$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa File: 4ece68d6-689f-306d-aad5-aefc8447de5f.roa (raw, json) Hash identifier: yUnTyvWkjJLXd+gBXMcZNYBU9eu3nHC2A+NN5aOEgi4= Subject key identifier: 2A:E4:84:90:6B:B7:A4:6D:1D:58:14:A1:37:99:90:14:F5:63:B8:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE4048E9F6ED86DC811C2754 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 50.96.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:48:e9:f6:ed:86:dc:81:1c:27:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=5359d5ac-b669-4946-83be-d4de14a91b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:a4:4c:fe:41:e3:d6:ab:79:a0:e9:26:e9: 7d:a4:da:dc:e1:c0:23:5a:37:79:59:ad:7c:ef:f9: 02:b1:21:42:c5:4b:b1:86:87:02:d7:58:eb:cf:29: bc:8b:d9:35:77:b5:c5:66:59:b0:2f:8e:14:bf:15: bc:b2:5d:5b:bf:d5:4a:4a:1c:cf:c9:8a:15:3f:c6: 54:d1:2c:76:d6:18:65:56:5a:7e:df:52:3d:2e:b4: 05:e3:85:c7:bd:9f:9a:06:1b:5e:db:9d:12:eb:df: ad:54:d4:93:93:25:a9:92:38:87:00:0e:e6:41:e3: d8:d3:60:ba:61:4b:7f:ee:b9:56:83:00:cf:24:19: 0d:7a:3f:a2:e2:7f:23:15:25:fe:c3:42:27:8f:ed: 40:de:3a:84:6f:fb:62:e4:44:e4:3c:03:48:a7:90: d8:ba:2d:47:31:f9:8a:37:f0:91:7b:41:be:77:4c: ce:88:59:03:a6:86:e9:7c:a3:f3:f8:0c:20:60:02: 77:95:60:d8:06:83:87:89:0f:89:06:e5:76:bb:92: c5:29:e4:c7:e7:83:2a:d8:85:e7:f6:16:50:93:6e: b3:d3:3b:b9:3c:27:8c:22:45:c7:42:18:40:f9:a9: f0:ff:82:b1:3a:7e:7f:ac:ab:e6:71:ec:7d:8d:9a: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E4:84:90:6B:B7:A4:6D:1D:58:14:A1:37:99:90:14:F5:63:B8:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ece68d6-689f-306d-aad5-aefc8447de5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fe:a9:49:9a:ed:39:60:dd:2c:00:48:c5:d4:5d:bb:74:46: 51:58:0c:60:9d:b9:65:dd:40:38:af:c2:ac:c4:09:57:f9:5a: 19:b6:2e:d0:91:7a:06:bb:7a:2e:80:a9:84:25:de:4f:16:c3: 44:53:94:d6:b5:5d:23:f2:22:9e:30:9a:08:fc:05:a2:63:d3: 73:e5:63:58:6c:68:c0:20:15:f7:b3:fc:35:b5:05:c8:02:1d: f0:78:e1:f6:65:0a:26:e5:ee:84:9a:df:a8:f4:d5:28:8d:7f: c2:e8:d8:41:cd:57:1f:d0:9a:a8:00:02:6e:61:52:de:33:be: 2e:e9:b8:48:12:59:59:db:83:9c:1e:c1:72:e2:bc:98:fe:2e: 44:47:2b:a8:20:9d:09:4d:3d:c5:60:e3:4b:bf:67:19:46:6c: 5b:35:09:b6:3e:c9:bf:cc:12:8f:c9:4b:22:b9:09:de:d2:6e: 02:8d:f6:19:46:16:4e:5a:02:03:b3:b2:0c:88:8c:fd:36:1d: 65:bf:45:5d:45:36:6d:fb:13:9b:42:ef:a6:e3:ca:94:84:0b: de:bd:3c:9a:e6:82:6e:25:30:03:fe:19:98:ac:96:cc:19:8a: 47:20:46:56:48:5c:65:58:70:d5:c3:65:27:5f:a3:9d:39:5c: 1a:89:fb:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEjp9u2G3IEcJ1QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NTM1OWQ1YWMtYjY2OS00OTQ2LTgzYmUtZDRkZTE0YTkxYjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZmkTP5B49areaDpJul9pNrc4cAjWjd5Wa18 7/kCsSFCxUuxhocC11jrzym8i9k1d7XFZlmwL44UvxW8sl1bv9VKShzPyYoVP8ZU 0Sx21hhlVlp+31I9LrQF44XHvZ+aBhte250S69+tVNSTkyWpkjiHAA7mQePY02C6 YUt/7rlWgwDPJBkNej+i4n8jFSX+w0Inj+1A3jqEb/ti5ETkPANIp5DYui1HMfmK N/CRe0G+d0zOiFkDpobpfKPz+AwgYAJ3lWDYBoOHiQ+JBuV2u5LFKeTH54Mq2IXn 9hZQk26z0zu5PCeMIkXHQhhA+anw/4KxOn5/rKvmcex9jZom+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrkhJBrt6RtHVgUoTeZkBT1Y7i+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGVjZTY4ZDYtNjg5Zi0z MDZkLWFhZDUtYWVmYzg0NDdkZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH+qUma7Tlg3SwASMXUXbt0RlFYDGCduWXdQDivwqzECVf5Whm2LtCR ega7ei6AqYQl3k8Ww0RTlNa1XSPyIp4wmgj8BaJj03PlY1hsaMAgFfez/DW1BcgC HfB44fZlCibl7oSa36j01SiNf8Lo2EHNVx/QmqgAAm5hUt4zvi7puEgSWVnbg5we wXLivJj+LkRHK6ggnQlNPcVg40u/ZxlGbFs1CbY+yb/MEo/JSyK5Cd7SbgKN9hlG Fk5aAgOzsgyIjP02HWW/RV1FNm37E5tC76bjypSEC969PJrmgm4lMAP+GZislswZ ikcgRlZIXGVYcNXDZSdfo505XBqJ+4I= -----END CERTIFICATE-----Generated at Wed Nov 5 02:44:34 2025 by rpki-client