$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dbd7895-f3ba-3d0d-b188-30de2693e387.roa File: 4dbd7895-f3ba-3d0d-b188-30de2693e387.roa (raw, json) Hash identifier: eB8U9Bfy1Rxz0b/Atl8TTlWjejZ3CemZR8Ha5PxMIlY= Subject key identifier: 72:12:C5:0B:84:17:D1:87:DD:ED:51:05:A9:38:70:EC:A5:09:97:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B0B76D65779BDFFAA8C3BFFE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dbd7895-f3ba-3d0d-b188-30de2693e387.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 7029 IP address blocks: 50.96.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d6:57:79:bd:ff:aa:8c:3b:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=25250697-e85d-44ae-a0e6-21d539c2da20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:77:1f:e9:df:9c:d4:88:08:aa:e2:db:c3:5e: e4:b0:e5:2f:eb:06:d2:57:e2:ed:a1:44:d2:e6:22: 22:da:14:a8:39:6f:d5:8a:e1:89:96:b6:a4:80:b1: a3:ae:b0:9d:e8:e2:74:e7:54:ce:28:8a:09:a6:be: 96:57:79:f4:28:85:ba:c8:df:fe:3c:52:57:6d:70: 8e:3e:21:83:7b:03:40:33:fe:1f:84:7f:87:34:bd: 45:07:d5:23:8b:72:93:bb:4a:ed:9b:14:23:33:af: e6:3e:aa:56:ad:2e:b5:35:74:47:0f:a8:ce:af:71: 86:4f:6f:46:86:70:85:c9:cf:22:d8:f5:d5:0f:ae: 89:c6:f3:14:67:e5:52:1c:fc:18:4a:72:b6:42:56: 32:23:89:98:83:a9:3b:0d:d6:11:86:ac:10:32:93: dd:02:00:e1:94:d3:e0:1b:f5:75:c9:6d:3d:90:06: e1:39:77:8b:1e:80:94:e2:92:88:6a:71:47:a4:d1: db:6e:4f:f8:49:7b:d1:a5:4a:c4:2a:f0:0c:b9:df: 06:51:2b:14:92:43:3c:b0:b3:ba:70:f4:d3:ed:d0: 5a:af:81:0b:b8:9c:01:5d:c6:fe:c6:e0:76:26:2e: e1:69:43:0e:15:ef:36:de:86:f9:da:41:ec:1e:e6: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:12:C5:0B:84:17:D1:87:DD:ED:51:05:A9:38:70:EC:A5:09:97:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dbd7895-f3ba-3d0d-b188-30de2693e387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:72:7c:dc:57:e4:a6:71:ba:1e:98:cf:b5:8a:11:d5:7f:98: 07:63:91:fa:27:3f:a2:10:b5:18:94:49:1d:c4:2e:bb:bd:df: a2:53:07:ff:1c:79:dc:3f:c3:d3:a5:a2:41:ce:fa:f9:34:eb: 7d:4c:17:75:43:27:a6:73:a3:b8:d7:4a:55:07:51:a1:b4:bc: 97:2b:eb:4d:54:15:f2:76:03:4b:42:1e:ee:be:b4:8f:60:98: 08:96:f7:e8:b5:86:7a:9c:1f:a6:fe:df:7b:69:82:71:4d:87: a0:44:cb:62:c7:36:71:b5:b1:2c:ec:8d:43:02:e1:51:58:e8: dd:4e:f1:54:a5:d9:ad:9f:1d:46:f0:c4:57:26:13:b3:61:43: 06:26:3f:73:11:d0:0b:f9:f7:d6:36:ea:23:53:60:01:95:b3: f6:f2:9e:64:e0:e3:d8:1e:d7:56:4a:06:d4:08:79:3b:17:bc: d9:75:eb:7c:44:c9:9e:0d:ee:d9:80:08:2e:05:a2:3d:ed:8d: cf:d8:e5:41:89:d7:ec:80:30:f0:90:11:80:b2:2d:9d:66:c6: e8:d4:0f:3c:17:6b:d3:1b:c3:df:d4:78:66:dc:00:14:d3:0e: fa:65:ba:12:dd:2f:4f:ca:f2:39:ab:e2:5c:8c:01:12:30:7c: d0:82:2b:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtZXeb3/qow7/+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MjUyNTA2OTctZTg1ZC00NGFlLWEwZTYtMjFkNTM5YzJkYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXcf6d+c1IgIquLbw17ksOUv6wbSV+LtoUTS 5iIi2hSoOW/ViuGJlrakgLGjrrCd6OJ051TOKIoJpr6WV3n0KIW6yN/+PFJXbXCO PiGDewNAM/4fhH+HNL1FB9Uji3KTu0rtmxQjM6/mPqpWrS61NXRHD6jOr3GGT29G hnCFyc8i2PXVD66JxvMUZ+VSHPwYSnK2QlYyI4mYg6k7DdYRhqwQMpPdAgDhlNPg G/V1yW09kAbhOXeLHoCU4pKIanFHpNHbbk/4SXvRpUrEKvAMud8GUSsUkkM8sLO6 cPTT7dBar4ELuJwBXcb+xuB2Ji7haUMOFe823ob52kHsHuZ5twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHISxQuEF9GH3e1RBak4cOylCZeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGRiZDc4OTUtZjNiYS0z ZDBkLWIxODgtMzBkZTI2OTNlMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmBTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlyfNxX5KZxuh6Yz7WKEdV/mAdjkfonP6IQtRiUSR3ELru936JTB/8c edw/w9OlokHO+vk0631MF3VDJ6Zzo7jXSlUHUaG0vJcr601UFfJ2A0tCHu6+tI9g mAiW9+i1hnqcH6b+33tpgnFNh6BEy2LHNnG1sSzsjUMC4VFY6N1O8VSl2a2fHUbw xFcmE7NhQwYmP3MR0Av599Y26iNTYAGVs/bynmTg49ge11ZKBtQIeTsXvNl163xE yZ4N7tmACC4Foj3tjc/Y5UGJ1+yAMPCQEYCyLZ1mxujUDzwXa9Mbw9/UeGbcABTT DvpluhLdL0/K8jmr4lyMARIwfNCCKzs= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:23 2025 by rpki-client