$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/329556ab-7a53-3bd1-b4db-6fbe43223b99.roa File: 329556ab-7a53-3bd1-b4db-6fbe43223b99.roa (raw, json) Hash identifier: r3YjERu8pkNzNJSaXqB6HnFAVkM0RroHJjHOLneGgcs= Subject key identifier: 17:4D:1F:13:5E:05:E4:11:0C:15:DA:2A:31:82:B7:30:CD:6F:6E:B3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EBB11C31BF193B313EBBCB2C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/329556ab-7a53-3bd1-b4db-6fbe43223b99.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 50.96.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c3:1b:f1:93:b3:13:eb:bc:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=edc4fbd4-63b0-4d9e-bc1f-08b880f989e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:63:6f:de:06:93:df:46:c0:0f:91:9b:94:ce: ba:e4:c3:76:0c:5f:ba:c1:4a:99:e0:27:ad:f4:3a: fe:da:03:c4:62:5b:4a:91:10:5c:89:d0:ef:4e:00: 40:d8:ed:69:05:e1:da:ef:76:27:60:ef:ce:47:de: 43:df:f1:81:18:31:52:90:95:5a:3e:8d:c2:01:c4: 78:ac:80:47:9d:ad:57:2f:b3:17:d3:b9:28:2a:d1: d5:4b:97:10:48:8a:f4:4e:94:eb:8b:7c:86:89:87: 78:43:53:f4:25:d1:52:9a:ab:9f:71:c9:c9:e2:85: 26:fd:30:23:be:b8:96:c2:3c:61:ef:82:43:18:f1: e4:e9:78:e7:e8:e6:e0:a0:17:49:18:7b:86:59:4a: 16:5a:18:10:47:ab:fd:65:48:5d:ae:06:ee:62:6b: 7d:b9:e4:5e:31:f0:99:e1:e5:33:28:10:9f:b1:61: 67:c1:5a:8c:d4:a3:df:46:d6:1d:bd:4c:cd:95:18: 28:91:0b:dc:92:9e:72:02:4a:a3:06:e6:2a:5c:9f: 1c:00:01:e3:7f:bf:5c:ed:d6:b2:47:4c:50:2a:a0: 82:7c:59:96:48:de:eb:ec:aa:d7:96:7b:6c:ec:4f: 02:55:c4:cc:09:de:75:22:b9:94:f9:d0:91:e5:0d: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4D:1F:13:5E:05:E4:11:0C:15:DA:2A:31:82:B7:30:CD:6F:6E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/329556ab-7a53-3bd1-b4db-6fbe43223b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:1a:a4:8a:4f:0b:41:3d:3a:de:38:4c:c0:51:e4:5f:ce:2a: 61:bc:c4:9f:9e:8e:88:c6:0a:b7:b0:83:0a:83:60:75:ed:6e: de:4f:3a:9e:68:5c:24:96:66:53:37:70:dc:71:a3:ae:f0:93: 8a:c9:8f:70:c2:1e:72:ec:4b:2e:ae:d4:49:b2:53:77:c0:b7: 6d:f6:3f:23:a8:6d:45:e0:86:07:5e:6d:f1:a7:77:e6:04:53: 07:05:77:3f:89:b3:5c:8a:2e:28:77:9f:fe:5a:6e:1d:7a:f1: 98:ed:fa:c7:04:bf:18:c7:2c:50:8d:14:4a:98:5b:46:b2:f3: 21:48:c3:48:1e:25:9d:85:e8:2b:02:37:d0:a8:7b:24:3a:1c: e6:ca:90:0e:99:88:f6:7c:4f:7d:73:df:8c:1a:ab:ef:14:13: 8e:2c:ea:25:91:94:25:69:e4:fe:f2:08:ca:bb:30:d2:0d:0b: 0a:3d:87:e8:77:9a:72:ad:ff:c4:d9:4d:f7:a7:e4:1b:57:5b: 11:fd:cf:ed:8c:80:ee:b7:5c:f0:82:de:37:fe:bc:b8:10:ed: 63:9a:5b:61:8b:da:90:c8:19:0d:05:be:33:8f:8d:a0:b0:52: 99:76:38:8b:cc:86:d9:7a:a1:0a:9e:b6:96:b1:92:d7:9c:63: 7a:67:40:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcMb8ZOzE+u8ssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZWRjNGZiZDQtNjNiMC00ZDllLWJjMWYtMDhiODgwZjk4OWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Nv3gaT30bAD5GblM665MN2DF+6wUqZ4Cet 9Dr+2gPEYltKkRBcidDvTgBA2O1pBeHa73YnYO/OR95D3/GBGDFSkJVaPo3CAcR4 rIBHna1XL7MX07koKtHVS5cQSIr0TpTri3yGiYd4Q1P0JdFSmqufccnJ4oUm/TAj vriWwjxh74JDGPHk6Xjn6ObgoBdJGHuGWUoWWhgQR6v9ZUhdrgbuYmt9ueReMfCZ 4eUzKBCfsWFnwVqM1KPfRtYdvUzNlRgokQvckp5yAkqjBuYqXJ8cAAHjf79c7day R0xQKqCCfFmWSN7r7KrXlnts7E8CVcTMCd51IrmU+dCR5Q2jpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdNHxNeBeQRDBXaKjGCtzDNb26zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzI5NTU2YWItN2E1My0z YmQxLWI0ZGItNmZiZTQzMjIzYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmDrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwapIpPC0E9Ot44TMBR5F/OKmG8xJ+ejojGCrewgwqDYHXtbt5POp5o XCSWZlM3cNxxo67wk4rJj3DCHnLsSy6u1EmyU3fAt232PyOobUXghgdebfGnd+YE UwcFdz+Js1yKLih3n/5abh168Zjt+scEvxjHLFCNFEqYW0ay8yFIw0geJZ2F6CsC N9CoeyQ6HObKkA6ZiPZ8T31z34waq+8UE44s6iWRlCVp5P7yCMq7MNINCwo9h+h3 mnKt/8TZTfen5BtXWxH9z+2MgO63XPCC3jf+vLgQ7WOaW2GL2pDIGQ0FvjOPjaCw Upl2OIvMhtl6oQqetpaxktecY3pnQLg= -----END CERTIFICATE-----Generated at Thu Aug 27 10:33:36 2026 by rpki-client