$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/74df4832-37b5-3ce8-ba82-280363c9c21f.roa File: 74df4832-37b5-3ce8-ba82-280363c9c21f.roa (raw, json) Hash identifier: tA9ynkFoaUPI37UJticxoIJUQagsb8iM10kgLbCOn5I= Subject key identifier: 35:2B:40:27:71:9F:52:59:9B:EA:DB:34:2E:7E:71:BE:E8:EC:FB:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB3861FD8BCDE38AEC95BA020 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/74df4832-37b5-3ce8-ba82-280363c9c21f.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 50.96.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:1f:d8:bc:de:38:ae:c9:5b:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=df17fb20-abf7-42bd-b806-ff2121c5600d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:56:37:85:66:10:80:f5:76:31:73:46:a6:64: 4e:cb:c4:6a:76:34:3d:2a:bd:16:0b:58:66:e1:3d: a9:e8:92:1a:0c:bc:65:ca:e5:a8:a2:0b:22:1e:ad: 18:09:b2:63:dc:45:44:0c:7f:71:9f:5a:14:9e:22: d8:b9:57:52:83:d6:d1:ab:2c:c9:98:da:74:11:bf: c9:d1:01:bb:b4:29:83:80:97:2a:20:a3:a1:e1:94: b1:33:79:98:33:ae:c0:c7:d7:74:11:7d:7f:8d:25: e3:90:54:9a:2e:0b:64:ce:ec:4d:8e:cb:a9:84:29: ac:49:76:ec:e3:73:fe:8a:46:9e:f5:5f:4d:6c:f6: 54:67:2f:f9:f5:46:98:1f:b0:09:04:87:6e:62:ff: 9c:59:5c:b7:df:90:38:89:ca:f7:5a:3f:d7:7a:88: d5:2a:47:db:d5:70:f8:cd:66:aa:cc:79:88:23:21: 97:09:b2:ea:d6:ac:2b:f9:96:3a:4e:d3:57:1d:05: 97:99:47:77:31:21:09:8f:5c:89:5b:4d:33:24:45: 74:4e:f7:24:8d:7d:b4:e2:b7:29:7c:94:b6:4c:3a: 7e:02:0d:16:9c:58:51:b7:6d:f8:9b:ff:78:c9:b1: 4e:e5:f7:d0:bd:2b:14:fd:c7:2e:65:fd:ac:47:c3: d8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:40:27:71:9F:52:59:9B:EA:DB:34:2E:7E:71:BE:E8:EC:FB:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/74df4832-37b5-3ce8-ba82-280363c9c21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c1:f1:1f:0c:ce:c2:c3:37:d0:45:ae:15:cb:85:f1:22:ad: df:a3:dc:3d:cd:ba:a6:b6:59:74:18:8d:38:32:d4:e2:ee:60: bd:68:6a:21:80:3d:47:ab:b2:f3:50:db:63:fe:a0:32:12:3f: 8e:be:2e:50:08:b0:82:e3:a4:73:82:db:13:d3:5c:56:8b:e7: b4:fc:7b:bf:56:26:d3:5c:06:d3:ed:a5:38:60:a7:33:d2:b8: 87:e4:c5:fd:da:43:ba:da:ac:44:4d:5b:7c:52:3c:c4:b3:e2: ab:4b:b8:45:36:41:71:87:5d:c0:1a:ae:9f:2c:1f:d7:9a:d7: 3a:52:a5:06:7b:12:c5:c7:bc:a8:20:2c:b6:66:6c:81:73:83: 01:b2:dd:c5:1e:cb:0e:89:0b:36:84:e7:cb:77:a3:6b:28:11: f6:90:4d:26:98:0a:6c:52:4f:fd:7c:7b:2c:89:16:73:30:5c: a5:80:07:13:fe:42:a4:b5:f0:af:7d:0a:7f:c8:4e:e3:39:cb: 21:88:e4:b6:04:77:97:c8:5f:0d:f3:21:f2:31:e4:5f:9c:c2: bf:25:f8:c0:b3:a4:fe:f3:e1:ff:36:53:97:fc:ab:4b:d2:8f: 94:c5:2d:71:db:3d:f7:c6:b1:64:74:ad:a4:31:48:0e:1e:4d: 74:b9:09:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhh/YvN44rslboCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGYxN2ZiMjAtYWJmNy00MmJkLWI4MDYtZmYyMTIxYzU2MDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFY3hWYQgPV2MXNGpmROy8RqdjQ9Kr0WC1hm 4T2p6JIaDLxlyuWoogsiHq0YCbJj3EVEDH9xn1oUniLYuVdSg9bRqyzJmNp0Eb/J 0QG7tCmDgJcqIKOh4ZSxM3mYM67Ax9d0EX1/jSXjkFSaLgtkzuxNjsuphCmsSXbs 43P+ikae9V9NbPZUZy/59UaYH7AJBIduYv+cWVy335A4icr3Wj/XeojVKkfb1XD4 zWaqzHmIIyGXCbLq1qwr+ZY6TtNXHQWXmUd3MSEJj1yJW00zJEV0TvckjX204rcp fJS2TDp+Ag0WnFhRt234m/94ybFO5ffQvSsU/ccuZf2sR8PYNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUrQCdxn1JZm+rbNC5+cb7o7Pv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzRkZjQ4MzItMzdiNS0z Y2U4LWJhODItMjgwMzYzYzljMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbB8R8MzsLDN9BFrhXLhfEird+j3D3Nuqa2WXQYjTgy1OLuYL1oaiGA PUersvNQ22P+oDISP46+LlAIsILjpHOC2xPTXFaL57T8e79WJtNcBtPtpThgpzPS uIfkxf3aQ7rarERNW3xSPMSz4qtLuEU2QXGHXcAarp8sH9ea1zpSpQZ7EsXHvKgg LLZmbIFzgwGy3cUeyw6JCzaE58t3o2soEfaQTSaYCmxST/18eyyJFnMwXKWABxP+ QqS18K99Cn/ITuM5yyGI5LYEd5fIXw3zIfIx5F+cwr8l+MCzpP7z4f82U5f8q0vS j5TFLXHbPffGsWR0raQxSA4eTXS5CfM= -----END CERTIFICATE-----Generated at Wed Aug 6 14:22:50 2025 by rpki-client