$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b96c2879-d5cd-3541-b67a-a108443d0500.roa File: b96c2879-d5cd-3541-b67a-a108443d0500.roa (raw, json) Hash identifier: Bwm0cFrKe1m7kDh21+lLQ0j/aUPD9jCWVeQlcYegPqE= Subject key identifier: 87:8B:5B:FC:5A:AE:92:16:A9:F0:20:7E:B5:7A:F8:39:88:04:7D:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E50848A90DB3276886D256280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b96c2879-d5cd-3541-b67a-a108443d0500.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 216.96.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:8a:90:db:32:76:88:6d:25:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=dd750536-8c11-42ab-aa4d-bbd9017afbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:5f:5d:15:b1:7d:ed:e6:59:55:5a:a3:70: 1c:de:c0:89:53:38:46:82:65:cf:73:48:d3:75:0d: 2b:99:b6:61:b1:fa:37:18:35:27:51:af:bf:e0:7f: 13:b9:37:06:c3:52:ae:fb:52:91:07:a9:be:f3:70: df:0b:94:b4:0c:59:50:c8:ca:88:95:5f:71:b6:f0: 8c:7d:1f:df:1b:9d:2d:9f:6f:2a:ec:b5:f2:e5:b8: d6:52:2d:33:92:b3:35:d0:c2:82:f5:df:cf:0f:9d: be:0d:6f:97:ea:5d:94:06:4b:c0:70:ac:66:8c:ff: 45:5b:c5:1b:7b:a8:25:6e:df:1b:bd:7a:56:62:0d: 97:bd:12:66:0b:c0:63:89:d3:43:dc:59:a5:d6:49: 37:15:b2:f7:f9:9b:bd:13:a2:58:00:c4:ac:20:19: d3:e2:d8:43:66:7a:a6:e9:b1:62:9f:10:be:7b:6e: f5:be:ee:dc:91:cf:50:b2:27:c4:9c:43:36:7f:b8: 89:f1:4c:59:bf:79:9c:91:6f:f2:8e:db:08:18:44: 2f:11:ee:1f:a6:62:cf:03:ff:ba:0a:51:63:d0:7c: 0e:68:5d:b2:34:83:36:17:93:10:dc:d1:08:ca:70: a9:ca:40:2f:c7:bf:fa:0a:1b:8c:f4:4d:a0:8c:59: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8B:5B:FC:5A:AE:92:16:A9:F0:20:7E:B5:7A:F8:39:88:04:7D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b96c2879-d5cd-3541-b67a-a108443d0500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:54:6c:87:db:cf:1d:e0:2e:f8:66:aa:f9:c6:a9:cb:b0:aa: 90:e7:9d:b8:98:93:c5:4c:25:9e:c0:c8:b9:39:be:5c:ac:88: 6f:36:0e:09:f6:c7:9c:78:70:48:ab:da:70:13:fc:c5:ef:af: 03:bf:31:12:ae:95:97:bc:43:35:cd:69:a9:73:1d:62:2d:83: 3e:e5:54:67:26:d3:d5:d9:81:f4:04:c1:23:81:80:c3:87:46: d5:2c:3b:1a:bc:58:dc:26:a4:29:da:51:a7:81:ac:43:29:00: bb:a3:44:db:03:1a:33:00:01:d3:76:62:6d:66:bb:bf:dd:05: f8:c5:62:e7:12:13:a0:5c:3b:c7:a2:1e:be:92:dc:45:06:aa: fe:45:56:8b:32:fb:66:d2:c3:9b:cb:34:a4:90:f0:e4:67:20: 4a:12:b1:93:fb:de:a2:7e:df:6d:18:a1:fd:b8:5d:50:a1:7a: 40:f6:e2:99:0c:b0:e4:bc:f4:7c:7c:8c:0f:53:b0:81:d6:2f: d1:42:66:ad:1f:fa:e7:db:0c:0d:f6:f4:f4:9f:c5:5e:c6:23: dc:c9:3e:3e:27:d8:95:a5:9d:41:af:6b:02:96:dd:24:15:a3: 94:1c:18:18:4b:34:78:d6:68:24:8e:50:8a:38:23:01:c6:b6: bb:7f:40:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhIqQ2zJ2iG0lYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk ZGQ3NTA1MzYtOGMxMS00MmFiLWFhNGQtYmJkOTAxN2FmYmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq5fXRWxfe3mWVVao3Ac3sCJUzhGgmXPc0jT dQ0rmbZhsfo3GDUnUa+/4H8TuTcGw1Ku+1KRB6m+83DfC5S0DFlQyMqIlV9xtvCM fR/fG50tn28q7LXy5bjWUi0zkrM10MKC9d/PD52+DW+X6l2UBkvAcKxmjP9FW8Ub e6glbt8bvXpWYg2XvRJmC8BjidND3Fml1kk3FbL3+Zu9E6JYAMSsIBnT4thDZnqm 6bFinxC+e271vu7ckc9QsifEnEM2f7iJ8UxZv3mckW/yjtsIGEQvEe4fpmLPA/+6 ClFj0HwOaF2yNIM2F5MQ3NEIynCpykAvx7/6ChuM9E2gjFkuswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeLW/xarpIWqfAgfrV6+DmIBH1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjk2YzI4NzktZDVjZC0z NTQxLWI2N2EtYTEwODQ0M2QwNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhUbIfbzx3gLvhmqvnGqcuwqpDnnbiYk8VMJZ7AyLk5vlysiG82Dgn2 x5x4cEir2nAT/MXvrwO/MRKulZe8QzXNaalzHWItgz7lVGcm09XZgfQEwSOBgMOH RtUsOxq8WNwmpCnaUaeBrEMpALujRNsDGjMAAdN2Ym1mu7/dBfjFYucSE6BcO8ei Hr6S3EUGqv5FVosy+2bSw5vLNKSQ8ORnIEoSsZP73qJ+320Yof24XVChekD24pkM sOS89Hx8jA9TsIHWL9FCZq0f+ufbDA329PSfxV7GI9zJPj4n2JWlnUGvawKW3SQV o5QcGBhLNHjWaCSOUIo4IwHGtrt/QL8= -----END CERTIFICATE-----Generated at Mon Jul 13 05:56:50 2026 by rpki-client