$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/74df4832-37b5-3ce8-ba82-280363c9c21f.roa File: 74df4832-37b5-3ce8-ba82-280363c9c21f.roa (raw, json) Hash identifier: jJH1/3Vx/05BH78Ca+bRp4DH+DKE2nmvJpqnFqcXBXw= Subject key identifier: 82:23:56:6E:2F:3E:AF:86:17:E3:E7:F5:25:6B:7F:82:B1:67:CD:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BA34A27325869FCB706C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/74df4832-37b5-3ce8-ba82-280363c9c21f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 50.96.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:34:a2:73:25:86:9f:cb:70:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=30be66ca-9bfb-48c8-87be-442ed6f3284b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:8a:91:6a:35:32:98:1e:38:b5:d3:0b:c8: a1:25:d9:43:a4:03:c8:36:da:c8:f7:78:3a:cf:1e: c4:45:0f:1d:75:de:cd:bc:5b:8d:50:9f:bf:0e:34: 59:45:b6:80:c2:0f:9f:c6:82:a2:1f:dc:19:3b:9e: fe:29:91:b7:a4:a4:42:72:26:c1:50:e5:a8:fe:91: cc:dc:c2:11:cc:b5:1b:df:09:19:ae:61:3c:ed:a1: c6:d0:74:ec:9f:74:45:ef:1d:fe:e9:ca:0a:7e:86: 69:55:cb:95:64:2c:da:ff:5f:53:8f:13:d4:74:80: 04:4f:38:1f:c1:fe:7b:f1:b3:90:21:b1:61:b7:34: 1b:9f:c3:f8:a1:ea:de:65:2c:fe:11:6b:0c:af:3b: 6b:5a:d9:fa:c3:64:bf:fe:86:a7:26:c0:9b:13:ca: bf:1c:9e:a4:02:29:06:e6:3f:59:d9:5f:57:56:fb: 5c:7b:bd:31:ac:a9:b2:2b:41:a0:59:58:23:24:0b: 06:d3:25:2d:03:61:cf:f9:38:98:92:ea:3b:31:c5: d1:2d:00:ee:fe:ea:b6:1a:29:d9:a4:e2:11:00:b5: 99:4d:ed:9f:ba:79:be:2f:57:ff:63:bc:07:51:a4: c2:0b:8c:94:41:ba:2d:31:d9:11:89:22:42:b3:5f: f1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:23:56:6E:2F:3E:AF:86:17:E3:E7:F5:25:6B:7F:82:B1:67:CD:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/74df4832-37b5-3ce8-ba82-280363c9c21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:0d:ba:67:0f:86:dd:65:fd:b9:28:1c:93:53:5c:c0:8d:d6: 93:f0:1e:d5:63:c8:9a:83:5f:67:83:ea:17:48:bd:fe:69:47: 86:6f:92:12:e0:05:07:98:33:0c:2e:b9:cd:d3:34:07:bb:a4: df:34:29:fa:3a:7b:66:2c:e8:cb:f5:21:05:7b:14:d8:09:88: 05:2c:f4:07:d0:54:3e:d7:f0:c8:d6:3a:5c:b7:f2:31:23:0b: 44:8e:bc:60:33:3e:86:59:52:18:a9:2c:97:ae:4d:c3:3d:ca: 1b:f4:f5:fe:92:ec:84:5f:e1:49:c4:ca:08:28:40:32:d8:ff: 5d:c5:30:6d:b7:81:a1:44:02:f4:51:54:63:7d:ae:99:c4:d9: bd:d2:7a:bf:ee:df:ed:ae:d8:4c:25:fb:d1:0b:cb:0f:d7:30: 62:ae:2f:f8:c6:35:cf:55:ca:4f:74:bd:ac:4e:62:52:98:0b: ca:d9:e1:79:ea:da:03:ba:ca:d3:a2:be:b4:71:e7:de:2a:ef: 4c:cd:40:d7:68:6e:24:0e:cb:17:71:b1:e1:7f:55:f1:47:9c: 7c:16:1d:31:47:f2:ba:98:e4:51:2c:8e:e9:42:41:35:96:2c: 85:54:43:35:38:2f:fe:4a:61:6d:68:e3:c2:aa:d5:bb:e6:4c: 29:57:ce:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujSicyWGn8twbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MzBiZTY2Y2EtOWJmYi00OGM4LTg3YmUtNDQyZWQ2ZjMyODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNCKkWo1MpgeOLXTC8ihJdlDpAPINtrI93g6 zx7ERQ8ddd7NvFuNUJ+/DjRZRbaAwg+fxoKiH9wZO57+KZG3pKRCcibBUOWo/pHM 3MIRzLUb3wkZrmE87aHG0HTsn3RF7x3+6coKfoZpVcuVZCza/19TjxPUdIAETzgf wf578bOQIbFhtzQbn8P4oereZSz+EWsMrztrWtn6w2S//oanJsCbE8q/HJ6kAikG 5j9Z2V9XVvtce70xrKmyK0GgWVgjJAsG0yUtA2HP+TiYkuo7McXRLQDu/uq2GinZ pOIRALWZTe2funm+L1f/Y7wHUaTCC4yUQbotMdkRiSJCs1/xOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIjVm4vPq+GF+Pn9SVrf4KxZ80LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzRkZjQ4MzItMzdiNS0z Y2U4LWJhODItMjgwMzYzYzljMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMNumcPht1l/bkoHJNTXMCN1pPwHtVjyJqDX2eD6hdIvf5pR4ZvkhLg BQeYMwwuuc3TNAe7pN80Kfo6e2Ys6Mv1IQV7FNgJiAUs9AfQVD7X8MjWOly38jEj C0SOvGAzPoZZUhipLJeuTcM9yhv09f6S7IRf4UnEyggoQDLY/13FMG23gaFEAvRR VGN9rpnE2b3Ser/u3+2u2Ewl+9ELyw/XMGKuL/jGNc9Vyk90vaxOYlKYC8rZ4Xnq 2gO6ytOivrRx594q70zNQNdobiQOyxdxseF/VfFHnHwWHTFH8rqY5FEsjulCQTWW LIVUQzU4L/5KYW1o48Kq1bvmTClXzpw= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:30 2026 by rpki-client