$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04944840-2d78-3778-aa55-a7340a83b5f1.roa File: 04944840-2d78-3778-aa55-a7340a83b5f1.roa (raw, json) Hash identifier: qZuIac1PnUFkRYp38nBgo7YthLj5wj2iV3PgpkiHF9g= Subject key identifier: 5B:E8:65:E0:A3:CB:D2:06:1E:50:B3:B3:A3:84:1C:FA:6B:AE:9F:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B2784D754F23E9791800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04944840-2d78-3778-aa55-a7340a83b5f1.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 50.96.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b2:78:4d:75:4f:23:e9:79:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=17cf9c19-58b2-46a5-8071-afbf14e00502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:aa:a5:1a:48:f3:3e:35:6c:f5:8b:41:2a: ff:d5:b9:d1:0d:0f:56:1c:ee:56:b1:71:9f:95:c6: bc:54:1d:93:97:3d:8a:2f:7a:31:88:5d:ce:46:8a: 2f:69:d9:ef:8e:a1:27:4c:b8:fe:cf:e2:f9:33:36: 6a:99:94:59:b0:ac:20:b4:bd:46:b6:3b:33:42:b4: 43:45:f8:87:ce:5c:f8:fe:11:49:78:2c:7f:82:78: 92:c2:7d:19:b2:ff:7d:7f:bd:02:20:f5:d5:06:26: b7:d5:4d:c9:d2:87:0b:2d:e7:fc:67:5b:1a:f7:aa: 8a:c6:d8:e2:7d:8e:ab:6d:14:0f:b0:e6:aa:7d:cd: 3f:95:d4:6b:57:5c:98:84:10:ed:d5:5b:6d:a8:55: 4b:37:4f:76:70:8e:5d:6d:6e:6f:a3:f7:b0:32:f6: 12:a4:a4:2f:64:9b:22:bf:03:84:0b:99:e6:ab:66: 5c:a1:52:c5:c9:c3:5c:27:65:a8:47:2d:a4:ec:6d: 33:c7:1e:aa:eb:32:b9:25:96:db:46:2f:98:ac:95: 34:b6:70:a1:6a:0c:59:33:f7:c0:23:d8:97:21:c0: c5:da:8e:16:8b:ae:45:36:51:8e:f2:4d:a6:d7:92: 63:22:f9:0e:07:c5:82:cb:98:13:f4:60:3f:3b:63: 75:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E8:65:E0:A3:CB:D2:06:1E:50:B3:B3:A3:84:1C:FA:6B:AE:9F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04944840-2d78-3778-aa55-a7340a83b5f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:20:0c:85:b7:3b:6a:6b:87:1a:bc:f0:4c:47:5a:89:ae:df: 73:86:87:d2:48:cc:b4:c1:c2:9f:9d:93:cb:a8:e0:e4:a8:10: 6e:99:eb:43:bd:9a:57:a7:61:cd:65:d3:13:58:3e:2f:41:82: b5:52:ea:87:c1:32:9d:b1:3a:da:b4:0d:9a:2d:b4:5c:97:52: 3a:5b:38:ff:bb:22:15:c3:c3:3b:8e:d0:2b:39:e7:71:55:ae: 1a:04:95:44:e6:37:f4:a6:fc:e4:1e:73:e4:70:16:ee:a3:c2: e0:fc:00:5d:53:04:27:e5:5d:90:e3:c1:88:06:0f:c8:60:ee: f5:c5:e8:62:8e:b0:cb:56:60:f4:b1:68:21:c3:5c:32:9f:d2: cd:99:b4:0c:86:2a:b9:ac:f2:0a:39:a1:92:0f:0a:e6:85:f4: ce:d4:b6:47:39:09:1f:76:90:5c:2c:d0:c6:4a:71:b2:77:34: de:8b:a9:2c:d9:9e:2c:63:1c:61:ab:ab:ee:82:07:3b:dd:94: 3c:5f:c8:8f:05:d9:34:26:85:aa:9d:11:05:e6:a6:40:c1:af: b4:38:9a:e6:5c:63:f1:78:23:75:24:f8:f8:a4:00:52:58:01: a8:20:95:f8:2a:9e:d8:c4:1b:a4:c9:08:23:e0:de:6e:95:92: 89:fd:1a:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rJ4TXVPI+l5GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MTdjZjljMTktNThiMi00NmE1LTgwNzEtYWZiZjE0ZTAwNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLSqpRpI8z41bPWLQSr/1bnRDQ9WHO5WsXGf lca8VB2Tlz2KL3oxiF3ORoovadnvjqEnTLj+z+L5MzZqmZRZsKwgtL1GtjszQrRD RfiHzlz4/hFJeCx/gniSwn0Zsv99f70CIPXVBia31U3J0ocLLef8Z1sa96qKxtji fY6rbRQPsOaqfc0/ldRrV1yYhBDt1VttqFVLN092cI5dbW5vo/ewMvYSpKQvZJsi vwOEC5nmq2ZcoVLFycNcJ2WoRy2k7G0zxx6q6zK5JZbbRi+YrJU0tnChagxZM/fA I9iXIcDF2o4Wi65FNlGO8k2m15JjIvkOB8WCy5gT9GA/O2N1xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvoZeCjy9IGHlCzs6OEHPprrp9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQ5NDQ4NDAtMmQ3OC0z Nzc4LWFhNTUtYTczNDBhODNiNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMmA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0gDIW3O2prhxq88ExHWomu33OGh9JIzLTBwp+dk8uo4OSoEG6Z60O9 mlenYc1l0xNYPi9BgrVS6ofBMp2xOtq0DZottFyXUjpbOP+7IhXDwzuO0Cs553FV rhoElUTmN/Sm/OQec+RwFu6jwuD8AF1TBCflXZDjwYgGD8hg7vXF6GKOsMtWYPSx aCHDXDKf0s2ZtAyGKrms8go5oZIPCuaF9M7Utkc5CR92kFws0MZKcbJ3NN6LqSzZ nixjHGGrq+6CBzvdlDxfyI8F2TQmhaqdEQXmpkDBr7Q4muZcY/F4I3Uk+PikAFJY AagglfgqntjEG6TJCCPg3m6Vkon9Gug= -----END CERTIFICATE-----Generated at Mon Sep 28 12:24:43 2026 by rpki-client