$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c563294-904a-3950-b8d8-a65c812eb19c.roa File: 7c563294-904a-3950-b8d8-a65c812eb19c.roa (raw, json) Hash identifier: 8vPnwoypJfgittmdVcNzYHM6t3ss83T2ZJ9Dr04Sjq0= Subject key identifier: D0:9E:FA:B2:53:C8:E7:8C:97:B8:55:1B:FF:97:F3:30:82:10:E6:68 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3821A984731EBC63AFCACF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c563294-904a-3950-b8d8-a65c812eb19c.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 50.96.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:a9:84:73:1e:bc:63:af:ca:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=bc694d23-d8cb-4279-9412-059e974b643a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:68:03:ff:20:90:32:e1:ed:f1:e5:da:da: 57:63:3b:54:1a:d0:31:f0:a6:fa:77:cb:2a:ab:52: 7d:21:27:bd:ec:06:08:87:6c:f6:3b:59:09:d8:88: f8:dc:27:5e:c3:df:6c:d2:45:50:b1:5c:10:27:95: 59:1b:92:82:c0:fb:82:5a:a2:cc:fb:43:0a:2e:61: 14:d8:ed:5b:e7:a1:cd:23:7a:03:35:09:53:df:b9: fe:0b:0f:e5:21:55:dd:6d:bf:3f:f9:a0:35:c1:5a: c2:2a:23:48:ee:d7:d6:4e:d8:62:e2:78:a3:ca:94: 15:0b:6a:6a:fa:95:cb:eb:c7:df:99:b4:d6:0f:64: fe:e9:2a:d8:c4:50:ce:55:23:52:15:b9:ee:60:5b: 3d:61:18:c6:95:5e:54:04:50:63:e0:5d:ed:79:5c: c6:43:3e:3e:be:3d:43:42:f8:53:61:60:5b:1b:84: 4d:15:69:3f:96:cf:68:2d:c9:2e:35:dc:7e:d0:d4: a1:31:77:0d:dc:7a:37:74:be:4b:cf:70:4e:8c:fc: 5f:0c:20:37:44:7a:5a:3b:1e:d9:f5:4c:2c:c0:b9: 19:d9:bb:33:e6:f1:1a:53:df:ec:8b:29:51:25:49: d6:40:9a:c4:8e:b8:50:dc:1a:46:8a:b8:1e:7d:e2: ce:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9E:FA:B2:53:C8:E7:8C:97:B8:55:1B:FF:97:F3:30:82:10:E6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c563294-904a-3950-b8d8-a65c812eb19c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:5d:fe:fe:15:92:4d:35:e6:5f:8b:57:ca:37:b4:85:ff:a6: d6:03:e7:10:a5:b1:66:93:45:17:42:53:e9:29:8a:1e:57:61: 12:4a:bf:28:ef:e2:5c:40:a7:8c:7c:e9:be:4b:37:b5:87:a0: 17:ea:60:4c:7e:8b:a2:bc:92:e5:13:a1:d6:78:ac:43:a9:bc: be:fa:79:c2:68:d9:10:01:a7:96:64:13:f8:1a:f2:cf:76:b5: 31:eb:32:13:c7:32:0d:75:55:81:55:b4:6f:ee:90:f6:04:38: 21:dc:1e:2c:cd:b9:23:2d:19:4f:bd:e0:b6:ca:96:f0:ce:48: ea:b6:14:2b:a8:53:20:6d:28:ac:af:d8:7c:03:0d:a4:30:fa: d2:bc:de:f2:69:ab:05:b3:85:3c:e6:3d:4f:09:df:08:60:f6: 7c:6b:b7:87:cb:ac:c4:8c:e6:bb:f4:f9:bc:43:0b:1c:a0:bd: 17:ae:50:14:ce:4e:1d:4b:99:71:d7:24:42:03:f1:6a:8b:7b: 8d:53:54:8e:f2:cf:06:10:1d:b1:8a:a3:72:73:9f:03:b4:76: aa:66:3b:94:34:eb:14:6b:4e:33:b4:48:fc:c6:7a:be:60:c5: f6:b9:5a:e8:28:9c:e6:45:6d:16:b6:b4:64:85:a0:88:37:42: f8:d6:74:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IamEcx68Y6/KzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YmM2OTRkMjMtZDhjYi00Mjc5LTk0MTItMDU5ZTk3NGI2NDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+toA/8gkDLh7fHl2tpXYztUGtAx8Kb6d8sq q1J9ISe97AYIh2z2O1kJ2Ij43Cdew99s0kVQsVwQJ5VZG5KCwPuCWqLM+0MKLmEU 2O1b56HNI3oDNQlT37n+Cw/lIVXdbb8/+aA1wVrCKiNI7tfWTthi4nijypQVC2pq +pXL68ffmbTWD2T+6SrYxFDOVSNSFbnuYFs9YRjGlV5UBFBj4F3teVzGQz4+vj1D QvhTYWBbG4RNFWk/ls9oLckuNdx+0NShMXcN3Ho3dL5Lz3BOjPxfDCA3RHpaOx7Z 9UwswLkZ2bsz5vEaU9/siylRJUnWQJrEjrhQ3BpGirgefeLO/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCe+rJTyOeMl7hVG/+X8zCCEOZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2M1NjMyOTQtOTA0YS0z OTUwLWI4ZDgtYTY1YzgxMmViMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZd/v4Vkk015l+LV8o3tIX/ptYD5xClsWaTRRdCU+kpih5XYRJKvyjv 4lxAp4x86b5LN7WHoBfqYEx+i6K8kuUTodZ4rEOpvL76ecJo2RABp5ZkE/ga8s92 tTHrMhPHMg11VYFVtG/ukPYEOCHcHizNuSMtGU+94LbKlvDOSOq2FCuoUyBtKKyv 2HwDDaQw+tK83vJpqwWzhTzmPU8J3whg9nxrt4fLrMSM5rv0+bxDCxygvReuUBTO Th1LmXHXJEID8WqLe41TVI7yzwYQHbGKo3JznwO0dqpmO5Q06xRrTjO0SPzGer5g xfa5WugonOZFbRa2tGSFoIg3QvjWdBs= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:49 2025 by rpki-client