$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa File: 8cf117f2-112a-3cfb-9363-44ee9405c70d.roa (raw, json) Hash identifier: AcXvXp/yMMlzm7VcXWuaZikfPgQSlG/L2WAenUUHtug= Subject key identifier: 4E:C1:25:CF:FE:49:46:99:72:FE:32:DC:9D:EC:73:E9:73:F4:36:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE4051215DAA59D11EC05C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 50.96.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:51:21:5d:aa:59:d1:1e:c0:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=20018616-d9e7-4d9b-9449-62be26c6d695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:12:27:aa:ec:60:77:b0:1a:dc:61:9f:22: 73:20:97:bb:74:86:31:00:1d:82:e8:35:ec:3b:f6: e9:3e:50:40:58:7d:13:5e:83:80:64:ba:0d:80:85: af:27:7b:a2:e3:6a:a4:91:c9:dd:3a:8a:df:a3:01: e7:56:14:31:c8:c2:64:20:cc:2e:7f:9e:07:ef:33: 94:3d:01:cc:7b:2a:0d:24:40:f9:94:a8:59:1f:35: 62:8b:7b:d3:4f:52:0f:bf:c9:c9:7a:ad:4d:30:b3: 5a:fb:7b:37:97:70:c7:63:52:6f:f7:c6:03:ea:bd: e1:79:36:06:28:b1:43:72:13:3f:00:6b:ad:f0:03: 2e:96:15:55:14:8e:fc:31:54:ec:6c:38:4a:04:e8: 5d:05:1a:3d:a1:58:47:47:0b:bb:a8:2c:91:17:24: d3:1e:1e:dd:fd:6f:eb:80:23:5c:43:48:88:c3:16: 59:2b:0f:2b:99:12:29:34:ac:aa:50:70:3b:1b:39: c4:bb:78:b2:fa:56:db:13:e4:ba:de:35:9a:9e:d2: 0c:f7:78:61:de:a4:14:45:f4:17:2b:ef:fb:f3:15: 7f:ae:bb:2a:41:1f:2d:8a:1d:ac:db:31:43:a1:16: 2e:3a:09:78:41:2e:7f:33:c0:b5:35:24:a4:26:50: 42:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C1:25:CF:FE:49:46:99:72:FE:32:DC:9D:EC:73:E9:73:F4:36:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:6b:5f:fc:9c:89:ea:4b:dc:36:0f:c2:61:c7:e1:b8:8e:77: 8c:22:12:7a:a3:4b:e8:b9:7d:0e:98:e3:db:a0:ac:6d:d2:80: 54:2c:27:7e:39:2c:f3:93:12:db:9c:9c:d9:19:be:ae:2d:11: 05:ce:83:59:b6:2c:af:2f:ac:bc:44:37:99:36:0c:0a:c7:fc: 06:e4:3b:cd:c1:ef:51:e2:da:45:38:be:1e:84:4e:7a:0e:09: 94:b1:52:8d:2d:64:57:fd:30:0d:d4:0b:7b:90:70:51:b9:d9: 22:d1:fb:4f:c0:98:c5:61:f6:3d:28:79:fe:6a:d6:fd:b5:34: 52:97:3d:98:c9:0e:ed:4a:52:07:9e:48:9f:6b:12:1d:17:d2: 4b:01:65:ae:2c:03:51:df:3f:4b:be:9a:6a:c3:fb:ad:94:18: cd:e0:8b:b2:6c:5a:00:e8:c9:76:9c:c6:49:07:1e:79:24:ba: f4:88:03:95:15:e5:a6:e3:e2:3c:b9:0d:63:62:8c:98:64:74: f9:62:d6:4e:db:14:ef:9e:bb:02:89:94:d7:68:31:5b:5a:c7: 96:77:5a:1d:af:de:9b:58:43:16:ad:9b:2f:26:1d:e0:94:c1: 02:61:c7:22:e7:14:3e:ee:30:1c:49:50:d2:13:1d:8d:1e:d8: 0c:7b:9b:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFEhXapZ0R7AXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MjAwMTg2MTYtZDllNy00ZDliLTk0NDktNjJiZTI2YzZkNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+4SJ6rsYHewGtxhnyJzIJe7dIYxAB2C6DXs O/bpPlBAWH0TXoOAZLoNgIWvJ3ui42qkkcndOorfowHnVhQxyMJkIMwuf54H7zOU PQHMeyoNJED5lKhZHzVii3vTT1IPv8nJeq1NMLNa+3s3l3DHY1Jv98YD6r3heTYG KLFDchM/AGut8AMulhVVFI78MVTsbDhKBOhdBRo9oVhHRwu7qCyRFyTTHh7d/W/r gCNcQ0iIwxZZKw8rmRIpNKyqUHA7GznEu3iy+lbbE+S63jWantIM93hh3qQURfQX K+/78xV/rrsqQR8tih2s2zFDoRYuOgl4QS5/M8C1NSSkJlBCLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7BJc/+SUaZcv4y3J3sc+lz9DZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGNmMTE3ZjItMTEyYS0z Y2ZiLTkzNjMtNDRlZTk0MDVjNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMmAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFrX/yciepL3DYPwmHH4biOd4wiEnqjS+i5fQ6Y49ugrG3SgFQsJ345 LPOTEtucnNkZvq4tEQXOg1m2LK8vrLxEN5k2DArH/AbkO83B71Hi2kU4vh6ETnoO CZSxUo0tZFf9MA3UC3uQcFG52SLR+0/AmMVh9j0oef5q1v21NFKXPZjJDu1KUgee SJ9rEh0X0ksBZa4sA1HfP0u+mmrD+62UGM3gi7JsWgDoyXacxkkHHnkkuvSIA5UV 5abj4jy5DWNijJhkdPli1k7bFO+euwKJlNdoMVtax5Z3Wh2v3ptYQxatmy8mHeCU wQJhxyLnFD7uMBxJUNITHY0e2Ax7m9M= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:30 2025 by rpki-client