$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6824f657-f07d-35d6-895c-d3ca079c782d.roa File: 6824f657-f07d-35d6-895c-d3ca079c782d.roa (raw, json) Hash identifier: rmQshnU7Vc1VK/dEAz9OLKCfZqrSF3+mFqlfBKMo3c4= Subject key identifier: 66:38:E3:73:83:7A:BA:AD:CB:14:82:7B:81:B4:56:0A:D9:E4:44:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B196C1374E5A2CE342C751F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6824f657-f07d-35d6-895c-d3ca079c782d.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 50.96.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:13:74:e5:a2:ce:34:2c:75:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=21deb8bc-e25f-40fb-b599-31b9c155561b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:45:3c:e5:a3:50:69:02:79:56:46:ee:dc:5f: 37:8f:31:54:1c:ed:b1:ee:b6:09:64:56:5d:6e:75: 9d:ba:a5:7f:10:50:8a:4d:c9:ce:59:92:46:2f:07: 40:5f:57:3e:c2:2f:be:2d:f9:cd:ac:bb:10:12:f3: a9:6c:88:31:4c:a5:a9:81:78:c9:d5:35:0c:0c:6e: 82:9f:b2:5b:33:6a:c7:b6:2c:3a:92:a8:47:6e:a8: a7:a6:de:a1:b9:39:01:60:49:cd:1c:16:56:f7:73: 20:13:2f:eb:d1:45:dc:e0:c8:a2:65:49:12:8d:a4: 11:22:2e:66:a5:12:c8:22:8d:d7:af:21:fc:8b:e6: b4:9f:1b:21:a2:a2:aa:12:b9:10:92:33:22:8f:56: 1f:df:5f:60:b5:d2:c8:22:15:01:e4:d6:5b:f6:28: 07:15:f0:bc:74:cf:1f:4a:3d:69:2d:1d:6a:79:a0: 32:53:cd:99:4a:c1:be:bc:c2:a1:fb:21:3f:92:73: 6b:99:54:86:b3:11:36:dd:2d:15:54:85:68:50:80: 9e:e1:3c:0f:20:df:e0:0e:4e:c8:69:3e:ae:d0:0a: bc:72:23:8d:70:07:03:72:d0:18:cf:69:52:50:e1: 8d:b2:b2:69:94:ea:32:e7:52:69:54:0b:80:7e:03: 89:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:38:E3:73:83:7A:BA:AD:CB:14:82:7B:81:B4:56:0A:D9:E4:44:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6824f657-f07d-35d6-895c-d3ca079c782d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:62:71:5f:a8:8a:e2:1b:30:40:ec:d1:86:60:6c:db:40:6d: 4e:37:49:63:4d:52:4e:68:d4:37:06:5f:69:dd:29:c1:9b:49: 9b:f5:97:6c:63:53:85:87:21:92:4f:10:fd:d6:99:b8:60:6e: 5d:f6:67:3a:09:b7:d3:e9:b1:17:5a:80:8c:5b:cc:16:6c:53: e6:b2:69:9d:c8:23:08:ef:1a:81:fc:df:2b:83:7c:be:42:20: 08:32:22:40:f9:5d:ba:40:2e:9d:bc:70:6f:23:71:b0:24:de: 3a:1e:b7:92:93:a2:a8:70:be:4f:52:34:8d:7e:b8:12:4c:61: 1b:58:1a:16:2c:ef:bb:c2:57:f1:56:40:4c:1a:69:71:8e:1d: 9a:2e:8c:3c:c7:84:06:23:b1:fd:9c:b3:42:dc:3d:64:10:dc: c9:f5:90:4f:16:01:9c:47:67:34:39:9e:29:cb:fa:ef:a8:fd: a5:4a:cf:92:ed:da:e3:4b:30:63:97:67:0e:0c:3e:91:8f:8c: e1:aa:62:9c:1a:b6:a4:5a:a3:8c:e2:90:70:ba:42:22:2c:34: e7:54:5b:3c:f5:cc:80:86:95:22:26:47:fc:60:24:b5:4c:75: 47:89:c9:0f:52:50:28:9a:54:f9:92:d7:3a:2f:72:2e:8c:93: 03:dd:12:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBN05aLONCx1HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk MjFkZWI4YmMtZTI1Zi00MGZiLWI1OTktMzFiOWMxNTU1NjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0U85aNQaQJ5Vkbu3F83jzFUHO2x7rYJZFZd bnWduqV/EFCKTcnOWZJGLwdAX1c+wi++LfnNrLsQEvOpbIgxTKWpgXjJ1TUMDG6C n7JbM2rHtiw6kqhHbqinpt6huTkBYEnNHBZW93MgEy/r0UXc4MiiZUkSjaQRIi5m pRLIIo3XryH8i+a0nxshoqKqErkQkjMij1Yf319gtdLIIhUB5NZb9igHFfC8dM8f Sj1pLR1qeaAyU82ZSsG+vMKh+yE/knNrmVSGsxE23S0VVIVoUICe4TwPIN/gDk7I aT6u0Aq8ciONcAcDctAYz2lSUOGNsrJplOoy51JpVAuAfgOJCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGY443ODerqtyxSCe4G0VgrZ5ETYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjgyNGY2NTctZjA3ZC0z NWQ2LTg5NWMtZDNjYTA3OWM3ODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMmD6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhicV+oiuIbMEDs0YZgbNtAbU43SWNNUk5o1DcGX2ndKcGbSZv1l2xj U4WHIZJPEP3Wmbhgbl32ZzoJt9PpsRdagIxbzBZsU+ayaZ3IIwjvGoH83yuDfL5C IAgyIkD5XbpALp28cG8jcbAk3joet5KToqhwvk9SNI1+uBJMYRtYGhYs77vCV/FW QEwaaXGOHZoujDzHhAYjsf2cs0LcPWQQ3Mn1kE8WAZxHZzQ5ninL+u+o/aVKz5Lt 2uNLMGOXZw4MPpGPjOGqYpwatqRao4zikHC6QiIsNOdUWzz1zICGlSImR/xgJLVM dUeJyQ9SUCiaVPmS1zovci6MkwPdEkE= -----END CERTIFICATE-----Generated at Tue Nov 4 19:08:19 2025 by rpki-client