$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac464d97-dd4f-3028-ac27-78e3aa353586.roa File: ac464d97-dd4f-3028-ac27-78e3aa353586.roa (raw, json) Hash identifier: KX1+zyYN71uKEXschHyrfONaxrjZ4847eW9o3qrePq4= Subject key identifier: 3B:E4:11:6C:58:DB:75:15:F9:0D:87:E3:5C:F7:69:08:44:F0:F3:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BE22CD068F78AB694980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac464d97-dd4f-3028-ac27-78e3aa353586.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 50.96.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:be:22:cd:06:8f:78:ab:69:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=389473d3-e982-4e71-9d1c-3dfbb3eddf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:df:94:18:3c:66:8b:3a:f4:23:00:73:3d:5e: d9:2f:84:ee:bc:47:88:59:f8:ee:2b:ab:e1:df:d5: 9b:25:3c:21:36:a8:52:c2:8d:78:17:39:e3:4c:03: f6:5d:a4:32:72:46:da:a4:68:fe:c4:49:b9:1c:13: a0:d7:9b:78:61:0f:e0:3e:6b:fc:d2:a0:79:72:4e: c0:05:42:0e:3d:b5:53:7a:ab:f2:5a:0f:23:c7:4c: 14:66:57:89:d9:22:13:41:cb:08:b2:20:94:d1:93: 82:7a:5c:da:97:cc:6d:fa:a0:92:3a:1b:f0:e6:a4: 8d:64:27:6d:cd:fb:6b:c9:5c:2c:f2:ec:95:73:ee: 24:ab:92:15:65:cd:d0:a6:ad:40:0a:a3:b0:c3:5b: 06:89:aa:53:08:d1:ee:e6:ea:b4:c7:4c:c1:86:81: b6:8f:e0:40:98:2f:2b:24:ce:80:c5:25:6e:d8:17: 5c:df:96:04:7d:fe:b3:57:53:c6:64:43:b2:ba:18: 05:0b:79:18:ca:21:b6:d6:8b:35:ab:0e:dc:67:63: 1f:44:4f:19:c2:7f:a8:0e:88:aa:a3:18:35:d5:bc: cb:c3:ff:16:cf:d6:b1:94:06:fe:95:48:b7:cd:5e: a9:6c:dc:5a:56:76:21:64:0d:8e:f3:77:a7:2b:76: ca:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E4:11:6C:58:DB:75:15:F9:0D:87:E3:5C:F7:69:08:44:F0:F3:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac464d97-dd4f-3028-ac27-78e3aa353586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:56:30:9d:19:1f:27:ff:c2:6e:c5:8e:29:5f:3b:a9:31:1f: 64:d1:fa:7d:73:ae:4a:cb:31:1f:5a:9a:45:98:d3:a4:00:ca: 0e:07:29:6f:b0:56:c6:36:7f:f6:02:f6:9a:bc:ca:ce:70:91: 9f:bb:8d:1f:7e:bd:e2:ac:76:6d:11:a6:5e:08:63:22:bf:b2: a2:60:15:ef:07:d6:c4:d7:d0:c1:d6:18:59:63:a5:95:ed:c7: fb:fc:0a:b3:31:ad:19:1e:ae:5e:5d:9f:15:e7:22:ae:2a:66: 21:16:59:1a:44:b8:41:86:ee:bd:fb:01:dd:c9:3f:b5:04:74: 90:e8:a9:2a:f3:c0:74:79:3e:5f:f5:a4:95:87:78:78:1b:c3: 2b:42:41:35:d8:55:1e:c0:61:61:0d:ff:21:03:c7:5b:7c:92: ca:48:d1:5f:e3:6a:f8:60:07:e9:7c:20:8f:78:d8:ed:59:68: a0:22:fe:6e:a0:34:bd:91:f1:43:8d:e8:1d:28:7f:d9:cf:66: ce:2a:f1:8d:6a:4a:7b:a0:70:ac:05:29:93:4b:b5:3c:1b:05: 20:cd:e1:8b:25:00:c3:c7:8d:fa:90:6b:a8:5b:67:31:87:f2: 27:1c:5a:79:7f:78:7b:97:5a:a9:f8:f0:f2:6b:0b:62:41:15: b1:0d:58:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ74izQaPeKtpSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk Mzg5NDczZDMtZTk4Mi00ZTcxLTlkMWMtM2RmYmIzZWRkZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN+UGDxmizr0IwBzPV7ZL4TuvEeIWfjuK6vh 39WbJTwhNqhSwo14FznjTAP2XaQyckbapGj+xEm5HBOg15t4YQ/gPmv80qB5ck7A BUIOPbVTeqvyWg8jx0wUZleJ2SITQcsIsiCU0ZOCelzal8xt+qCSOhvw5qSNZCdt zftryVws8uyVc+4kq5IVZc3Qpq1ACqOww1sGiapTCNHu5uq0x0zBhoG2j+BAmC8r JM6AxSVu2Bdc35YEff6zV1PGZEOyuhgFC3kYyiG21os1qw7cZ2MfRE8Zwn+oDoiq oxg11bzLw/8Wz9axlAb+lUi3zV6pbNxaVnYhZA2O83enK3bKzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvkEWxY23UV+Q2H41z3aQhE8PNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWM0NjRkOTctZGQ0Zi0z MDI4LWFjMjctNzhlM2FhMzUzNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpWMJ0ZHyf/wm7FjilfO6kxH2TR+n1zrkrLMR9amkWY06QAyg4HKW+w VsY2f/YC9pq8ys5wkZ+7jR9+veKsdm0Rpl4IYyK/sqJgFe8H1sTX0MHWGFljpZXt x/v8CrMxrRkerl5dnxXnIq4qZiEWWRpEuEGG7r37Ad3JP7UEdJDoqSrzwHR5Pl/1 pJWHeHgbwytCQTXYVR7AYWEN/yEDx1t8kspI0V/javhgB+l8II942O1ZaKAi/m6g NL2R8UON6B0of9nPZs4q8Y1qSnugcKwFKZNLtTwbBSDN4YslAMPHjfqQa6hbZzGH 8iccWnl/eHuXWqn48PJrC2JBFbENWI4= -----END CERTIFICATE-----Generated at Mon Apr 13 11:42:18 2026 by rpki-client