$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/157db028-771f-323b-9944-ce053ce2571d.roa File: 157db028-771f-323b-9944-ce053ce2571d.roa (raw, json) Hash identifier: 0BR1dMd7pLA7yF2BdEzs29+GKQ7VLTIQMsWFSo5u/VA= Subject key identifier: DA:94:DA:99:FD:5C:60:B0:20:08:75:6D:D4:24:5A:D7:9C:78:6C:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B1C3752ADCEC97FF1E87FF2C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/157db028-771f-323b-9944-ce053ce2571d.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 50.96.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:52:ad:ce:c9:7f:f1:e8:7f:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=11bd0183-2f80-4bd1-96fe-cef03133b32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0c:5a:3b:ee:2f:09:6f:42:62:bc:fe:05:68: 62:cb:b3:56:70:6c:42:c0:0d:e7:29:dc:7a:ef:0a: 18:cc:84:71:36:fe:0e:e3:7e:16:0e:5f:36:7e:96: cf:b7:bb:30:29:43:ee:23:ca:a8:3e:e0:29:ee:d0: 6a:3e:af:56:4f:dc:c6:ea:7e:2d:07:0b:5f:f6:73: 41:16:51:f4:0e:0a:5c:ea:f1:74:59:01:83:0a:37: 27:e8:2d:5d:92:10:86:86:f6:a9:16:4e:87:da:2e: 62:0a:6e:a9:2b:2b:d3:c7:a4:32:ae:fb:d9:c4:e6: 0d:13:79:19:97:69:42:63:2e:61:e7:b7:be:59:ca: 36:36:6a:0e:bd:ce:4d:a0:60:17:2b:e5:b0:2a:d1: 44:40:a6:c9:65:67:0d:fb:92:92:22:c9:4d:10:22: 63:0d:f6:f2:3f:2c:c6:fb:fc:e4:21:9e:8e:48:4a: 0e:6e:c5:2c:49:10:b0:3f:db:1c:97:4f:bc:f0:7c: 04:7e:27:8f:31:29:7f:5f:40:0f:9e:7f:0a:c1:cf: 0d:cc:39:90:07:f6:3a:c9:94:f0:5b:85:14:e2:34: 8d:c4:c7:24:f6:86:e1:1b:8b:1b:0a:8c:70:9a:88: 35:4a:2d:f9:32:a4:65:26:a5:81:80:63:52:ad:f6: 99:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:94:DA:99:FD:5C:60:B0:20:08:75:6D:D4:24:5A:D7:9C:78:6C:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/157db028-771f-323b-9944-ce053ce2571d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:12:c5:eb:5b:a5:e4:83:22:b1:ce:a6:35:8f:10:cb:23:f3: ae:93:b2:83:b7:2c:4b:57:78:af:f9:ae:fb:cb:09:11:c3:68: 49:7c:98:ea:9c:40:26:9f:af:8a:65:c7:61:d9:1b:92:5a:ce: e6:83:14:ad:f1:03:8f:4a:48:88:65:ed:c5:2f:53:49:a7:57: 47:74:19:52:68:ed:f8:bd:97:c1:16:2e:bd:ca:b1:fd:ee:87: 37:01:62:30:ad:ff:95:74:e2:c0:92:0c:21:a5:83:6b:07:b0: 90:23:33:d3:ec:8f:e3:54:9c:7a:69:00:6d:cd:64:78:df:7d: 8a:4c:50:df:e2:14:b0:3d:ca:62:93:15:55:d6:3a:bf:41:72: 69:8d:03:37:d2:2d:f5:b1:db:a8:90:0f:00:3a:59:fe:3e:f6: a1:32:8b:9d:d0:af:63:9c:83:9f:28:60:a5:33:96:14:95:a2: 75:ca:67:1d:a5:23:d7:41:6c:69:da:7d:de:18:d6:67:99:34: a1:db:41:34:1b:19:65:97:96:d8:04:f5:0c:9e:32:27:2f:1c: 65:95:6d:56:a1:2b:4e:b1:b2:96:eb:3a:b2:0f:9b:bf:da:9b: 8c:8b:66:d7:86:9e:20:34:fc:73:3b:50:ff:6f:8e:46:19:31: 87:61:71:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN1Ktzsl/8eh/8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MTFiZDAxODMtMmY4MC00YmQxLTk2ZmUtY2VmMDMxMzNiMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AxaO+4vCW9CYrz+BWhiy7NWcGxCwA3nKdx6 7woYzIRxNv4O434WDl82fpbPt7swKUPuI8qoPuAp7tBqPq9WT9zG6n4tBwtf9nNB FlH0Dgpc6vF0WQGDCjcn6C1dkhCGhvapFk6H2i5iCm6pKyvTx6QyrvvZxOYNE3kZ l2lCYy5h57e+Wco2NmoOvc5NoGAXK+WwKtFEQKbJZWcN+5KSIslNECJjDfbyPyzG +/zkIZ6OSEoObsUsSRCwP9scl0+88HwEfiePMSl/X0APnn8Kwc8NzDmQB/Y6yZTw W4UU4jSNxMck9obhG4sbCoxwmog1Si35MqRlJqWBgGNSrfaZKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqU2pn9XGCwIAh1bdQkWteceGzJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTU3ZGIwMjgtNzcxZi0z MjNiLTk5NDQtY2UwNTNjZTI1NzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkSxetbpeSDIrHOpjWPEMsj866TsoO3LEtXeK/5rvvLCRHDaEl8mOqc QCafr4plx2HZG5JazuaDFK3xA49KSIhl7cUvU0mnV0d0GVJo7fi9l8EWLr3Ksf3u hzcBYjCt/5V04sCSDCGlg2sHsJAjM9Psj+NUnHppAG3NZHjffYpMUN/iFLA9ymKT FVXWOr9BcmmNAzfSLfWx26iQDwA6Wf4+9qEyi53Qr2Ocg58oYKUzlhSVonXKZx2l I9dBbGnafd4Y1meZNKHbQTQbGWWXltgE9QyeMicvHGWVbVahK06xspbrOrIPm7/a m4yLZteGniA0/HM7UP9vjkYZMYdhcX0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:57 2025 by rpki-client