$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa240ee4-f6b4-357b-954e-d09a4875efda.roa File: aa240ee4-f6b4-357b-954e-d09a4875efda.roa (raw, json) Hash identifier: f/NNl+J+gT/kmygjun119bXBMRG+x034/qQci/lh7IE= Subject key identifier: 59:96:D1:54:AC:13:8B:5D:B6:68:06:A7:94:61:D3:5D:72:4A:CE:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5E62C837EB3F9250DD7D6C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa240ee4-f6b4-357b-954e-d09a4875efda.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 7029 IP address blocks: 50.96.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c8:37:eb:3f:92:50:dd:7d:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=189db086-4f96-4e49-a325-f9ba3963c121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:06:54:49:4e:d2:12:c9:cc:4a:4a:5c:bc: df:3f:07:35:b4:93:c6:13:ce:d6:e1:ed:45:b9:42: a2:52:90:a4:07:60:4f:df:96:a1:1d:5c:fa:df:30: 7a:dd:e3:7c:53:6a:80:4a:bd:e5:cf:e5:8f:e1:d4: b7:d3:91:9f:cf:7f:61:75:e1:37:5e:a9:a0:46:12: b7:e2:2e:cb:f4:7b:67:f5:5f:1e:25:ef:53:c7:e9: 2e:e9:b8:fb:fe:3f:42:e9:9c:f8:04:d3:4c:41:74: 10:ab:0a:3c:92:66:d2:bc:a4:8f:7c:6f:fe:94:70: 1b:b9:51:70:81:03:7d:64:74:a5:78:af:f1:83:99: aa:4d:82:61:aa:79:df:a4:31:b8:ad:ee:4e:0f:33: 0d:b2:2d:da:1b:ed:95:43:20:d5:bf:c0:c5:1f:16: 51:51:7f:cd:09:d1:8e:68:b7:b0:f9:1d:92:26:5b: a9:de:66:52:32:83:47:a2:93:d8:ce:e5:80:97:32: c0:72:42:73:8b:c7:aa:c3:c7:10:86:e6:4b:63:0f: d5:e0:9a:5f:62:c2:a5:9d:2c:23:9a:cc:24:77:73: 83:5d:d4:c6:b8:04:9e:65:a7:78:24:bc:b7:3a:3e: c2:96:e8:c1:40:fa:11:ad:77:1a:55:58:5c:15:a1: 69:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:96:D1:54:AC:13:8B:5D:B6:68:06:A7:94:61:D3:5D:72:4A:CE:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa240ee4-f6b4-357b-954e-d09a4875efda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:11:ad:11:66:41:da:94:03:54:08:7a:87:c7:96:13:bc:7e: 35:64:e8:5d:34:b6:a2:ef:1b:57:42:1a:cc:52:35:bd:0d:20: bf:b5:8a:ab:77:a0:95:56:09:19:3c:b0:ab:4e:e7:ea:2d:c5: 90:04:fd:d4:d6:57:21:a4:46:a3:e2:56:09:f9:2f:c8:74:17: 9b:ab:9e:2e:f2:8c:6e:66:81:c1:b2:a6:15:b5:fe:6f:69:0f: 33:e4:c5:3c:1c:dd:e7:64:13:19:ac:0c:89:29:78:69:70:e5: a8:aa:a5:0b:21:0e:40:1c:9b:0d:31:69:7f:2d:5e:27:41:05: 19:15:54:2d:ad:db:c6:c3:fd:6b:77:b0:06:83:e1:7d:17:92: e9:54:be:c4:8a:dc:dc:cd:2d:da:ce:97:be:a7:b1:ce:6f:d9: 00:43:9c:1c:0b:94:fa:89:86:0b:20:f5:d4:4d:67:21:6e:44: e4:cd:10:bb:12:17:f5:f6:d9:c0:00:f7:62:ca:4b:65:fa:a2: 7a:2f:cb:2d:4a:9c:c7:6a:65:f8:3c:f0:89:db:c7:f5:f7:aa: f2:95:05:9e:aa:ae:be:44:cb:da:45:46:0b:82:37:a6:c4:3c: 58:6b:20:70:26:1a:00:6a:e8:17:e6:c7:2a:28:23:95:c9:fd: 3a:22:fa:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsg36z+SUN19bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MTg5ZGIwODYtNGY5Ni00ZTQ5LWEzMjUtZjliYTM5NjNjMTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrAGVElO0hLJzEpKXLzfPwc1tJPGE87W4e1F uUKiUpCkB2BP35ahHVz63zB63eN8U2qASr3lz+WP4dS305Gfz39hdeE3XqmgRhK3 4i7L9Htn9V8eJe9Tx+ku6bj7/j9C6Zz4BNNMQXQQqwo8kmbSvKSPfG/+lHAbuVFw gQN9ZHSleK/xg5mqTYJhqnnfpDG4re5ODzMNsi3aG+2VQyDVv8DFHxZRUX/NCdGO aLew+R2SJlup3mZSMoNHopPYzuWAlzLAckJzi8eqw8cQhuZLYw/V4JpfYsKlnSwj mswkd3ODXdTGuASeZad4JLy3Oj7ClujBQPoRrXcaVVhcFaFp+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmW0VSsE4tdtmgGp5Rh011ySs4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEyNDBlZTQtZjZiNC0z NTdiLTk1NGUtZDA5YTQ4NzVlZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmAXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcRrRFmQdqUA1QIeofHlhO8fjVk6F00tqLvG1dCGsxSNb0NIL+1iqt3 oJVWCRk8sKtO5+otxZAE/dTWVyGkRqPiVgn5L8h0F5urni7yjG5mgcGyphW1/m9p DzPkxTwc3edkExmsDIkpeGlw5aiqpQshDkAcmw0xaX8tXidBBRkVVC2t28bD/Wt3 sAaD4X0XkulUvsSK3NzNLdrOl76nsc5v2QBDnBwLlPqJhgsg9dRNZyFuROTNELsS F/X22cAA92LKS2X6onovyy1KnMdqZfg88Inbx/X3qvKVBZ6qrr5Ey9pFRguCN6bE PFhrIHAmGgBq6BfmxyooI5XJ/Toi+pI= -----END CERTIFICATE-----Generated at Tue Oct 13 16:04:23 2026 by rpki-client