$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac464d97-dd4f-3028-ac27-78e3aa353586.roa File: ac464d97-dd4f-3028-ac27-78e3aa353586.roa (raw, json) Hash identifier: W0C32D3ztk1HtDDR+dUSnXfzy6AWQ9JaivjSxj10Uao= Subject key identifier: AC:31:15:80:56:44:34:79:59:B8:80:56:6F:EB:42:8E:FE:B8:7C:29 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED43254FA7CC7ABB7E7661380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac464d97-dd4f-3028-ac27-78e3aa353586.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 50.96.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:54:fa:7c:c7:ab:b7:e7:66:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=3afe26d3-7912-4652-89d1-585c7654d724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cb:ff:bd:f1:05:4f:67:f4:65:b1:92:f5:ae: ad:74:29:ec:9b:56:67:8d:b0:ff:60:a7:0f:12:7c: d3:09:8b:94:45:7a:14:73:51:ef:77:4a:ed:41:18: 69:9d:2d:8e:8a:98:86:46:00:05:39:6f:7f:13:d5: 8c:6a:0f:03:46:ab:16:e6:66:74:eb:2a:34:a7:d4: 76:78:46:7e:97:08:55:6a:4d:6b:60:12:5c:82:83: 6c:4f:99:c7:46:fe:f8:ea:8d:44:4c:bb:94:ee:66: 0c:8f:02:93:ca:14:43:12:9b:68:f5:9b:be:06:11: b1:38:3a:07:95:3d:56:41:88:ed:c3:f0:a6:01:f9: fd:10:4e:d2:b0:bb:89:6f:0c:68:81:23:2f:51:29: 88:1c:ed:34:65:de:d2:6a:24:10:37:17:ad:57:28: 63:27:ed:57:fe:f3:fa:27:37:f0:22:e0:02:6c:3d: 7e:a2:7c:a0:f6:bd:be:93:c6:09:77:5c:1f:49:42: 4a:34:b6:53:59:b4:55:3e:97:f5:25:dd:20:46:27: df:22:a5:0f:1f:f4:04:ab:1e:1c:6a:88:11:57:c6: 12:7a:2d:22:36:3e:46:ed:44:28:58:67:c3:a3:1f: e4:f8:99:4d:52:39:1e:bd:ec:9e:14:17:48:ad:c4: d8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:31:15:80:56:44:34:79:59:B8:80:56:6F:EB:42:8E:FE:B8:7C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac464d97-dd4f-3028-ac27-78e3aa353586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:2b:a7:a1:56:7b:0d:3a:ee:c4:26:08:6a:69:46:07:23:d5: 8b:2d:c9:c2:4c:2f:c7:aa:2e:e1:20:31:b6:c7:a5:76:8d:5a: 19:7c:41:4e:5f:4e:64:8b:08:fb:b7:94:b1:19:52:9d:3b:b1: 3f:d9:22:43:06:bf:fc:6f:48:b4:4c:2c:dd:20:bb:8f:f3:ca: f8:57:94:98:20:28:c6:ef:8c:6a:e0:28:af:3d:9f:fc:dd:02: 84:c2:1f:cc:95:03:05:1d:ae:03:f5:cf:ef:18:cf:52:0c:16: 5d:a1:a1:79:6a:fb:43:7b:43:a3:18:1a:75:00:20:91:43:aa: 3e:95:5a:3b:b4:02:64:a1:15:c5:e2:08:5f:15:74:7d:54:47: bc:70:c0:a7:02:29:64:5d:33:18:77:26:7d:92:69:ac:f3:ef: f8:a5:d6:df:1b:ad:c8:9a:38:5e:2d:c8:7a:63:1d:ca:78:54: 23:6e:4b:85:96:e3:99:18:7c:e0:96:c2:d3:9e:88:24:16:d1: 5a:cd:73:08:fd:17:7d:ea:a5:3a:3d:1c:3c:2e:1f:57:2e:b5: ad:81:58:1a:15:17:26:5c:48:6c:0f:a9:af:60:3b:42:59:1e: 40:de:c9:10:2f:4c:9a:2d:43:29:9b:49:c0:c0:b4:b5:e5:1d: 24:fd:a1:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlT6fMert+dmE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk M2FmZTI2ZDMtNzkxMi00NjUyLTg5ZDEtNTg1Yzc2NTRkNzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncv/vfEFT2f0ZbGS9a6tdCnsm1ZnjbD/YKcP EnzTCYuURXoUc1Hvd0rtQRhpnS2OipiGRgAFOW9/E9WMag8DRqsW5mZ06yo0p9R2 eEZ+lwhVak1rYBJcgoNsT5nHRv746o1ETLuU7mYMjwKTyhRDEpto9Zu+BhGxODoH lT1WQYjtw/CmAfn9EE7SsLuJbwxogSMvUSmIHO00Zd7SaiQQNxetVyhjJ+1X/vP6 JzfwIuACbD1+onyg9r2+k8YJd1wfSUJKNLZTWbRVPpf1Jd0gRiffIqUPH/QEqx4c aogRV8YSei0iNj5G7UQoWGfDox/k+JlNUjkeveyeFBdIrcTYNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwxFYBWRDR5WbiAVm/rQo7+uHwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWM0NjRkOTctZGQ0Zi0z MDI4LWFjMjctNzhlM2FhMzUzNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJErp6FWew067sQmCGppRgcj1YstycJML8eqLuEgMbbHpXaNWhl8QU5f TmSLCPu3lLEZUp07sT/ZIkMGv/xvSLRMLN0gu4/zyvhXlJggKMbvjGrgKK89n/zd AoTCH8yVAwUdrgP1z+8Yz1IMFl2hoXlq+0N7Q6MYGnUAIJFDqj6VWju0AmShFcXi CF8VdH1UR7xwwKcCKWRdMxh3Jn2Saazz7/il1t8brciaOF4tyHpjHcp4VCNuS4WW 45kYfOCWwtOeiCQW0VrNcwj9F33qpTo9HDwuH1cuta2BWBoVFyZcSGwPqa9gO0JZ HkDeyRAvTJotQymbScDAtLXlHST9oS0= -----END CERTIFICATE-----Generated at Thu Aug 27 11:38:28 2026 by rpki-client