$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0858105d-530a-3c65-b8d5-11a254af58e9.roa File: 0858105d-530a-3c65-b8d5-11a254af58e9.roa (raw, json) Hash identifier: sRRGgVkwaJFDZ/rWZO7ZuhafgPyillBKkJU7ptnEnvk= Subject key identifier: C8:A9:1A:2B:1A:47:1A:90:7C:30:19:8A:99:B8:14:B1:15:B6:55:0C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED86488D093E51FB675BF7080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0858105d-530a-3c65-b8d5-11a254af58e9.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 50.96.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:88:d0:93:e5:1f:b6:75:bf:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=21a180f1-1336-4ec5-9268-ad29254cea92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:7c:f0:09:20:0c:ff:70:b5:da:ea:5f:a4: 84:f8:c2:96:6b:18:0a:35:04:da:d0:b0:43:34:d5: 7f:48:83:e6:cd:85:d7:3c:40:e5:be:23:39:9c:00: 03:9a:04:0e:60:f3:b0:9c:3f:f4:cc:e9:25:cc:7d: 24:8c:85:4f:0d:7f:0e:92:5a:18:0f:5d:56:3b:7f: cf:b3:9c:ba:37:93:5e:75:c9:60:ea:1a:8d:fa:3d: 57:51:b3:67:1e:dd:97:d4:b2:2e:a3:95:a2:48:c4: 20:f8:75:6f:9f:3e:07:b9:15:42:1c:8b:2b:71:fd: 2d:80:0b:1c:e1:03:f2:80:44:0c:5b:cb:c0:8a:ee: 3e:36:75:df:1c:73:70:4d:3f:28:74:02:c2:cf:21: 47:63:50:4d:6d:d3:b3:a9:7d:86:fa:0d:63:d4:a4: 0e:58:80:b4:08:0c:f0:c3:de:9a:5b:87:79:ad:cc: b5:44:ca:6f:fd:ab:6c:61:87:eb:c5:66:9d:78:9a: 37:81:e1:53:0c:20:a5:60:ec:79:8a:87:e7:7d:59: 3c:2e:9f:73:06:d2:89:76:76:2a:76:1e:9a:b5:82: 02:f2:34:7c:6a:2b:cf:3e:0c:3f:e9:bb:08:e2:9a: 9d:00:87:77:09:50:f1:37:80:e5:aa:4a:9a:6a:c5: 05:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A9:1A:2B:1A:47:1A:90:7C:30:19:8A:99:B8:14:B1:15:B6:55:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0858105d-530a-3c65-b8d5-11a254af58e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0d:71:42:20:3d:87:f7:67:75:a8:3a:4d:2d:4e:ee:e7:59: 3a:92:6d:fb:c8:c0:02:63:b6:7d:2f:67:23:c4:7f:5f:6a:b1: 2b:2c:4d:50:4f:e9:fb:0e:76:3a:af:5f:90:6d:85:d2:ea:46: 91:d7:23:ec:3f:99:ed:62:f9:36:17:94:3c:87:b1:89:16:d9: a4:f8:56:98:fa:2b:da:91:b1:01:fc:6b:cb:b7:3d:f5:9c:fe: 41:57:0e:67:ca:de:c9:29:af:2b:f3:47:0d:9e:42:13:77:7a: 36:f5:7b:b2:93:76:93:c3:ce:c7:35:e0:30:28:d2:ec:6e:51: 35:29:70:b9:7e:da:af:a5:94:1d:d7:78:88:9f:da:6e:13:7d: 30:63:b9:7a:c3:d3:b5:1c:17:e4:5a:da:a7:93:f0:65:ed:eb: 03:cb:39:c5:d5:d4:41:da:e4:01:57:6c:a7:fe:1c:bc:bd:6c: 8f:96:58:ae:b9:4d:8d:a3:5c:70:2b:8e:09:47:6b:a7:07:6f: 58:2f:a6:a0:aa:b9:40:d5:91:02:1a:79:a4:cb:d2:e3:b9:b8: b2:14:70:a2:94:99:30:1e:a9:a6:37:9e:c7:08:09:6e:fd:a8: 86:f8:0f:ef:92:64:cb:1f:27:8d:61:51:9a:43:f9:e5:60:10: 55:5d:fd:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZIjQk+UftnW/cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MjFhMTgwZjEtMTMzNi00ZWM1LTkyNjgtYWQyOTI1NGNlYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucN88AkgDP9wtdrqX6SE+MKWaxgKNQTa0LBD NNV/SIPmzYXXPEDlviM5nAADmgQOYPOwnD/0zOklzH0kjIVPDX8OkloYD11WO3/P s5y6N5Nedclg6hqN+j1XUbNnHt2X1LIuo5WiSMQg+HVvnz4HuRVCHIsrcf0tgAsc 4QPygEQMW8vAiu4+NnXfHHNwTT8odALCzyFHY1BNbdOzqX2G+g1j1KQOWIC0CAzw w96aW4d5rcy1RMpv/atsYYfrxWadeJo3geFTDCClYOx5iofnfVk8Lp9zBtKJdnYq dh6atYIC8jR8aivPPgw/6bsI4pqdAId3CVDxN4DlqkqaasUF2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMipGisaRxqQfDAZipm4FLEVtlUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDg1ODEwNWQtNTMwYS0z YzY1LWI4ZDUtMTFhMjU0YWY1OGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkNcUIgPYf3Z3WoOk0tTu7nWTqSbfvIwAJjtn0vZyPEf19qsSssTVBP 6fsOdjqvX5BthdLqRpHXI+w/me1i+TYXlDyHsYkW2aT4Vpj6K9qRsQH8a8u3PfWc /kFXDmfK3skpryvzRw2eQhN3ejb1e7KTdpPDzsc14DAo0uxuUTUpcLl+2q+llB3X eIif2m4TfTBjuXrD07UcF+Ra2qeT8GXt6wPLOcXV1EHa5AFXbKf+HLy9bI+WWK65 TY2jXHArjglHa6cHb1gvpqCquUDVkQIaeaTL0uO5uLIUcKKUmTAeqaY3nscICW79 qIb4D++SZMsfJ41hUZpD+eVgEFVd/fQ= -----END CERTIFICATE-----Generated at Thu Aug 27 11:37:46 2026 by rpki-client