$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e435067-01d7-356b-8bb7-954860561b47.roa File: 8e435067-01d7-356b-8bb7-954860561b47.roa (raw, json) Hash identifier: 7T+bbfdAAiFQ4/3itNcVV8foKItvAUnq/ocfLHy2XKU= Subject key identifier: 4C:32:27:CE:C7:E5:4A:D4:6F:38:89:76:3F:57:B7:89:B7:5C:C6:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BCB603A34336CF40BEC140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e435067-01d7-356b-8bb7-954860561b47.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 50.96.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b6:03:a3:43:36:cf:40:be:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b48bfb03-a726-4ab2-8d65-9920749153ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:e9:8d:9c:41:73:0a:a4:4c:79:a1:d7:4c: b9:5b:47:07:b9:e6:2e:ef:88:19:29:ed:02:f6:fd: 03:43:67:02:0c:47:71:a5:c1:7f:b2:bc:66:e4:5d: 6d:d2:e4:e8:c8:0f:31:b1:1a:a4:76:e7:af:00:d3: 9a:c4:a4:af:06:fc:ee:44:5a:44:f5:49:b9:cb:71: 39:1f:28:13:29:7a:51:74:69:5b:ab:13:2d:77:85: 54:f1:1c:39:f4:bd:24:27:88:78:97:69:67:7e:70: 4d:be:32:97:12:a8:45:b2:f2:73:78:df:89:bb:c6: a4:26:f0:06:26:74:85:3b:63:a6:8d:d9:39:09:97: 54:25:d5:6b:46:fe:ca:98:69:7d:4e:fc:ce:db:88: 5e:e4:d7:23:a4:cf:aa:e3:d4:cc:aa:36:21:cb:76: 2e:e8:4e:49:07:53:78:80:c9:87:c1:82:cd:3c:d7: 4a:bb:86:4b:1e:09:bc:ef:69:bf:eb:33:c2:68:5d: 29:58:75:97:9d:c1:b7:9e:aa:c6:eb:85:23:22:a5: ca:3e:19:4d:df:42:ca:ec:84:17:a8:e0:9a:84:00: 62:ba:7f:41:85:91:2f:68:85:b6:3d:94:33:24:ff: c5:2c:7c:e4:29:46:72:1e:36:eb:77:2a:00:fd:f9: 7a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:32:27:CE:C7:E5:4A:D4:6F:38:89:76:3F:57:B7:89:B7:5C:C6:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e435067-01d7-356b-8bb7-954860561b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:29:1f:da:94:e7:3f:ea:c5:3e:52:57:58:73:ef:ab:eb:8e: ab:27:12:af:11:76:b2:38:ee:84:0b:c7:3b:fc:04:62:ec:76: 43:d5:1a:d5:db:3b:22:15:33:8d:2f:54:2c:4a:32:ad:89:1d: 7f:b8:17:87:1f:32:82:7b:a5:55:21:f3:11:28:d1:c6:f2:0f: 18:de:99:a2:0d:97:11:52:28:c7:b9:b1:5e:a5:55:d4:1d:6d: 7a:26:31:fb:65:18:2c:8b:27:22:67:46:97:d3:0b:12:84:3e: 90:90:30:b2:54:bc:50:95:c4:e3:c7:4f:54:30:37:c6:c0:23: bf:23:71:75:98:8a:54:be:7c:f6:4d:9a:0a:cc:af:33:aa:8d: e1:c5:71:1d:d9:ca:b1:fc:1e:29:37:e8:cb:67:d0:89:c6:2d: 13:2c:6c:b4:85:33:4b:be:7e:58:24:7f:8d:98:a3:ba:cd:12: d7:53:54:0d:e0:ea:ea:05:2a:89:84:96:a2:9f:54:e3:da:49: 1f:cb:af:b2:31:e4:39:2c:45:47:a8:8c:d3:30:64:85:b6:64: ab:88:7f:58:97:b1:bb:1c:85:ce:b9:45:d7:dc:91:7a:67:50: 57:c8:31:7e:74:5d:11:ae:f6:fe:a2:ad:b4:3f:95:97:91:d2: ea:ed:36:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLYDo0M2z0C+wUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjQ4YmZiMDMtYTcyNi00YWIyLThkNjUtOTkyMDc0OTE1M2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllfpjZxBcwqkTHmh10y5W0cHueYu74gZKe0C 9v0DQ2cCDEdxpcF/srxm5F1t0uToyA8xsRqkduevANOaxKSvBvzuRFpE9Um5y3E5 HygTKXpRdGlbqxMtd4VU8Rw59L0kJ4h4l2lnfnBNvjKXEqhFsvJzeN+Ju8akJvAG JnSFO2Omjdk5CZdUJdVrRv7KmGl9TvzO24he5NcjpM+q49TMqjYhy3Yu6E5JB1N4 gMmHwYLNPNdKu4ZLHgm872m/6zPCaF0pWHWXncG3nqrG64UjIqXKPhlN30LK7IQX qOCahABiun9BhZEvaIW2PZQzJP/FLHzkKUZyHjbrdyoA/fl6mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwyJ87H5UrUbziJdj9Xt4m3XMaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGU0MzUwNjctMDFkNy0z NTZiLThiYjctOTU0ODYwNTYxYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEpH9qU5z/qxT5SV1hz76vrjqsnEq8RdrI47oQLxzv8BGLsdkPVGtXb OyIVM40vVCxKMq2JHX+4F4cfMoJ7pVUh8xEo0cbyDxjemaINlxFSKMe5sV6lVdQd bXomMftlGCyLJyJnRpfTCxKEPpCQMLJUvFCVxOPHT1QwN8bAI78jcXWYilS+fPZN mgrMrzOqjeHFcR3ZyrH8Hik36Mtn0InGLRMsbLSFM0u+flgkf42Yo7rNEtdTVA3g 6uoFKomElqKfVOPaSR/Lr7Ix5DksRUeojNMwZIW2ZKuIf1iXsbschc65RdfckXpn UFfIMX50XRGu9v6irbQ/lZeR0urtNlE= -----END CERTIFICATE-----Generated at Mon Apr 13 13:07:39 2026 by rpki-client