$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d172e8-25f0-36e2-8a5c-55ac9c28d064.roa File: a4d172e8-25f0-36e2-8a5c-55ac9c28d064.roa (raw, json) Hash identifier: FaKLApcIi42KfASzdf/VHCSyZiV0xkdvztHLah2Np70= Subject key identifier: E5:B8:27:80:37:92:2E:B0:E3:DB:F9:11:56:1B:61:D4:5F:FA:EE:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8D686C94FD08DE194E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d172e8-25f0-36e2-8a5c-55ac9c28d064.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 50.96.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8d:68:6c:94:fd:08:de:19:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=baffe584-31db-4dd0-8c12-6725f4b33d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cb:cd:16:97:91:84:ad:5c:99:27:8b:01:32: 6e:4f:f6:3c:54:78:fe:18:05:c4:01:3d:1b:33:88: 2f:1f:bb:4a:8f:8a:40:76:fc:9f:9a:33:eb:88:0e: 82:a0:62:05:53:b1:1f:f2:c4:39:b6:ee:57:bd:6f: 5f:33:6b:46:a8:2e:e5:f6:6d:a9:49:12:1e:79:fa: 9e:60:36:9a:a5:d1:f2:3e:32:cd:e7:6d:94:75:2b: f3:f4:08:23:29:13:d7:6c:2b:99:f0:f3:c3:b7:cc: 8b:be:83:8d:90:57:f0:9e:e8:1d:f3:7b:9d:8c:3f: 46:ab:78:06:df:41:ac:81:0d:05:28:3e:19:46:ab: 75:09:b8:04:e8:21:ed:14:fd:72:b8:27:1f:85:71: f4:1b:87:aa:af:67:58:1a:39:a3:ef:85:0f:24:79: 04:ed:47:b2:ea:1c:c4:3f:5f:c5:24:cb:55:7b:07: 7b:4c:63:d5:21:cf:83:59:43:7b:bd:fb:05:43:59: 5a:75:18:4d:3c:2a:da:7f:d1:16:65:f0:25:fb:2c: d6:bc:58:96:2d:e6:77:cc:2f:9c:8e:8b:22:c9:f8: ea:ea:4e:65:c8:5d:e4:a1:de:28:59:38:5c:a4:78: 45:43:97:54:0a:2e:77:23:1c:ef:46:39:00:9d:3a: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B8:27:80:37:92:2E:B0:E3:DB:F9:11:56:1B:61:D4:5F:FA:EE:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d172e8-25f0-36e2-8a5c-55ac9c28d064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b1:d4:27:a9:f1:29:f9:7b:b6:3c:9f:aa:49:bf:91:d7:93: f7:63:27:c0:b1:6d:66:a6:24:23:04:2c:48:f9:62:e1:07:7e: 2e:bb:12:fb:64:be:16:2d:b0:94:58:f6:03:a4:89:01:b1:56: 3c:5e:23:ce:31:88:7b:ea:2f:d1:d2:57:80:32:74:48:e5:62: 39:f7:31:92:84:5b:52:d3:dc:06:2a:42:76:27:4a:22:d3:17: 02:7d:b2:9c:12:e7:58:31:d0:7c:27:94:c7:91:95:00:7b:f8: 32:cb:f1:25:d7:54:4f:76:cf:83:07:5e:5d:1a:11:e2:8b:e1: 31:47:f2:33:2b:70:ca:28:fa:80:16:64:0a:2e:0e:5c:69:5a: 40:f4:56:f3:b7:36:0f:31:9b:56:29:e3:fd:04:e1:1a:8d:b2: b2:88:39:36:67:d9:75:d8:16:3f:c2:2b:b8:83:e6:f8:61:60: 1c:98:e8:7f:1f:73:19:1f:39:93:96:64:cd:1c:16:62:54:d7: 04:bb:e0:a5:27:ae:22:91:70:c2:78:19:63:e4:40:74:75:5a: fd:02:cc:1c:11:84:a5:b2:b7:e5:bb:3b:c5:30:a0:65:41:79: 36:fa:90:52:71:fc:70:63:ad:f7:1a:fe:18:7a:32:16:83:d8: 48:23:35:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnY1obJT9CN4ZTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YmFmZmU1ODQtMzFkYi00ZGQwLThjMTItNjcyNWY0YjMzZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMvNFpeRhK1cmSeLATJuT/Y8VHj+GAXEAT0b M4gvH7tKj4pAdvyfmjPriA6CoGIFU7Ef8sQ5tu5XvW9fM2tGqC7l9m2pSRIeefqe YDaapdHyPjLN522UdSvz9AgjKRPXbCuZ8PPDt8yLvoONkFfwnugd83udjD9Gq3gG 30GsgQ0FKD4ZRqt1CbgE6CHtFP1yuCcfhXH0G4eqr2dYGjmj74UPJHkE7Uey6hzE P1/FJMtVewd7TGPVIc+DWUN7vfsFQ1ladRhNPCraf9EWZfAl+yzWvFiWLeZ3zC+c josiyfjq6k5lyF3kod4oWThcpHhFQ5dUCi53IxzvRjkAnTrJcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW4J4A3ki6w49v5EVYbYdRf+u4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTRkMTcyZTgtMjVmMC0z NmUyLThhNWMtNTVhYzljMjhkMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACux1Cep8Sn5e7Y8n6pJv5HXk/djJ8CxbWamJCMELEj5YuEHfi67Evtk vhYtsJRY9gOkiQGxVjxeI84xiHvqL9HSV4AydEjlYjn3MZKEW1LT3AYqQnYnSiLT FwJ9spwS51gx0HwnlMeRlQB7+DLL8SXXVE92z4MHXl0aEeKL4TFH8jMrcMoo+oAW ZAouDlxpWkD0VvO3Ng8xm1Yp4/0E4RqNsrKIOTZn2XXYFj/CK7iD5vhhYByY6H8f cxkfOZOWZM0cFmJU1wS74KUnriKRcMJ4GWPkQHR1Wv0CzBwRhKWyt+W7O8UwoGVB eTb6kFJx/HBjrfca/hh6MhaD2EgjNQk= -----END CERTIFICATE-----Generated at Tue Oct 13 16:02:51 2026 by rpki-client