$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0858105d-530a-3c65-b8d5-11a254af58e9.roa File: 0858105d-530a-3c65-b8d5-11a254af58e9.roa (raw, json) Hash identifier: CfznfTru1eHeg2MombwAe4YZ8YuEDSs7g9G8/0/fD6Q= Subject key identifier: 17:87:B7:DC:51:5B:66:6D:09:92:34:9A:DB:EA:4F:CF:03:DC:DF:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BCB652C6236F7ADECC58A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0858105d-530a-3c65-b8d5-11a254af58e9.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 50.96.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b6:52:c6:23:6f:7a:de:cc:58:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=533822a5-a832-4de2-a090-d64b7ea6f07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:43:62:52:5b:e6:b7:5b:83:31:fb:c5:7a:14: ea:b8:05:1f:d6:30:f7:fa:54:39:b6:75:6c:5d:d7: 45:03:46:6b:6d:cf:7e:a0:72:63:f8:e9:be:c3:18: ad:43:2f:85:d6:87:c9:16:29:45:2f:64:69:5a:f3: f5:82:dd:5a:c4:96:0a:15:59:31:41:36:05:7a:14: 22:08:bd:46:d9:ee:60:21:f9:fa:f3:b8:7b:f4:fb: 38:25:08:88:96:25:65:cd:dd:45:13:5f:29:9f:3b: e6:6b:75:88:71:b4:86:73:3b:37:45:ef:ad:2b:80: d5:d1:56:c8:bc:7f:87:e0:bb:31:c6:20:6e:11:e2: dc:ab:d6:f2:98:3e:3a:6b:2b:2c:01:fb:27:ff:f5: 04:d3:23:e8:db:16:52:91:f8:d5:46:16:3c:6b:f0: f7:60:4d:64:a7:bf:3d:92:c7:f0:79:05:70:3c:98: e9:f5:55:88:62:ac:79:11:95:f2:eb:d3:ff:a6:a1: a7:4b:80:d9:a2:2f:d0:c9:2d:81:e3:bc:3c:5c:a0: 5e:5e:fd:dc:68:e0:85:6e:73:a8:90:19:44:63:7b: ee:9a:d4:9d:50:ab:4d:bb:bb:e8:ea:c4:cd:db:a8: 4d:11:d9:a4:26:8e:c0:55:ca:44:8b:17:45:a3:a1: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:87:B7:DC:51:5B:66:6D:09:92:34:9A:DB:EA:4F:CF:03:DC:DF:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0858105d-530a-3c65-b8d5-11a254af58e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b8:de:e5:f8:99:66:73:da:ae:dd:18:35:48:88:e9:07:82: be:bf:e1:89:98:d0:d0:28:74:dc:9c:86:e0:16:e4:f9:3f:b1: 57:4b:a3:bd:f3:88:58:f3:b5:81:33:3e:61:23:1b:13:d9:9a: 4d:1e:4a:61:58:39:df:cf:c3:f3:50:ce:6f:3d:a4:02:fb:58: 9b:de:14:4a:6e:1c:dc:a1:e8:26:63:c2:2a:2b:6a:5a:4b:b4: f3:8a:a9:4c:15:da:9f:fd:95:45:67:5e:6d:29:35:33:3c:29: ad:ea:0e:98:8c:5a:f7:1d:0b:e0:5d:04:22:ec:61:86:63:bd: 76:9b:18:4c:6c:44:4f:5d:3f:31:a7:a9:38:92:97:fe:42:3e: 7f:a6:69:8a:f6:0f:e7:56:51:d7:c7:58:a5:2a:e1:a2:5e:9e: f7:95:6c:03:dc:47:bd:7f:81:7a:7f:86:62:cb:9e:9e:fb:d3: b9:ae:d6:fa:9f:5b:f5:73:20:40:ed:2a:f1:00:53:2c:81:36: 60:a0:7b:46:ed:8d:89:ad:d3:4f:1a:ae:2b:06:aa:81:3c:6d: 60:4a:81:23:bf:6a:4d:72:c2:83:93:0a:1f:4a:f4:4d:93:ed: a2:f6:10:a6:16:dd:ed:2b:0c:cb:90:76:8d:6a:24:5c:07:5c: 27:a5:ed:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLZSxiNvet7MWKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NTMzODIyYTUtYTgzMi00ZGUyLWEwOTAtZDY0YjdlYTZmMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApENiUlvmt1uDMfvFehTquAUf1jD3+lQ5tnVs XddFA0Zrbc9+oHJj+Om+wxitQy+F1ofJFilFL2RpWvP1gt1axJYKFVkxQTYFehQi CL1G2e5gIfn687h79Ps4JQiIliVlzd1FE18pnzvma3WIcbSGczs3Re+tK4DV0VbI vH+H4LsxxiBuEeLcq9bymD46ayssAfsn//UE0yPo2xZSkfjVRhY8a/D3YE1kp789 ksfweQVwPJjp9VWIYqx5EZXy69P/pqGnS4DZoi/QyS2B47w8XKBeXv3caOCFbnOo kBlEY3vumtSdUKtNu7vo6sTN26hNEdmkJo7AVcpEixdFo6F9+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeHt9xRW2ZtCZI0mtvqT88D3N/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDg1ODEwNWQtNTMwYS0z YzY1LWI4ZDUtMTFhMjU0YWY1OGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy43uX4mWZz2q7dGDVIiOkHgr6/4YmY0NAodNychuAW5Pk/sVdLo73z iFjztYEzPmEjGxPZmk0eSmFYOd/Pw/NQzm89pAL7WJveFEpuHNyh6CZjwioralpL tPOKqUwV2p/9lUVnXm0pNTM8Ka3qDpiMWvcdC+BdBCLsYYZjvXabGExsRE9dPzGn qTiSl/5CPn+maYr2D+dWUdfHWKUq4aJenveVbAPcR71/gXp/hmLLnp7707mu1vqf W/VzIEDtKvEAUyyBNmCge0btjYmt008arisGqoE8bWBKgSO/ak1ywoOTCh9K9E2T 7aL2EKYW3e0rDMuQdo1qJFwHXCel7Us= -----END CERTIFICATE-----Generated at Mon Apr 13 13:07:40 2026 by rpki-client