$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9714679-7e23-3e0c-a9ac-644ebe6e1511.roa File: c9714679-7e23-3e0c-a9ac-644ebe6e1511.roa (raw, json) Hash identifier: rzV1848Bupir9iIkDgW7R1VOZERvHg4LPLB8XM6RsBU= Subject key identifier: AE:4D:CA:51:1A:76:C4:85:D3:F6:30:64:2A:B6:EA:3F:02:E1:52:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F582E6A3BFBF65D80D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9714679-7e23-3e0c-a9ac-644ebe6e1511.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 50.96.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f5:82:e6:a3:bf:bf:65:d8:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=3489652a-5e0f-48b7-8ec0-8eb2bf47b4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:20:f1:23:19:ce:3e:39:97:8f:9b:cc:09:1c: 23:c3:76:43:8e:d1:0d:43:2e:07:f2:c0:d6:14:be: f0:65:78:93:df:56:62:6e:ed:8f:3c:04:f4:ab:84: 3e:cf:9c:d7:3a:4c:16:a1:a6:d7:55:63:6a:10:5b: e0:8a:d8:18:92:09:85:fc:2c:5a:39:8d:ca:1f:21: 42:c4:c0:40:32:30:14:fc:0a:2e:b3:de:7d:e5:cf: fc:bc:5e:9f:66:59:e8:bf:a3:17:a8:1c:0c:87:ee: c3:e8:c6:bc:54:99:53:c6:91:f6:de:60:6d:03:b0: 8c:88:c2:b8:08:1b:f1:3e:6f:03:53:3d:fb:7c:44: 01:78:52:36:8e:09:d1:c2:be:f4:70:4d:e0:d3:24: e7:bd:38:17:07:55:d5:38:09:a3:ec:56:4c:f6:a4: ff:79:3c:75:eb:37:c4:37:5d:93:e7:9c:86:04:26: 96:05:57:15:d5:ee:c8:15:1c:86:fd:8d:0a:b6:c8: cf:9d:46:c6:48:bb:fa:c4:dc:b8:85:c6:c8:b6:85: d7:a9:14:aa:f2:9c:e8:18:9e:c1:d9:49:01:e3:04: 3c:5b:42:cc:53:51:1f:66:5d:fe:bc:1a:54:f6:94: 95:65:b3:e0:4b:36:67:5e:33:2a:8a:b9:01:b0:68: 20:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4D:CA:51:1A:76:C4:85:D3:F6:30:64:2A:B6:EA:3F:02:E1:52:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9714679-7e23-3e0c-a9ac-644ebe6e1511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8b:ab:7e:c5:68:a6:69:80:be:ec:6f:2e:3c:22:80:b0:2f: f7:a5:58:97:99:6f:8b:42:ba:b7:ea:66:6d:f0:db:1e:64:05: a9:e9:59:e3:3d:49:17:80:e9:6a:a3:00:96:00:9a:8a:9e:45: 5d:0b:63:66:1b:51:70:eb:fe:37:51:15:e8:2a:57:de:ae:63: 5e:01:1c:a1:21:d7:e7:81:4a:1b:41:77:34:b3:79:c2:4e:22: ea:6a:80:95:1c:52:e7:a8:08:56:6f:3d:a4:79:ba:be:fa:f4: 56:fa:03:5c:9d:56:66:d0:51:24:47:49:0e:9b:1c:ec:9b:99: f9:14:d7:d4:0b:14:63:c1:9b:91:04:ab:d0:2f:a9:66:5c:43: 97:7f:ec:96:28:66:bb:0f:bc:eb:03:79:28:9a:f5:a7:0b:29: 4d:94:0b:11:55:37:08:7d:78:65:ba:46:f0:95:4c:77:15:38: 0a:74:71:ec:c6:37:ac:9e:70:27:53:64:82:74:ce:67:89:77: 2d:5e:2c:ad:60:1a:c2:45:58:eb:83:ed:36:27:02:1a:5e:be: 97:e7:25:f9:90:79:32:5b:ef:12:7c:77:f0:4d:05:00:eb:16: 21:5b:e6:47:cf:0d:c8:e3:23:d1:0e:2e:f5:24:f1:be:f2:a0: 54:34:78:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPWC5qO/v2XYDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MzQ4OTY1MmEtNWUwZi00OGI3LThlYzAtOGViMmJmNDdiNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiDxIxnOPjmXj5vMCRwjw3ZDjtENQy4H8sDW FL7wZXiT31Zibu2PPAT0q4Q+z5zXOkwWoabXVWNqEFvgitgYkgmF/CxaOY3KHyFC xMBAMjAU/Aous9595c/8vF6fZlnov6MXqBwMh+7D6Ma8VJlTxpH23mBtA7CMiMK4 CBvxPm8DUz37fEQBeFI2jgnRwr70cE3g0yTnvTgXB1XVOAmj7FZM9qT/eTx16zfE N12T55yGBCaWBVcV1e7IFRyG/Y0KtsjPnUbGSLv6xNy4hcbItoXXqRSq8pzoGJ7B 2UkB4wQ8W0LMU1EfZl3+vBpU9pSVZbPgSzZnXjMqirkBsGgg+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5NylEadsSF0/YwZCq26j8C4VK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzk3MTQ2NzktN2UyMy0z ZTBjLWE5YWMtNjQ0ZWJlNmUxNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWLq37FaKZpgL7sby48IoCwL/elWJeZb4tCurfqZm3w2x5kBanpWeM9 SReA6WqjAJYAmoqeRV0LY2YbUXDr/jdRFegqV96uY14BHKEh1+eBShtBdzSzecJO IupqgJUcUueoCFZvPaR5ur769Fb6A1ydVmbQUSRHSQ6bHOybmfkU19QLFGPBm5EE q9AvqWZcQ5d/7JYoZrsPvOsDeSia9acLKU2UCxFVNwh9eGW6RvCVTHcVOAp0cezG N6yecCdTZIJ0zmeJdy1eLK1gGsJFWOuD7TYnAhpevpfnJfmQeTJb7xJ8d/BNBQDr FiFb5kfPDcjjI9EOLvUk8b7yoFQ0eFw= -----END CERTIFICATE-----Generated at Wed Aug 6 05:14:46 2025 by rpki-client