$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/704ff5e1-1914-3e79-b7d5-5fd923826a5b.roa File: 704ff5e1-1914-3e79-b7d5-5fd923826a5b.roa (raw, json) Hash identifier: G0ty6bQYnY5KgOXtHBNeqE1EiXgDFe9/m4X/YeE0stg= Subject key identifier: 0D:4F:7A:CD:D8:60:B7:DB:35:68:87:F2:AF:CD:9F:4C:7A:49:04:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0C86E12855343C2D59680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/704ff5e1-1914-3e79-b7d5-5fd923826a5b.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 50.96.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c8:6e:12:85:53:43:c2:d5:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=55daff06-3ee9-4272-8fc0-c7d5a27e4876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:17:bc:d8:e0:30:d8:47:36:1f:d4:29:31:e2: e1:50:f7:e3:fe:14:37:a7:24:51:c3:56:79:f3:ef: e3:9b:ba:6f:6e:0f:2e:47:ec:22:8f:cc:b4:02:26: ac:1b:51:d4:35:cb:ca:c0:c2:0c:0f:35:df:72:bf: 2e:60:e0:65:39:b0:b5:4b:93:1f:7d:f3:d1:50:51: c7:2d:11:7b:a0:3d:cb:f9:51:f8:ad:cd:77:0f:3a: f9:c3:55:36:5f:b2:67:a4:e3:49:25:63:e2:5c:6f: c5:3a:db:ae:36:6e:3d:73:a5:54:79:0f:72:fa:68: 24:26:6f:74:95:18:a5:27:b6:5f:26:65:38:70:22: 0b:73:08:3f:99:9b:91:71:76:e1:75:2a:65:71:20: 85:e2:91:0b:15:f8:c3:2f:0a:60:4c:dd:96:5a:a8: 6e:3e:26:9a:76:69:f0:c2:20:c3:f1:c8:15:77:2b: a2:99:cf:ac:ea:46:88:72:6c:1b:15:9f:80:a9:b2: 6c:e9:3f:cb:51:fe:55:09:68:f7:ac:ef:ac:eb:0b: ec:0b:6d:dd:53:7a:2b:7b:27:55:bc:86:f3:13:16: 67:0a:16:05:21:da:a6:06:86:32:4f:43:48:2f:ec: 23:f7:5e:70:96:00:e8:89:f2:63:21:5f:da:68:21: a3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4F:7A:CD:D8:60:B7:DB:35:68:87:F2:AF:CD:9F:4C:7A:49:04:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/704ff5e1-1914-3e79-b7d5-5fd923826a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:04:9b:29:13:10:a3:f0:d3:f2:8c:57:c6:54:93:82:35:16: 19:94:85:8d:04:48:36:33:db:02:5f:bd:31:7a:d8:05:41:7f: 0a:4d:c2:ff:f9:bb:d6:79:1e:55:fc:7e:b6:b0:f6:6a:9e:b2: c4:64:95:66:e4:12:f5:95:94:05:78:95:ef:0f:a3:75:18:5c: b7:e2:b8:e3:02:43:fc:2f:21:10:06:7f:c4:e1:cf:2a:95:49: 5b:51:e1:9a:13:4b:57:34:5d:a9:37:e8:c5:36:82:da:ad:49: a7:8d:05:1b:69:66:1e:50:93:f6:d3:c3:2c:4d:2d:be:b3:c2: 6d:01:1f:7a:89:e7:b7:79:df:a9:cd:6b:80:cd:06:3a:ac:48: 25:46:58:41:81:5f:e6:25:53:d3:5b:d0:a6:5d:97:a0:ea:b1: 85:37:82:bc:9a:b5:e1:ae:69:c7:8d:e6:ae:51:a2:f8:fa:d0: f2:15:dc:76:c0:70:9f:f7:0b:12:6f:5f:72:fa:8e:5b:e0:24: 0e:d5:94:a6:27:c6:20:d6:45:3f:f1:a1:22:99:44:ab:50:50: 17:d2:e2:db:6b:10:1e:4a:9e:50:cf:37:b2:38:a0:7e:dc:88: 6b:f8:8d:26:5b:af:40:f5:1d:a1:1d:2c:db:5a:3e:60:2a:be: 01:c2:2a:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMhuEoVTQ8LVloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NTVkYWZmMDYtM2VlOS00MjcyLThmYzAtYzdkNWEyN2U0ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhe82OAw2Ec2H9QpMeLhUPfj/hQ3pyRRw1Z5 8+/jm7pvbg8uR+wij8y0AiasG1HUNcvKwMIMDzXfcr8uYOBlObC1S5MfffPRUFHH LRF7oD3L+VH4rc13Dzr5w1U2X7JnpONJJWPiXG/FOtuuNm49c6VUeQ9y+mgkJm90 lRilJ7ZfJmU4cCILcwg/mZuRcXbhdSplcSCF4pELFfjDLwpgTN2WWqhuPiaadmnw wiDD8cgVdyuimc+s6kaIcmwbFZ+AqbJs6T/LUf5VCWj3rO+s6wvsC23dU3oreydV vIbzExZnChYFIdqmBoYyT0NIL+wj915wlgDoifJjIV/aaCGjRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1Pes3YYLfbNWiH8q/Nn0x6SQSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzA0ZmY1ZTEtMTkxNC0z ZTc5LWI3ZDUtNWZkOTIzODI2YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkEmykTEKPw0/KMV8ZUk4I1FhmUhY0ESDYz2wJfvTF62AVBfwpNwv/5 u9Z5HlX8fraw9mqessRklWbkEvWVlAV4le8Po3UYXLfiuOMCQ/wvIRAGf8ThzyqV SVtR4ZoTS1c0Xak36MU2gtqtSaeNBRtpZh5Qk/bTwyxNLb6zwm0BH3qJ57d536nN a4DNBjqsSCVGWEGBX+YlU9Nb0KZdl6DqsYU3gryateGuaceN5q5Rovj60PIV3HbA cJ/3CxJvX3L6jlvgJA7VlKYnxiDWRT/xoSKZRKtQUBfS4ttrEB5KnlDPN7I4oH7c iGv4jSZbr0D1HaEdLNtaPmAqvgHCKtM= -----END CERTIFICATE-----Generated at Fri Aug 8 10:19:53 2025 by rpki-client