$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e435067-01d7-356b-8bb7-954860561b47.roa File: 8e435067-01d7-356b-8bb7-954860561b47.roa (raw, json) Hash identifier: jLBUbuUP/1ngFsiOmFS1WCCptXonDcl+5S5Evnyef8U= Subject key identifier: 65:8D:A9:3F:58:82:E3:A9:B3:E4:08:A0:22:7D:FD:26:BB:65:51:80 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB386276922BEC94A276B4A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e435067-01d7-356b-8bb7-954860561b47.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 50.96.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:27:69:22:be:c9:4a:27:6b:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=72244375-234a-42a1-ae8b-04568ff81858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:1a:77:6c:d9:af:bc:b1:7a:4d:a6:7d:00: 31:a3:7e:9e:7a:be:bf:77:66:53:ff:1f:49:28:72: b6:a5:3b:4d:5e:56:46:49:86:f2:b1:bc:bb:d0:29: ba:a7:3d:f7:05:29:d4:ee:d5:26:5f:08:24:fc:72: 99:b3:67:67:94:88:60:7f:39:52:1f:c6:cd:40:67: af:d3:ce:31:6d:db:1a:d0:fb:23:1a:ba:51:65:fe: e0:7d:8b:57:92:83:42:3d:bf:56:e9:5a:c4:0c:74: 0b:77:b6:f8:37:15:96:a4:11:4a:36:a7:22:95:af: cc:5f:ad:a1:10:b5:c8:87:ed:3f:4f:4b:e3:ed:3b: 77:93:ee:1a:63:88:46:a1:72:bc:ee:55:a2:b4:b8: 3a:c0:e0:c3:cc:ce:8a:84:40:d1:f8:47:d9:7a:20: 9e:44:a2:55:b2:3e:3f:e0:d8:b4:3a:2d:e4:e3:2e: 04:ef:ce:de:be:50:cb:67:58:c4:e7:2a:b4:da:32: db:d4:34:a3:42:cf:0b:91:bc:36:0e:05:9f:b0:47: fb:af:98:1c:08:0c:bb:48:2e:0f:de:c8:83:f5:5e: e3:90:f9:5d:6a:84:56:1e:b9:60:b5:23:ee:f3:18: 43:95:6a:89:e8:79:30:39:e9:97:30:db:6e:5c:bb: 68:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8D:A9:3F:58:82:E3:A9:B3:E4:08:A0:22:7D:FD:26:BB:65:51:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e435067-01d7-356b-8bb7-954860561b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ed:4b:4e:fe:be:a1:39:8e:f0:bb:d5:0d:2b:93:d8:1b:5a: 62:c9:ac:fc:aa:17:6d:39:ad:ee:cf:24:53:1d:67:7d:21:8e: 52:32:82:66:be:39:85:3a:ab:72:45:ec:ff:74:97:c0:58:88: 13:9d:34:73:b5:37:66:37:69:f6:7a:1e:72:ff:72:7a:7e:fb: 54:07:1a:47:e3:59:72:41:d5:7b:a1:52:da:26:c1:1b:7e:ee: cc:36:6a:20:8c:6e:33:ca:f7:df:01:96:f7:85:e7:9b:d8:c5: 74:ff:ff:ae:b0:fb:6a:7e:1c:01:46:26:c7:11:99:68:e7:1e: 28:70:cc:d8:46:80:eb:8d:fb:7c:27:0b:ed:9f:22:22:7a:41: b7:64:5b:6e:69:f5:2c:b4:14:4e:65:1e:48:d4:39:23:f0:fc: 31:a9:35:70:96:14:0f:84:c0:ca:a6:89:ed:a6:f4:ff:d9:41: a7:0f:98:e8:91:ee:e3:c1:f3:04:96:ca:34:c0:b7:aa:63:ac: 02:81:8d:af:4b:36:d4:b6:18:57:2e:46:6c:48:ea:1f:03:5e: a6:6e:1a:76:55:9b:f3:97:7b:2d:03:30:77:58:f8:f6:96:47: bd:65:d1:19:3b:02:62:4e:dd:35:9c:4d:dc:a4:00:97:96:55: 37:5b:95:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhidpIr7JSidrSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk NzIyNDQzNzUtMjM0YS00MmExLWFlOGItMDQ1NjhmZjgxODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Ead2zZr7yxek2mfQAxo36eer6/d2ZT/x9J KHK2pTtNXlZGSYbysby70Cm6pz33BSnU7tUmXwgk/HKZs2dnlIhgfzlSH8bNQGev 084xbdsa0PsjGrpRZf7gfYtXkoNCPb9W6VrEDHQLd7b4NxWWpBFKNqcila/MX62h ELXIh+0/T0vj7Tt3k+4aY4hGoXK87lWitLg6wODDzM6KhEDR+EfZeiCeRKJVsj4/ 4Ni0Oi3k4y4E787evlDLZ1jE5yq02jLb1DSjQs8Lkbw2DgWfsEf7r5gcCAy7SC4P 3siD9V7jkPldaoRWHrlgtSPu8xhDlWqJ6HkwOemXMNtuXLtoCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWNqT9YguOps+QIoCJ9/Sa7ZVGAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGU0MzUwNjctMDFkNy0z NTZiLThiYjctOTU0ODYwNTYxYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjtS07+vqE5jvC71Q0rk9gbWmLJrPyqF205re7PJFMdZ30hjlIygma+ OYU6q3JF7P90l8BYiBOdNHO1N2Y3afZ6HnL/cnp++1QHGkfjWXJB1XuhUtomwRt+ 7sw2aiCMbjPK998BlveF55vYxXT//66w+2p+HAFGJscRmWjnHihwzNhGgOuN+3wn C+2fIiJ6QbdkW25p9Sy0FE5lHkjUOSPw/DGpNXCWFA+EwMqmie2m9P/ZQacPmOiR 7uPB8wSWyjTAt6pjrAKBja9LNtS2GFcuRmxI6h8DXqZuGnZVm/OXey0DMHdY+PaW R71l0Rk7AmJO3TWcTdykAJeWVTdblTk= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:32 2025 by rpki-client