$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38934aa5-b219-3bc3-8233-4a3a4406ecd1.roa File: 38934aa5-b219-3bc3-8233-4a3a4406ecd1.roa (raw, json) Hash identifier: IP9F2AE1GNzp+IYzd14TSBsAm6dBV9BhNFLtrgwPmnM= Subject key identifier: EB:23:19:5B:40:10:C9:E6:66:71:78:3B:58:F6:F6:4A:EF:26:FF:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D9CDF99ECFB834578A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38934aa5-b219-3bc3-8233-4a3a4406ecd1.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 50.96.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d9:cd:f9:9e:cf:b8:34:57:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=c279d292-f6ab-4946-951a-6da50ad5d2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f3:b9:55:8d:0f:f5:34:28:07:c8:35:45:1f: 5d:16:28:7b:5e:d2:35:69:17:b9:e7:a1:8d:dc:43: 32:96:e7:38:03:b7:74:49:88:1e:42:aa:8b:42:50: 53:42:2a:75:63:f3:7e:ae:81:b9:2a:5f:64:a4:7d: 59:18:b7:99:29:bb:6b:9c:ed:30:de:9b:38:f4:95: 41:a0:57:4a:fb:d7:d1:fd:85:22:a8:52:3d:2b:d8: 71:0a:c1:af:85:f2:42:1e:fb:5e:e5:c8:0f:e1:c6: 83:b6:15:d2:1b:43:c3:bb:db:99:47:76:3c:f5:df: 0d:99:ca:06:aa:58:d1:70:8d:ec:20:07:79:e9:44: b4:1f:64:7b:9f:24:93:84:05:ec:51:2e:06:fa:a4: 50:61:a5:04:0f:f9:db:15:d6:29:12:79:7b:d3:27: 65:34:4f:0e:f1:00:79:c8:61:f8:fc:fe:b5:38:91: b9:21:24:59:37:6b:4e:da:e8:70:1b:11:a9:a0:79: da:23:d5:d3:10:ac:f4:fd:02:9c:8d:f3:d4:db:3c: d8:cc:76:71:7c:3d:fe:84:a8:1e:95:2b:d0:a0:40: 0e:e6:ea:1c:96:20:b6:f0:28:9c:08:58:4f:92:83: fe:08:41:29:39:1f:6c:76:d0:11:34:af:92:13:f0: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:23:19:5B:40:10:C9:E6:66:71:78:3B:58:F6:F6:4A:EF:26:FF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38934aa5-b219-3bc3-8233-4a3a4406ecd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7c:cb:0b:13:9d:b1:b5:5b:a9:fd:9e:6f:64:d5:9b:be:34: d9:3e:c2:5e:1b:87:cc:af:12:7f:4b:76:b7:d6:36:56:61:72: c4:45:b4:74:bc:2a:05:69:e0:63:a7:ed:24:68:e9:9e:7d:01: 26:a0:8a:18:bb:c4:a2:df:e5:2d:6d:5c:7f:67:6a:26:be:8c: d9:6a:53:40:01:8d:ca:3e:89:8e:48:8f:9c:c4:14:9d:c5:d6: 18:8c:f1:ad:02:81:02:71:ac:e7:a9:ce:31:4c:b6:b2:0c:b1: 53:42:1e:35:7e:a3:eb:b0:ee:b8:2b:2e:13:18:96:f2:b2:e5: 95:d2:0a:69:ce:e3:c9:f1:cc:51:6f:9c:8a:ca:cd:67:35:94: b9:d0:9f:5c:52:05:c7:f5:70:05:94:17:f0:6d:01:0f:0c:5a: 95:cb:83:ab:b9:c2:fb:ac:f0:de:83:9c:61:32:2e:87:9b:c3: ec:7e:4c:cb:de:79:6a:c4:a6:78:00:c3:64:6a:ed:52:b6:c0: a1:11:62:75:a2:e6:57:b7:41:f7:50:da:55:7e:71:fa:89:ac: 06:9a:50:98:56:45:80:e7:9e:5f:59:58:29:df:99:40:f0:d3: 94:d0:3a:1b:30:b0:1f:ba:47:2f:a3:8f:aa:76:41:b4:77:52: 92:6e:f3:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNnN+Z7PuDRXioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YzI3OWQyOTItZjZhYi00OTQ2LTk1MWEtNmRhNTBhZDVkMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fO5VY0P9TQoB8g1RR9dFih7XtI1aRe556GN 3EMyluc4A7d0SYgeQqqLQlBTQip1Y/N+roG5Kl9kpH1ZGLeZKbtrnO0w3ps49JVB oFdK+9fR/YUiqFI9K9hxCsGvhfJCHvte5cgP4caDthXSG0PDu9uZR3Y89d8NmcoG qljRcI3sIAd56US0H2R7nySThAXsUS4G+qRQYaUED/nbFdYpEnl70ydlNE8O8QB5 yGH4/P61OJG5ISRZN2tO2uhwGxGpoHnaI9XTEKz0/QKcjfPU2zzYzHZxfD3+hKge lSvQoEAO5uocliC28CicCFhPkoP+CEEpOR9sdtARNK+SE/AMDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsjGVtAEMnmZnF4O1j29krvJv8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzg5MzRhYTUtYjIxOS0z YmMzLTgyMzMtNGEzYTQ0MDZlY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId8ywsTnbG1W6n9nm9k1Zu+NNk+wl4bh8yvEn9LdrfWNlZhcsRFtHS8 KgVp4GOn7SRo6Z59ASagihi7xKLf5S1tXH9naia+jNlqU0ABjco+iY5Ij5zEFJ3F 1hiM8a0CgQJxrOepzjFMtrIMsVNCHjV+o+uw7rgrLhMYlvKy5ZXSCmnO48nxzFFv nIrKzWc1lLnQn1xSBcf1cAWUF/BtAQ8MWpXLg6u5wvus8N6DnGEyLoebw+x+TMve eWrEpngAw2Rq7VK2wKERYnWi5le3QfdQ2lV+cfqJrAaaUJhWRYDnnl9ZWCnfmUDw 05TQOhswsB+6Ry+jj6p2QbR3UpJu87w= -----END CERTIFICATE-----Generated at Wed Aug 6 11:04:26 2025 by rpki-client