$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0de91a36-21ad-3a19-b00b-c7ba59483f14.roa File: 0de91a36-21ad-3a19-b00b-c7ba59483f14.roa (raw, json) Hash identifier: QzXmuBp706U2J05/5VmDI3xWYICZ89ZtJcnZkyBKaAg= Subject key identifier: 2D:D9:EE:4E:15:88:B9:D5:41:55:2A:F9:2F:3E:9D:76:E7:0D:2B:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED432550550334E837410CE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0de91a36-21ad-3a19-b00b-c7ba59483f14.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 50.96.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:55:05:50:33:4e:83:74:10:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=a1fc2f6f-fcee-49dd-b666-82b72d238772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:52:28:0e:ea:20:e9:94:a1:a5:c6:cf:16: 32:f7:0d:6a:49:a1:92:df:bc:25:cc:a0:0e:0b:64: 12:7a:29:98:e2:6d:53:03:9b:2f:30:2e:f3:46:b9: 82:8f:08:27:38:f6:8d:3f:a3:1d:56:e4:59:cd:bb: 18:4a:85:d8:40:b2:91:81:9f:11:e1:6a:41:8f:f7: 68:cc:76:55:5f:e6:35:2e:68:da:8c:39:a6:9a:c7: 1d:73:c9:60:b6:87:a7:3c:e1:83:65:1f:5b:09:fe: 7f:76:f4:f7:53:68:70:1d:14:32:a5:fd:3c:bc:1d: 32:4a:ca:e9:04:ac:49:25:f9:3c:e5:7c:e6:bc:df: cb:33:1e:27:21:5f:3e:8f:94:da:a8:5c:cb:12:78: 31:d4:95:0d:35:de:61:d7:b5:87:da:53:1f:9e:60: b6:82:64:e7:79:c5:0a:12:2d:27:d3:1d:81:32:89: f6:24:f6:4a:4f:86:28:71:b6:cb:38:12:42:8a:77: 0e:85:16:7b:0d:20:50:d5:5b:46:af:43:21:f4:e2: 49:4d:6b:0a:86:4e:4c:92:0d:fc:7c:ca:a5:fd:b4: 41:1a:36:29:e2:5b:bb:82:4a:c8:9e:e4:86:33:8a: 5a:c5:92:e7:07:b3:e2:bb:63:fd:00:f1:40:d9:22: cf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D9:EE:4E:15:88:B9:D5:41:55:2A:F9:2F:3E:9D:76:E7:0D:2B:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0de91a36-21ad-3a19-b00b-c7ba59483f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:2d:91:27:18:e6:87:c4:83:3a:21:00:6f:3c:8a:9d:4a:b0: 46:f2:b4:9b:38:1b:0a:7d:c9:a7:04:a2:af:32:40:18:53:1f: af:0a:92:ba:ba:13:78:fc:b8:e2:fd:ee:6a:27:55:bb:15:a1: 66:bc:b0:51:8c:8f:ab:50:8e:a6:d0:e7:e4:0d:e0:4e:61:f8: 86:05:e8:d5:7b:aa:d1:2a:23:3f:c1:af:3a:92:fd:ad:a1:47: 8b:61:11:02:01:0f:d1:91:61:99:3c:6b:70:2d:8d:95:59:73: fe:d4:83:84:ea:34:a3:a8:be:fe:fb:3c:e5:45:ed:dc:fb:82: 93:bd:d9:6b:80:9d:05:46:3b:cb:d1:a2:07:1e:38:b3:86:27: 70:b8:33:40:b2:d1:bc:ea:d6:e6:ef:4a:dc:bb:d4:99:20:2f: b5:89:9f:81:0a:62:97:5b:7f:a5:45:0c:23:46:2c:37:20:32: 58:86:0b:b1:c1:f0:cc:fb:fa:c8:b7:42:76:4b:02:31:b6:04: 08:d1:e0:cb:3d:92:13:e8:25:6a:63:13:95:98:21:34:c1:ab: cc:07:71:ce:e7:43:67:ab:9a:74:17:12:c9:82:b1:1a:fa:1f: c4:02:3e:9b:40:2b:c6:65:34:89:02:b7:72:73:ba:90:a9:42: 41:c9:bf:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlUFUDNOg3QQzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk YTFmYzJmNmYtZmNlZS00OWRkLWI2NjYtODJiNzJkMjM4NzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R5SKA7qIOmUoaXGzxYy9w1qSaGS37wlzKAO C2QSeimY4m1TA5svMC7zRrmCjwgnOPaNP6MdVuRZzbsYSoXYQLKRgZ8R4WpBj/do zHZVX+Y1LmjajDmmmscdc8lgtoenPOGDZR9bCf5/dvT3U2hwHRQypf08vB0ySsrp BKxJJfk85XzmvN/LMx4nIV8+j5TaqFzLEngx1JUNNd5h17WH2lMfnmC2gmTnecUK Ei0n0x2BMon2JPZKT4YocbbLOBJCincOhRZ7DSBQ1VtGr0Mh9OJJTWsKhk5Mkg38 fMql/bRBGjYp4lu7gkrInuSGM4paxZLnB7Piu2P9APFA2SLPpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3Z7k4ViLnVQVUq+S8+nXbnDSvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGRlOTFhMzYtMjFhZC0z YTE5LWIwMGItYzdiYTU5NDgzZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUtkScY5ofEgzohAG88ip1KsEbytJs4Gwp9yacEoq8yQBhTH68Kkrq6 E3j8uOL97monVbsVoWa8sFGMj6tQjqbQ5+QN4E5h+IYF6NV7qtEqIz/BrzqS/a2h R4thEQIBD9GRYZk8a3AtjZVZc/7Ug4TqNKOovv77POVF7dz7gpO92WuAnQVGO8vR ogceOLOGJ3C4M0Cy0bzq1ubvSty71JkgL7WJn4EKYpdbf6VFDCNGLDcgMliGC7HB 8Mz7+si3QnZLAjG2BAjR4Ms9khPoJWpjE5WYITTBq8wHcc7nQ2ermnQXEsmCsRr6 H8QCPptAK8ZlNIkCt3JzupCpQkHJv1w= -----END CERTIFICATE-----Generated at Thu Aug 27 11:39:21 2026 by rpki-client