bb:33:2d:57: d4:f3:e9:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMEIdMUaAO/YKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MzJmNDgyNjktMTNmZi00OTY4LWI2YjEtZDFiOWIyNDcxOWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnBMkRpefJK5ygecB9CLLFgnir9DoyFTawEY 8b7E74doCyYhr5NotT3nJNX6UKWsDhdaE0SGBijrsIA+7Xc16Q3mVgklYkv0fnDP JFhV3K+s+JvQxjz/seJfAOX+fQn35h5P0oU3OHHkhbP/BYBlOXj/kA0UdN/KTDDS K2IYWG0dZbEEL7uvcfBPe+0hDA1AA47fmXK5GXiMM4zLivUlnp9iUdnyvAdxmQHG 9mAEpv1N15iNiGYWXE+uKhEIzioUjyCtbrcr3iHaZOjBfxF+6AC5EpVGenlAHIlF qBC47ccLtWMG9x64lmErrLBIsXf3CIDYFxvVMUA8n7apakRoIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpej1xT3kD1tdiHiHKzRGewm2MhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTk3MDI2NmItZmQ2MC0z ZDFhLWI5ODctZTIxNjFkNWRhZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMmDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX+ZsCxNmVIS+HpB8MJppC/EkovHr7J/zXGc5HfNOLwsTHFLDwEIvdm uZFRFWuCzK0cSJ0BEQonFOpWMtLPb0hOYBKT6Xi24PBpl0h92B6ePV33yJz51xbn fOZMv/Dil4qDmmdfkL2RlRU1Tvm+ZvvD+Q5eEy2lH7dTOXBvVADEKElwhrYvu3dB qZO4qiIw7CScjQBk/RT2QnrFDAe2/V0JY1d+qXdD/paCf77r4WAedygh+7MZ1QJ8 8J3XjVWh/CYSBa2HfJcVHj7NG8M/p0Tf6DOARZqVx/x6EfAyU8zZ1zPVeevmD5C0 i98jV/KC4ttyiAzI1zAjuzMtV9Tz6RY= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:36 2025 by rpki-client