$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e9439d6-a2c5-3f88-b02c-dc81ae99f030.roa File: 4e9439d6-a2c5-3f88-b02c-dc81ae99f030.roa (raw, json) Hash identifier: oAzl7IlXXUcRfheOKBihKxkAYu/Z0nvrbMf3IFT7EBc= Subject key identifier: 50:8C:82:AC:1C:C7:DC:80:66:7C:ED:1C:B7:84:9C:F6:8B:EB:CF:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6292F92D5C15FDBC7F3AB200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e9439d6-a2c5-3f88-b02c-dc81ae99f030.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 50.96.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f9:2d:5c:15:fd:bc:7f:3a:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=507d3ed4-aaf5-482d-b617-e35fd72c8a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:c6:fb:ca:b2:4a:58:c8:ad:e8:81:ff:06: d3:80:b7:62:4f:61:c2:c0:b0:f1:8b:58:91:2a:f0: 85:fe:bb:90:9f:00:03:5d:f3:cf:d0:32:99:80:28: 8c:ec:66:55:ce:9b:6e:68:76:2c:94:ae:21:ea:04: 71:c4:b3:25:3e:d6:c1:f0:50:ad:e8:18:19:10:c9: cc:9f:22:ee:79:63:a5:ba:e2:51:ed:af:36:0c:42: 24:6e:04:18:06:3a:a0:ed:19:2d:63:b8:74:4d:44: 19:ba:68:5f:b4:de:7c:a7:45:1b:31:df:eb:f5:0e: cd:2b:f5:68:ff:f6:cf:04:28:a0:ac:97:a2:66:75: cf:70:fe:cf:ae:80:54:71:0e:bd:1f:0a:22:28:05: 8d:11:22:15:cb:68:82:20:88:e0:ba:e0:31:eb:b3: 63:ef:b6:18:63:31:15:f4:61:13:f0:5c:23:de:a3: 91:d6:37:4b:9e:ef:73:a2:fe:86:69:0b:ed:03:e2: 86:0a:85:4c:04:e9:44:00:07:e3:8f:9c:0f:53:6b: c0:02:46:84:07:dd:53:a9:be:d7:cc:28:df:d2:69: 43:ce:12:26:3c:8e:b2:9f:28:6b:fa:ba:6f:fe:97: 8a:0b:0d:86:1b:26:26:d7:a6:c9:c5:04:92:63:71: 90:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8C:82:AC:1C:C7:DC:80:66:7C:ED:1C:B7:84:9C:F6:8B:EB:CF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e9439d6-a2c5-3f88-b02c-dc81ae99f030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:07:ef:b3:94:64:d9:05:c0:ca:3a:3f:3e:10:b2:c1:18:0b: 2d:b8:97:7e:a2:25:e5:8a:a8:98:71:d3:d2:69:bf:0d:ab:d8: fc:fd:03:fe:57:5a:c3:36:8c:d4:f1:62:1c:d4:5f:fa:85:f0: 6c:8a:05:77:82:c6:65:fd:35:99:75:f0:ff:74:f3:11:59:8b: bf:03:83:02:b5:4c:3f:2a:83:a4:44:df:a3:93:08:2d:e5:81: 59:40:b7:9f:21:e4:dc:7a:6b:25:51:ec:63:1d:0f:8a:b8:03: 9a:3a:40:72:0e:9c:3b:74:aa:dd:b7:99:68:63:e1:a7:22:71: 8a:ea:15:0e:9c:46:53:48:03:a5:13:80:ec:39:38:7f:87:82: 75:da:4c:8b:86:4c:ad:80:9e:ca:8f:a9:6b:0b:7b:d6:66:f9: 4e:a9:8b:d9:68:67:e6:b5:60:f3:e9:93:97:c7:32:1d:20:a2: bc:8d:60:76:15:cb:20:70:79:b6:e3:ae:9e:f3:a0:d4:90:66: 2c:52:4f:c9:e8:d9:4d:d8:b7:66:69:d3:39:61:79:0e:b8:59: 4c:27:12:bb:0a:3a:f7:48:46:e4:4d:09:4e:b1:4a:c4:4f:a4: 37:b0:5d:bc:37:e3:e8:2a:a3:6a:f8:d9:24:39:3e:0e:f3:4b: 09:a1:92:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikvktXBX9vH86sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NTA3ZDNlZDQtYWFmNS00ODJkLWI2MTctZTM1ZmQ3MmM4YTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTPG+8qySljIreiB/wbTgLdiT2HCwLDxi1iR KvCF/ruQnwADXfPP0DKZgCiM7GZVzptuaHYslK4h6gRxxLMlPtbB8FCt6BgZEMnM nyLueWOluuJR7a82DEIkbgQYBjqg7RktY7h0TUQZumhftN58p0UbMd/r9Q7NK/Vo //bPBCigrJeiZnXPcP7ProBUcQ69HwoiKAWNESIVy2iCIIjguuAx67Nj77YYYzEV 9GET8Fwj3qOR1jdLnu9zov6GaQvtA+KGCoVMBOlEAAfjj5wPU2vAAkaEB91Tqb7X zCjf0mlDzhImPI6ynyhr+rpv/peKCw2GGyYm16bJxQSSY3GQEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCMgqwcx9yAZnztHLeEnPaL688oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGU5NDM5ZDYtYTJjNS0z Zjg4LWIwMmMtZGM4MWFlOTlmMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4H77OUZNkFwMo6Pz4QssEYCy24l36iJeWKqJhx09Jpvw2r2Pz9A/5X WsM2jNTxYhzUX/qF8GyKBXeCxmX9NZl18P908xFZi78DgwK1TD8qg6RE36OTCC3l gVlAt58h5Nx6ayVR7GMdD4q4A5o6QHIOnDt0qt23mWhj4acicYrqFQ6cRlNIA6UT gOw5OH+HgnXaTIuGTK2AnsqPqWsLe9Zm+U6pi9loZ+a1YPPpk5fHMh0goryNYHYV yyBwebbjrp7zoNSQZixST8no2U3Yt2Zp0zlheQ64WUwnErsKOvdIRuRNCU6xSsRP pDewXbw34+gqo2r42SQ5Pg7zSwmhkg0= -----END CERTIFICATE-----Generated at Wed Oct 14 07:52:49 2026 by rpki-client