$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9761d531-6b31-3351-b19d-f5977ae11d1d.roa File: 9761d531-6b31-3351-b19d-f5977ae11d1d.roa (raw, json) Hash identifier: sbNlJ/DSVY9tUXhZKtcPVnaokN2121iqGt9w6Qlek0Y= Subject key identifier: 71:4E:01:1B:21:45:05:DF:DB:0A:34:25:1E:63:BF:BD:82:93:E3:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900C9F8599DF4DF6CE546C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9761d531-6b31-3351-b19d-f5977ae11d1d.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 50.96.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c9:f8:59:9d:f4:df:6c:e5:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=16feaf5f-eae3-4990-9fcb-254c19775a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6f:82:9f:a1:17:d1:43:e0:83:90:ef:d4:d9: d1:35:3a:96:80:ee:c3:d7:b4:b3:83:41:7c:f3:c3: 57:8d:50:11:e7:0b:ca:56:ee:a9:f5:9f:4a:ec:4d: 17:ca:3b:92:bf:d3:2b:19:a1:58:47:09:96:63:a2: 59:2c:07:2e:7a:f9:7d:2c:88:a0:00:a4:bb:50:54: a1:ca:76:5b:07:95:6e:ab:ae:1e:5d:fb:d8:0d:da: f2:ee:1a:4e:bc:2a:3a:32:97:d7:77:a9:86:58:84: 09:f3:8a:f8:2c:48:e8:75:1e:de:e7:0f:b5:6a:bd: 48:9e:7f:b7:ae:d5:24:41:9d:2e:e8:81:30:b2:f0: 16:d8:3b:d1:a5:2a:0a:8d:52:03:0b:1d:23:1e:1e: ed:1b:b5:8d:f7:66:3f:d0:42:d4:15:83:34:60:03: d1:89:2a:61:ef:3c:a5:9b:0d:5d:aa:1f:a6:59:a0: 09:bd:1c:09:90:20:01:64:fb:59:14:61:d6:9d:f2: ec:b1:74:b9:4f:5a:d1:77:b4:90:ed:f1:6c:35:4b: 15:f0:8a:f6:bf:94:16:03:6e:3c:13:dd:ef:3c:03: 6d:6c:14:7b:f1:67:3c:a3:13:3a:2d:fc:05:c4:db: 11:ca:f0:47:89:5a:89:d6:db:85:0c:97:b9:89:61: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4E:01:1B:21:45:05:DF:DB:0A:34:25:1E:63:BF:BD:82:93:E3:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9761d531-6b31-3351-b19d-f5977ae11d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:55:56:86:4e:e0:7c:e4:04:1d:6c:21:66:e4:95:3e:75:78: 77:26:8d:eb:21:1a:fd:cf:ef:f0:d2:f3:f0:73:0e:5c:1e:34: d7:e6:e1:74:23:73:0f:5b:67:c9:5b:4b:0b:70:e5:88:62:d2: 95:60:1d:3f:ba:b6:9d:ec:b0:67:05:6d:25:ee:41:96:da:f8: 5e:88:27:09:7b:18:a9:5b:ae:6b:43:04:9e:0b:90:8e:43:82: 21:df:57:cc:57:c4:39:90:3c:cd:26:fb:f7:cc:7f:28:be:d4: 84:43:db:f6:a7:fb:98:a6:87:d0:af:00:2c:cf:af:c1:55:74: b9:c7:f4:d7:11:43:68:dc:ae:a8:76:9c:af:6c:e4:54:a9:95: 0a:d7:2b:5b:88:b4:dc:6a:b3:9c:0d:c7:e5:ab:bc:e1:4b:ba: 9e:b3:e2:b6:f3:1b:15:a3:31:2a:c9:84:a1:13:45:78:81:a4: 27:c3:4b:60:59:88:c3:bd:7d:72:5c:b1:83:e8:7f:b1:45:d7: cf:ff:92:69:97:8a:4d:2b:cb:f2:74:b0:3a:3b:c9:65:e4:f9: ef:c2:20:7d:d9:64:e0:ce:9a:fe:1c:14:b5:3d:f4:75:8c:6e: 83:c2:ea:aa:f9:f6:6d:81:a4:7c:f6:f7:6e:79:01:89:2f:b6: a2:aa:d6:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMn4WZ3032zlRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MTZmZWFmNWYtZWFlMy00OTkwLTlmY2ItMjU0YzE5Nzc1YTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW+Cn6EX0UPgg5Dv1NnRNTqWgO7D17Szg0F8 88NXjVAR5wvKVu6p9Z9K7E0XyjuSv9MrGaFYRwmWY6JZLAcuevl9LIigAKS7UFSh ynZbB5Vuq64eXfvYDdry7hpOvCo6MpfXd6mGWIQJ84r4LEjodR7e5w+1ar1Inn+3 rtUkQZ0u6IEwsvAW2DvRpSoKjVIDCx0jHh7tG7WN92Y/0ELUFYM0YAPRiSph7zyl mw1dqh+mWaAJvRwJkCABZPtZFGHWnfLssXS5T1rRd7SQ7fFsNUsV8Ir2v5QWA248 E93vPANtbBR78Wc8oxM6LfwFxNsRyvBHiVqJ1tuFDJe5iWF5kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFOARshRQXf2wo0JR5jv72Ck+MHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTc2MWQ1MzEtNmIzMS0z MzUxLWIxOWQtZjU5NzdhZTExZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMmAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJVVoZO4HzkBB1sIWbklT51eHcmjeshGv3P7/DS8/BzDlweNNfm4XQj cw9bZ8lbSwtw5Yhi0pVgHT+6tp3ssGcFbSXuQZba+F6IJwl7GKlbrmtDBJ4LkI5D giHfV8xXxDmQPM0m+/fMfyi+1IRD2/an+5imh9CvACzPr8FVdLnH9NcRQ2jcrqh2 nK9s5FSplQrXK1uItNxqs5wNx+WrvOFLup6z4rbzGxWjMSrJhKETRXiBpCfDS2BZ iMO9fXJcsYPof7FF18//kmmXik0ry/J0sDo7yWXk+e/CIH3ZZODOmv4cFLU99HWM boPC6qr59m2BpHz29255AYkvtqKq1iA= -----END CERTIFICATE-----Generated at Fri Aug 8 10:18:00 2025 by rpki-client