$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d91b169-9193-3cff-8f17-62a1c0564ce0.roa File: 5d91b169-9193-3cff-8f17-62a1c0564ce0.roa (raw, json) Hash identifier: b8XqSqn0rnLbiT7i1JC6LreI+Ski37ZeO+31G65xQ40= Subject key identifier: 35:76:41:9D:08:30:75:C6:E4:34:72:9A:9A:5F:9F:29:D3:C1:2C:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900CC36FF88095BD92AA180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d91b169-9193-3cff-8f17-62a1c0564ce0.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 50.96.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cc:36:ff:88:09:5b:d9:2a:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=162c8668-b252-42c0-8802-819d1cd88d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a2:d3:b5:b2:b7:df:2e:97:bc:a3:b7:da:e7: bc:03:45:36:15:63:2f:60:96:b5:c6:7f:c5:07:63: e8:46:21:a0:dc:f7:90:6f:b9:71:07:83:76:b5:ea: f3:fa:c4:0a:5a:08:49:a1:c8:16:8d:d9:b7:bb:96: 6a:e6:82:2e:d9:5c:af:b1:20:35:e1:62:30:78:11: a4:b8:c8:d9:59:ee:37:c5:3e:bd:46:2d:14:69:79: 30:2f:47:d3:29:c6:c2:99:2c:f4:2b:5c:b2:9f:ac: 4f:da:9a:e3:2e:33:ac:93:de:e2:fd:d8:f3:fc:5e: 4d:ff:c3:21:e4:8b:9e:40:fa:76:0a:45:3a:55:2b: 22:ac:85:e6:0c:b2:7b:98:33:18:53:5b:9c:9d:2e: ec:a9:b9:da:d5:ee:bf:a6:a1:e4:96:e4:85:e9:db: 86:a8:c7:3d:f1:04:d6:c6:67:a5:9b:72:87:a8:c8: 82:ff:b3:c8:92:22:6f:e6:9d:82:ac:e6:ed:2f:8b: 41:5d:09:e7:ea:17:31:73:71:b6:62:11:59:ba:42: b1:ee:de:25:7d:17:c0:ad:c0:bc:c9:d2:f3:22:d0: 42:7a:0c:26:3a:01:da:73:28:05:a8:56:be:ca:36: 92:c9:4c:87:2e:f2:f0:71:6c:76:88:ec:b0:59:2c: 7e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:76:41:9D:08:30:75:C6:E4:34:72:9A:9A:5F:9F:29:D3:C1:2C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d91b169-9193-3cff-8f17-62a1c0564ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:cf:56:fe:98:f7:ad:1a:5f:cb:c7:90:d7:1c:d6:4b:07:32: 9d:27:25:9c:e4:a8:78:90:93:75:21:1a:a7:15:3b:52:0e:5e: b4:f3:ec:73:57:a9:61:86:4d:ff:72:8e:f4:a9:6e:35:18:11: 9e:8b:8b:34:fb:07:b7:a7:ed:4d:35:67:be:3f:49:b8:2c:ea: e9:79:ab:50:59:42:25:08:98:af:5e:19:de:bc:9e:1a:66:ce: 8c:34:1b:03:34:b2:2a:87:4c:e8:6c:9d:08:da:49:cd:f6:3f: d6:31:42:85:d0:44:1a:ec:57:9e:38:40:d3:ac:25:2e:e9:32: f3:3b:f0:46:91:0d:13:c9:7b:ed:a7:3f:60:4b:aa:09:be:56: fb:7d:7e:d1:e9:43:ba:93:6f:6a:f1:40:9d:5a:71:ac:24:9c: 3b:87:97:ff:f4:9b:73:39:68:37:ec:cb:04:0f:f2:fb:c8:fe: 27:46:b0:9f:06:f4:6d:13:2a:c8:c3:af:e1:be:47:a3:86:bf: e1:cf:2e:28:61:89:62:71:0c:6a:0c:95:c1:3c:0c:ea:2a:5d: 50:aa:91:8f:ab:96:56:15:b2:48:cd:21:5b:13:28:51:b9:8d: a6:01:2f:63:bf:13:f0:e8:b3:48:90:b9:87:7c:10:7f:5e:ad: aa:05:45:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMw2/4gJW9kqoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MTYyYzg2NjgtYjI1Mi00MmMwLTg4MDItODE5ZDFjZDg4ZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKLTtbK33y6XvKO32ue8A0U2FWMvYJa1xn/F B2PoRiGg3PeQb7lxB4N2terz+sQKWghJocgWjdm3u5Zq5oIu2VyvsSA14WIweBGk uMjZWe43xT69Ri0UaXkwL0fTKcbCmSz0K1yyn6xP2prjLjOsk97i/djz/F5N/8Mh 5IueQPp2CkU6VSsirIXmDLJ7mDMYU1ucnS7sqbna1e6/pqHkluSF6duGqMc98QTW xmelm3KHqMiC/7PIkiJv5p2CrObtL4tBXQnn6hcxc3G2YhFZukKx7t4lfRfArcC8 ydLzItBCegwmOgHacygFqFa+yjaSyUyHLvLwcWx2iOywWSx+uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDV2QZ0IMHXG5DRymppfnynTwSwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWQ5MWIxNjktOTE5My0z Y2ZmLThmMTctNjJhMWMwNTY0Y2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmAWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXPVv6Y960aX8vHkNcc1ksHMp0nJZzkqHiQk3UhGqcVO1IOXrTz7HNX qWGGTf9yjvSpbjUYEZ6LizT7B7en7U01Z74/Sbgs6ul5q1BZQiUImK9eGd68nhpm zow0GwM0siqHTOhsnQjaSc32P9YxQoXQRBrsV544QNOsJS7pMvM78EaRDRPJe+2n P2BLqgm+Vvt9ftHpQ7qTb2rxQJ1acawknDuHl//0m3M5aDfsywQP8vvI/idGsJ8G 9G0TKsjDr+G+R6OGv+HPLihhiWJxDGoMlcE8DOoqXVCqkY+rllYVskjNIVsTKFG5 jaYBL2O/E/Dos0iQuYd8EH9eraoFRVs= -----END CERTIFICATE-----Generated at Wed Aug 6 14:19:37 2025 by rpki-client