$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abcc9f00-b16e-3a9a-84a4-0ac6eb2c0696.roa File: abcc9f00-b16e-3a9a-84a4-0ac6eb2c0696.roa (raw, json) Hash identifier: Ntqatfe2j7oqegwJhwfeSb3fvi7TXlzOS0G8v9hPNq4= Subject key identifier: 29:8A:78:CB:02:B8:AE:46:F2:B5:09:6A:5B:60:4B:59:30:ED:6B:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900C9D8591F0CA872AD9200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abcc9f00-b16e-3a9a-84a4-0ac6eb2c0696.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 50.96.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c9:d8:59:1f:0c:a8:72:ad:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=ff9971f8-461f-4f7d-883c-9f8e26129d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:a1:38:25:a2:6e:f5:5a:55:8b:c3:c8:2b: 3a:ea:62:ad:4e:86:65:e5:06:b4:54:a9:33:fe:81: 14:9d:20:6d:3f:07:eb:26:76:b0:39:99:93:43:23: 42:f9:a2:6f:c3:03:70:8e:a5:0f:b0:33:66:8a:69: f2:95:70:f7:99:0d:c2:4f:f2:53:9b:ff:6a:5d:61: a4:5f:35:5e:05:94:05:3d:2b:67:41:6e:4e:79:b7: e4:18:e0:0d:31:59:fd:3e:8d:ad:6b:3f:d8:62:b2: bb:7e:5c:50:d0:b7:7b:42:f3:11:4a:fe:d3:80:89: df:31:97:2a:ef:e6:5f:68:73:16:fb:ef:3e:f9:47: 64:88:ac:92:bd:2e:10:8b:58:4f:0e:ca:1c:9e:a3: 0c:01:11:13:c5:f5:d0:f0:8d:33:27:92:cb:3b:38: 53:a2:ec:b3:ca:e1:d2:56:3a:fd:89:13:a8:a8:95: c7:b7:ab:13:04:cf:59:5b:b3:ec:ef:73:8b:c6:76: ac:e9:9d:a2:22:75:25:0f:9c:6b:0c:45:12:d4:ac: 6a:e6:ac:ca:ff:49:6b:e1:c2:85:14:cc:9b:b9:05: db:98:3f:1e:8c:d3:2d:37:50:89:ae:2d:ce:0e:76: b4:19:9e:f2:b6:ac:84:f0:cd:25:03:75:13:33:81: 7d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8A:78:CB:02:B8:AE:46:F2:B5:09:6A:5B:60:4B:59:30:ED:6B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abcc9f00-b16e-3a9a-84a4-0ac6eb2c0696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:62:c0:4b:20:64:ea:33:39:58:3f:30:7c:2e:79:c4:0a:97: 68:f6:5f:a0:43:fc:aa:e3:b9:0e:0d:12:3f:d5:80:1a:8b:00: fb:45:81:d4:67:7b:b5:78:6d:36:8c:4d:2b:86:ff:94:72:e4: 21:99:98:d3:ea:98:46:cd:62:e3:4a:97:50:d7:9a:e8:ba:15: b1:b9:e5:ea:ac:c2:fd:d6:92:ca:47:7d:42:3b:e4:24:9e:a4: f3:de:4d:9e:56:7f:df:7f:e6:f3:65:1d:22:a0:39:62:bb:c7: 4e:45:73:cf:35:33:ea:57:03:08:2c:59:b6:51:b6:4e:9d:69: 91:e0:00:7d:79:39:ba:c2:c7:f6:03:7d:e7:75:bb:58:fa:3d: b9:e7:f6:e9:af:61:bd:38:2d:e6:6c:17:13:2c:7f:e8:8b:66: f9:07:e9:e8:cb:7a:75:57:04:96:75:ce:c3:eb:07:f0:ca:f5: 96:6d:29:3f:a2:5e:6d:5b:e0:6f:5a:ee:61:e3:7f:96:0c:ad: 58:cd:1e:f4:85:ee:82:4b:ba:41:06:25:30:99:1b:ac:7d:5a: 5d:e9:77:7b:c1:c3:24:23:4e:ce:bb:bb:02:ca:36:a8:a1:d0: a5:9e:ab:4e:13:17:c2:df:0e:4e:49:c0:e6:97:6a:72:d7:2b: f3:12:b6:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMnYWR8MqHKtkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZmY5OTcxZjgtNDYxZi00ZjdkLTg4M2MtOWY4ZTI2MTI5ZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN+hOCWibvVaVYvDyCs66mKtToZl5Qa0VKkz /oEUnSBtPwfrJnawOZmTQyNC+aJvwwNwjqUPsDNmimnylXD3mQ3CT/JTm/9qXWGk XzVeBZQFPStnQW5OebfkGOANMVn9Po2taz/YYrK7flxQ0Ld7QvMRSv7TgInfMZcq 7+ZfaHMW++8++UdkiKySvS4Qi1hPDsocnqMMARETxfXQ8I0zJ5LLOzhTouyzyuHS Vjr9iROoqJXHt6sTBM9ZW7Ps73OLxnas6Z2iInUlD5xrDEUS1Kxq5qzK/0lr4cKF FMybuQXbmD8ejNMtN1CJri3ODna0GZ7ytqyE8M0lA3UTM4F9FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmKeMsCuK5G8rUJaltgS1kw7WtcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWJjYzlmMDAtYjE2ZS0z YTlhLTg0YTQtMGFjNmViMmMwNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJiwEsgZOozOVg/MHwuecQKl2j2X6BD/KrjuQ4NEj/VgBqLAPtFgdRn e7V4bTaMTSuG/5Ry5CGZmNPqmEbNYuNKl1DXmui6FbG55eqswv3WkspHfUI75CSe pPPeTZ5Wf99/5vNlHSKgOWK7x05Fc881M+pXAwgsWbZRtk6daZHgAH15ObrCx/YD fed1u1j6Pbnn9umvYb04LeZsFxMsf+iLZvkH6ejLenVXBJZ1zsPrB/DK9ZZtKT+i Xm1b4G9a7mHjf5YMrVjNHvSF7oJLukEGJTCZG6x9Wl3pd3vBwyQjTs67uwLKNqih 0KWeq04TF8LfDk5JwOaXanLXK/MSttk= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:51 2025 by rpki-client