$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9714679-7e23-3e0c-a9ac-644ebe6e1511.roa File: c9714679-7e23-3e0c-a9ac-644ebe6e1511.roa (raw, json) Hash identifier: NZGBXqe9zw5+pC9v+YCSqCL4DCDMMkmEY9MMChJ+uYU= Subject key identifier: DA:03:A2:F9:1B:D8:7A:02:5C:9B:C0:A4:E2:BE:B9:F7:F5:16:16:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF0C820CADD1B937DC770 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9714679-7e23-3e0c-a9ac-644ebe6e1511.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 50.96.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f0:c8:20:ca:dd:1b:93:7d:c7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=16c4913a-8b9c-4da5-8245-5da2eb599b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:38:c8:b1:0d:9c:59:4c:2a:95:75:be:60: 6e:cf:90:be:2c:e1:69:2c:ec:d0:13:53:85:7e:68: 73:b5:f5:49:e9:73:9c:f0:dd:5b:fb:0c:0c:d4:c8: 20:18:48:5f:ee:85:1f:9f:5b:9b:d6:9b:0a:41:30: 6d:e9:5f:28:6f:9e:33:01:8a:ba:ca:9e:40:45:f4: 4e:eb:c4:33:0e:77:01:ac:eb:28:9c:45:e9:7f:df: c7:6d:4c:be:88:1d:25:b6:9c:fb:1c:65:3b:9b:85: 6f:95:e7:29:01:43:cb:22:c1:11:0d:88:6e:e3:0e: b0:c7:0c:64:6e:77:a7:ba:e4:bd:50:53:a6:9a:47: 6a:d5:e0:c9:9d:89:e0:14:97:9b:63:49:a0:cb:ed: 60:cd:48:32:d0:58:e4:10:cd:b1:ce:2a:a3:cf:67: e0:eb:0e:79:fb:4c:07:15:9a:11:60:6f:b2:be:91: 8e:e9:51:22:11:24:09:f3:7f:67:87:d4:b1:30:17: 50:cb:cc:02:3e:29:24:7c:90:c0:6d:e9:14:01:5c: 78:27:70:b3:75:b9:47:00:53:30:90:9e:eb:b2:69: d5:61:be:1d:a7:1f:d4:78:9b:df:68:40:3f:25:a9: 8c:58:43:be:4e:34:94:e2:23:0e:c6:bc:c7:40:e2: 45:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:03:A2:F9:1B:D8:7A:02:5C:9B:C0:A4:E2:BE:B9:F7:F5:16:16:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9714679-7e23-3e0c-a9ac-644ebe6e1511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:15:9a:4b:26:f8:98:2b:36:f1:2a:e9:a0:56:e1:a0:c5:35: e7:6c:82:24:f2:bc:b2:7f:88:c8:da:d1:c9:31:9b:86:05:4b: db:2d:15:58:48:30:f9:28:82:f5:90:57:49:22:1d:46:c4:bb: 00:30:2f:ec:da:ac:83:00:dc:d0:cb:56:1e:02:9c:b6:b1:24: 76:f0:c6:be:af:bd:71:2e:7a:5e:62:ef:49:d5:30:b1:73:3b: e4:2a:29:cb:e4:c8:e7:ac:4f:db:6b:7b:db:16:ce:2a:ee:af: b8:0f:58:c9:f2:7c:e3:57:4e:d6:63:e1:0d:65:41:92:6b:b1: 9c:33:ec:9a:3b:ae:2f:c2:8a:5d:53:b6:16:4a:6d:33:9a:53: 3c:a4:48:9f:20:ee:f5:c5:ab:ce:20:df:fe:84:a8:ce:20:39: 2e:8a:c7:bd:9e:4e:56:65:54:f7:8a:73:dd:40:c0:f0:e7:49: 8c:80:54:14:09:5b:ea:5d:0b:60:93:55:aa:dd:a1:12:b2:94: 8d:98:1d:af:03:36:e0:8a:a0:d6:fb:5f:d7:ed:ee:96:36:7a: d1:02:6b:bb:c1:6a:7c:90:b1:74:58:4b:f5:e0:47:f2:3d:47: 90:0c:e7:2d:3f:0e:0a:98:f6:9a:ac:35:e8:97:9c:45:6b:f7: b8:aa:e6:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPDIIMrdG5N9x3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTZjNDkxM2EtOGI5Yy00ZGE1LTgyNDUtNWRhMmViNTk5YjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7c4yLENnFlMKpV1vmBuz5C+LOFpLOzQE1OF fmhztfVJ6XOc8N1b+wwM1MggGEhf7oUfn1ub1psKQTBt6V8ob54zAYq6yp5ARfRO 68QzDncBrOsonEXpf9/HbUy+iB0ltpz7HGU7m4VvlecpAUPLIsERDYhu4w6wxwxk bnenuuS9UFOmmkdq1eDJnYngFJebY0mgy+1gzUgy0FjkEM2xziqjz2fg6w55+0wH FZoRYG+yvpGO6VEiESQJ839nh9SxMBdQy8wCPikkfJDAbekUAVx4J3CzdblHAFMw kJ7rsmnVYb4dpx/UeJvfaEA/JamMWEO+TjSU4iMOxrzHQOJFCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoDovkb2HoCXJvApOK+uff1FhbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzk3MTQ2NzktN2UyMy0z ZTBjLWE5YWMtNjQ0ZWJlNmUxNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwVmksm+JgrNvEq6aBW4aDFNedsgiTyvLJ/iMja0ckxm4YFS9stFVhI MPkogvWQV0kiHUbEuwAwL+zarIMA3NDLVh4CnLaxJHbwxr6vvXEuel5i70nVMLFz O+QqKcvkyOesT9tre9sWzirur7gPWMnyfONXTtZj4Q1lQZJrsZwz7Jo7ri/Cil1T thZKbTOaUzykSJ8g7vXFq84g3/6EqM4gOS6Kx72eTlZlVPeKc91AwPDnSYyAVBQJ W+pdC2CTVardoRKylI2YHa8DNuCKoNb7X9ft7pY2etECa7vBanyQsXRYS/XgR/I9 R5AM5y0/DgqY9pqsNeiXnEVr97iq5nI= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:37 2025 by rpki-client