$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d172e8-25f0-36e2-8a5c-55ac9c28d064.roa File: a4d172e8-25f0-36e2-8a5c-55ac9c28d064.roa (raw, json) Hash identifier: B3XngcsDR6ZOAeCX1UYKpfT0M/q+KPiwb4CAV+/Wlw8= Subject key identifier: E1:B0:37:6A:26:23:E5:30:A8:24:7C:11:62:C6:73:99:5F:22:F8:0F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F5648CB3F9A926BE5400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d172e8-25f0-36e2-8a5c-55ac9c28d064.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 50.96.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f5:64:8c:b3:f9:a9:26:be:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=0564857d-266c-490d-a79c-567eff0145d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:02:75:46:41:79:b5:5e:09:28:55:4c:e5: a0:dc:25:de:3a:ce:76:a1:3a:2d:a9:66:e0:dc:41: d6:3b:a4:63:5c:84:25:43:f2:bc:84:ee:ce:71:dc: 29:22:a1:16:0d:38:e7:50:ca:f2:b5:67:98:5a:18: ef:bb:9c:f0:58:da:31:dc:a5:66:a4:57:3d:5d:40: 52:21:93:96:04:cc:8a:d2:29:04:2d:90:3c:9d:75: 29:15:87:da:0a:99:5b:d9:af:06:7a:98:98:a7:c0: eb:1e:73:01:45:40:04:2b:07:05:3d:a4:d1:76:a1: 57:73:7e:02:6e:e5:d3:b2:c8:77:2e:bc:5d:7d:57: 93:ac:fe:cc:52:e7:47:ab:59:4e:c9:8e:15:b6:52: 71:38:5b:16:0e:61:9c:91:be:1e:63:ae:c5:7e:48: 79:dc:ad:82:6e:28:43:c8:cd:f1:4b:1e:57:00:43: 50:59:69:21:cd:20:4f:98:02:eb:7b:0f:b0:14:b8: 61:f9:e8:d3:c2:dc:87:b8:06:94:3a:1e:3c:44:73: c6:50:55:79:8c:dd:0e:a9:aa:a5:12:e0:40:66:4e: 9a:8a:82:e1:4c:05:46:c3:f9:51:d8:55:45:c6:a0: 60:89:79:2c:7d:2e:59:16:40:d7:fd:66:6e:ba:33: da:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B0:37:6A:26:23:E5:30:A8:24:7C:11:62:C6:73:99:5F:22:F8:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d172e8-25f0-36e2-8a5c-55ac9c28d064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4d:3e:e2:ba:42:5e:75:58:b4:0b:31:14:b5:e2:d9:23:36: 39:f7:cc:25:8d:34:39:a7:21:24:c3:39:88:fb:64:bb:b8:1a: 06:73:e6:f9:ce:39:f7:9a:a0:42:a4:58:f6:12:94:11:62:0b: 14:ce:be:d1:0b:cf:87:90:9d:0d:d8:df:1c:09:a2:04:59:a2: 2b:63:09:e8:d1:d7:59:7e:7a:ea:30:39:a1:2d:ce:b7:78:be: e1:29:51:09:1b:b8:e7:0e:76:30:36:f6:4d:31:b0:7b:90:42: 09:fc:92:eb:34:d7:07:e9:b9:cc:b0:5b:02:62:f1:40:9f:67: e4:e5:58:77:31:b4:80:6c:d7:2a:a5:4a:6d:5b:ac:d8:e2:da: 1f:bf:3d:da:53:53:f9:64:19:8f:fc:22:8b:71:97:9e:41:67: 88:ac:f8:da:66:27:84:5e:49:9b:fd:83:3c:06:9a:15:5a:10: 71:c5:da:7d:55:36:b6:bf:fc:bc:a1:4b:2d:04:36:f3:23:fe: 52:d5:93:ef:d8:9b:71:50:ae:76:2b:6b:12:fb:64:01:cf:4b: d2:d5:d3:11:df:f7:39:c2:92:5b:18:03:60:4e:5d:98:bc:6c: 12:d2:fb:0d:a0:f3:e2:e3:0c:75:93:96:6b:94:55:63:b0:20: ae:e2:6b:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPVkjLP5qSa+VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDU2NDg1N2QtMjY2Yy00OTBkLWE3OWMtNTY3ZWZmMDE0NWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVICdUZBebVeCShVTOWg3CXeOs52oTotqWbg 3EHWO6RjXIQlQ/K8hO7OcdwpIqEWDTjnUMrytWeYWhjvu5zwWNox3KVmpFc9XUBS IZOWBMyK0ikELZA8nXUpFYfaCplb2a8GepiYp8DrHnMBRUAEKwcFPaTRdqFXc34C buXTssh3LrxdfVeTrP7MUudHq1lOyY4VtlJxOFsWDmGckb4eY67Ffkh53K2CbihD yM3xSx5XAENQWWkhzSBPmALrew+wFLhh+ejTwtyHuAaUOh48RHPGUFV5jN0Oqaql EuBAZk6aioLhTAVGw/lR2FVFxqBgiXksfS5ZFkDX/WZuujPaOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGwN2omI+UwqCR8EWLGc5lfIvgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTRkMTcyZTgtMjVmMC0z NmUyLThhNWMtNTVhYzljMjhkMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhNPuK6Ql51WLQLMRS14tkjNjn3zCWNNDmnISTDOYj7ZLu4GgZz5vnO OfeaoEKkWPYSlBFiCxTOvtELz4eQnQ3Y3xwJogRZoitjCejR11l+euowOaEtzrd4 vuEpUQkbuOcOdjA29k0xsHuQQgn8kus01wfpucywWwJi8UCfZ+TlWHcxtIBs1yql Sm1brNji2h+/PdpTU/lkGY/8Iotxl55BZ4is+NpmJ4ReSZv9gzwGmhVaEHHF2n1V Nra//LyhSy0ENvMj/lLVk+/Ym3FQrnYraxL7ZAHPS9LV0xHf9znCklsYA2BOXZi8 bBLS+w2g8+LjDHWTlmuUVWOwIK7ia6Q= -----END CERTIFICATE-----Generated at Tue Aug 5 17:19:57 2025 by rpki-client