$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac464d97-dd4f-3028-ac27-78e3aa353586.roa File: ac464d97-dd4f-3028-ac27-78e3aa353586.roa (raw, json) Hash identifier: n87JLOS3aohN5NWaMfnhhE3S2RIS+zdI+s6MbiffNH4= Subject key identifier: 2E:05:3A:EB:9B:40:60:7A:AE:65:47:55:8C:5D:0E:20:9E:63:EB:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD884E432B366B36F50D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac464d97-dd4f-3028-ac27-78e3aa353586.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 50.96.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:88:4e:43:2b:36:6b:36:f5:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=2a83456e-9197-46e9-be39-c25aa661d60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:57:b5:59:33:4d:ae:3c:43:2f:02:f5:3e: c1:cd:f1:84:c7:0b:c3:1f:e5:47:c5:1c:b2:73:2c: 46:a1:f7:18:b1:5b:1f:ac:32:a4:9a:54:fa:60:19: 53:6d:b2:eb:be:4a:b7:06:69:a5:66:e6:41:00:c3: 14:63:b8:7a:f8:8b:0d:9f:ac:41:90:5a:27:ee:8c: f4:4f:ab:a3:00:c8:76:d2:e3:bc:41:89:d8:a4:ba: e7:f8:23:30:29:de:e6:f9:ab:db:1f:28:04:f1:f0: d9:fc:27:9b:78:06:93:73:2e:9a:a4:28:01:78:34: 9a:01:bd:5e:bb:12:a9:74:03:35:63:c9:c1:36:e8: 9e:e5:dd:77:d4:65:4e:23:39:de:14:b8:b3:75:14: 97:5b:38:cc:e2:3b:07:81:72:c7:79:06:ba:91:2b: 49:6a:18:97:bf:5b:fe:60:75:10:89:4a:64:0d:bc: 72:3f:f9:3e:6e:e0:b9:bf:80:43:73:33:1c:9d:af: 3e:e8:9c:af:3f:55:45:10:46:7c:da:d4:58:a4:d0: 40:53:07:37:68:90:10:13:ef:54:1d:ab:a0:56:08: 1f:1c:0c:e4:e8:66:64:24:58:a5:16:a3:8b:1b:39: 76:4f:7b:c8:b0:fa:b6:2e:46:04:f2:9b:a4:0b:ca: e8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:05:3A:EB:9B:40:60:7A:AE:65:47:55:8C:5D:0E:20:9E:63:EB:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac464d97-dd4f-3028-ac27-78e3aa353586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b8:2a:b6:07:d4:76:10:06:0c:0e:2e:2b:4c:85:c4:6a:c9: 2f:13:51:45:b8:e7:ed:27:2c:0c:51:00:ca:9f:f0:f1:60:56: a5:c6:65:f6:42:8c:3e:f5:b4:0b:a4:85:81:2e:49:40:04:55: 45:de:95:51:17:40:5a:aa:f7:6c:72:e8:d9:fb:c9:16:fb:3b: 8a:6a:cc:07:2d:d3:d9:1c:62:0e:27:36:f9:76:4f:56:c1:88: c6:d3:44:06:50:d2:69:d1:fa:05:ce:d8:fb:a9:19:10:e2:2e: 70:f9:65:be:6a:7e:ea:58:38:f8:7a:69:a9:18:5c:b9:17:1b: 7d:e4:2a:55:57:e8:d3:fe:cc:bf:03:4c:53:7d:fe:50:1c:90: 39:7d:23:77:a0:f8:03:2c:7a:43:93:29:55:6a:69:1b:11:f1: 2a:b6:93:26:e8:55:c2:87:d2:62:41:a9:80:47:a0:25:d1:54: 66:f9:2a:65:6b:d3:bf:40:2f:63:48:e5:d8:b9:f5:88:e5:a2: c4:21:ae:49:84:30:ca:b0:e2:8c:95:d6:34:ef:3e:6f:fa:97: c4:40:f3:59:7f:9a:9d:1d:8b:78:ee:33:04:e7:55:7a:7e:5c: 36:72:15:5b:14:a9:43:31:d5:cf:2a:08:c2:3f:a9:cf:8b:f8: b4:34:da:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3YhOQys2azb1DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MmE4MzQ1NmUtOTE5Ny00NmU5LWJlMzktYzI1YWE2NjFkNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNlXtVkzTa48Qy8C9T7BzfGExwvDH+VHxRyy cyxGofcYsVsfrDKkmlT6YBlTbbLrvkq3BmmlZuZBAMMUY7h6+IsNn6xBkFon7oz0 T6ujAMh20uO8QYnYpLrn+CMwKd7m+avbHygE8fDZ/CebeAaTcy6apCgBeDSaAb1e uxKpdAM1Y8nBNuie5d131GVOIzneFLizdRSXWzjM4jsHgXLHeQa6kStJahiXv1v+ YHUQiUpkDbxyP/k+buC5v4BDczMcna8+6JyvP1VFEEZ82tRYpNBAUwc3aJAQE+9U HaugVggfHAzk6GZkJFilFqOLGzl2T3vIsPq2LkYE8pukC8romQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4FOuubQGB6rmVHVYxdDiCeY+tbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWM0NjRkOTctZGQ0Zi0z MDI4LWFjMjctNzhlM2FhMzUzNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG4KrYH1HYQBgwOLitMhcRqyS8TUUW45+0nLAxRAMqf8PFgVqXGZfZC jD71tAukhYEuSUAEVUXelVEXQFqq92xy6Nn7yRb7O4pqzAct09kcYg4nNvl2T1bB iMbTRAZQ0mnR+gXO2PupGRDiLnD5Zb5qfupYOPh6aakYXLkXG33kKlVX6NP+zL8D TFN9/lAckDl9I3eg+AMsekOTKVVqaRsR8Sq2kyboVcKH0mJBqYBHoCXRVGb5KmVr 079AL2NI5di59YjlosQhrkmEMMqw4oyV1jTvPm/6l8RA81l/mp0di3juMwTnVXp+ XDZyFVsUqUMx1c8qCMI/qc+L+LQ02uM= -----END CERTIFICATE-----Generated at Tue Nov 4 16:58:54 2025 by rpki-client