$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19b7a7c1-f711-3375-a9d3-2fa686eb13a6.roa File: 19b7a7c1-f711-3375-a9d3-2fa686eb13a6.roa (raw, json) Hash identifier: YtcSmoZdE6hIpztSc+VfRipAyqtKvZsX0irmZIzDEWs= Subject key identifier: 84:23:37:12:55:1E:A6:91:61:8D:DD:1B:87:FF:1D:FA:E0:EB:AC:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C557111A82C580E6B3200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19b7a7c1-f711-3375-a9d3-2fa686eb13a6.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 50.96.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:55:71:11:a8:2c:58:0e:6b:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=a78c2c62-b5b3-4cbe-aa16-ecc7d413d4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:90:59:c4:fb:f4:6f:bd:13:87:aa:25:52: 3c:ae:b6:0a:29:37:d0:6e:bf:c6:a8:5b:ca:81:a3: 7e:4e:d1:b9:7c:eb:70:0d:f0:24:5e:31:20:67:cc: 29:7b:d4:29:b4:aa:63:e9:d0:a9:86:b7:57:f3:5c: 19:40:00:57:ac:ad:03:82:62:e6:b4:dd:b3:3c:53: de:31:f2:49:5d:ad:2e:66:08:13:ed:3a:09:c7:cb: 9f:89:a5:44:49:1f:3c:ab:97:bf:5d:57:ea:90:f6: ca:ac:0e:dd:24:56:d2:a8:d9:52:5c:c7:b6:70:df: cc:c6:34:42:e7:b4:c9:a7:36:b7:d8:f3:a5:9a:f3: c2:37:51:20:ba:89:94:93:1e:e8:97:89:ef:1d:f5: 95:63:c0:74:ba:60:ab:c2:3f:1b:2a:2c:9f:f6:0c: 5a:fc:50:d8:f5:26:b8:4a:21:98:16:d3:6e:51:a4: 41:8d:1f:54:5d:a5:e9:ef:9b:25:f9:c8:a1:dc:85: 3b:5b:c6:56:b8:53:c3:e3:cb:ca:41:8e:ca:da:cf: 2f:ad:81:69:e0:3d:09:ae:49:8d:b4:92:2f:b0:44: 90:e2:ec:0d:f4:e1:bb:ef:7a:9f:23:6a:21:53:b8: aa:d7:28:f7:6f:64:46:70:c2:14:fb:76:64:5c:6e: b6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:23:37:12:55:1E:A6:91:61:8D:DD:1B:87:FF:1D:FA:E0:EB:AC:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19b7a7c1-f711-3375-a9d3-2fa686eb13a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:01:12:f4:85:4f:86:83:d1:dc:b3:84:31:bf:8c:41:90:cc: 4a:8d:85:8b:09:ac:03:ff:62:12:97:d4:0c:a9:1a:38:b6:54: 45:16:07:3a:c7:cd:09:a1:ea:1a:11:7a:c0:f1:d8:83:da:75: cc:e4:ff:14:85:af:7e:0c:04:a1:2f:b2:f9:81:a2:54:24:75: 49:97:2a:3d:8c:30:43:57:ae:65:d2:02:88:83:ba:ff:9b:6d: d4:cf:e8:ff:a5:ca:5e:46:01:43:75:f7:b4:3a:6d:7b:b9:2f: 0f:db:1b:cb:9a:e7:3f:b8:8f:09:aa:49:a3:85:b4:a3:a6:78: 1b:28:9e:2b:05:38:8d:42:0a:47:63:b2:b9:a0:66:63:7f:ea: 73:61:b2:a1:15:0b:b6:3b:fc:35:b7:9c:3e:ce:50:e2:04:4f: 93:89:0f:a8:81:b6:a4:76:ca:38:8d:9f:49:d6:f2:de:c1:e7: 54:f3:e4:a9:66:39:8f:be:91:94:d3:80:96:b5:d4:6d:e0:0f: 16:f0:61:f9:0f:57:49:fd:00:b6:fe:a1:73:95:8f:36:1b:16: b9:7b:aa:a7:ea:8e:21:50:19:68:e2:06:0f:d8:b2:17:04:83: ca:f5:21:f8:35:5e:42:99:a2:38:f6:a4:00:a3:74:11:9f:dc: 40:8e:f4:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLFVxEagsWA5rMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk YTc4YzJjNjItYjViMy00Y2JlLWFhMTYtZWNjN2Q0MTNkNGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihuQWcT79G+9E4eqJVI8rrYKKTfQbr/GqFvK gaN+TtG5fOtwDfAkXjEgZ8wpe9QptKpj6dCphrdX81wZQABXrK0DgmLmtN2zPFPe MfJJXa0uZggT7ToJx8ufiaVESR88q5e/XVfqkPbKrA7dJFbSqNlSXMe2cN/MxjRC 57TJpza32POlmvPCN1EguomUkx7ol4nvHfWVY8B0umCrwj8bKiyf9gxa/FDY9Sa4 SiGYFtNuUaRBjR9UXaXp75sl+cih3IU7W8ZWuFPD48vKQY7K2s8vrYFp4D0JrkmN tJIvsESQ4uwN9OG773qfI2ohU7iq1yj3b2RGcMIU+3ZkXG62HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQjNxJVHqaRYY3dG4f/Hfrg66wLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTliN2E3YzEtZjcxMS0z Mzc1LWE5ZDMtMmZhNjg2ZWIxM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMmD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEBEvSFT4aD0dyzhDG/jEGQzEqNhYsJrAP/YhKX1AypGji2VEUWBzrH zQmh6hoResDx2IPadczk/xSFr34MBKEvsvmBolQkdUmXKj2MMENXrmXSAoiDuv+b bdTP6P+lyl5GAUN197Q6bXu5Lw/bG8ua5z+4jwmqSaOFtKOmeBsonisFOI1CCkdj srmgZmN/6nNhsqEVC7Y7/DW3nD7OUOIET5OJD6iBtqR2yjiNn0nW8t7B51Tz5Klm OY++kZTTgJa11G3gDxbwYfkPV0n9ALb+oXOVjzYbFrl7qqfqjiFQGWjiBg/YshcE g8r1Ifg1XkKZojj2pACjdBGf3ECO9IA= -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:11 2025 by rpki-client