$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26ae0c3c-14d9-3d32-908a-838ff6616574.roa File: 26ae0c3c-14d9-3d32-908a-838ff6616574.roa (raw, json) Hash identifier: mmTqmRlVjIV0Nw5IMZPPYWXyM3FNw5jUjZ04hCtMO7c= Subject key identifier: A8:14:31:5C:71:A7:87:8F:8F:A9:73:E2:19:F9:D6:DC:37:58:E7:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D695C28FEAE235F573A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26ae0c3c-14d9-3d32-908a-838ff6616574.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 50.96.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:69:5c:28:fe:ae:23:5f:57:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=a25c7353-c26e-4f75-adbe-0970f2723cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:07:8b:74:37:e0:b7:dd:47:da:65:09:18:01: 56:22:fd:a6:24:65:40:a3:6a:f9:26:87:86:7e:36: 24:fc:84:55:80:92:f6:7f:ae:e5:e5:6a:34:9a:80: f1:b9:b8:54:a8:09:b6:04:15:eb:e2:7f:fc:0c:9f: 7f:55:7a:18:96:6e:25:83:f6:2e:bf:9c:69:16:df: 07:56:5d:6a:d3:22:cd:79:6f:d4:6f:b0:a8:78:86: 3e:83:07:5f:92:14:79:c6:0b:7e:50:1a:6c:81:83: d4:1d:ad:f4:07:c8:c9:da:6c:d2:f2:30:29:76:f8: a2:2e:67:c1:73:83:1c:3e:45:34:f5:63:a8:89:ad: 19:90:44:56:d7:3f:71:ac:63:0d:06:4a:1d:dc:2a: 8a:d3:96:d5:08:59:59:08:c9:29:b7:7c:06:8b:a5: 0d:62:c0:93:62:d8:2d:81:e9:93:1c:14:10:6e:6f: cd:b6:51:f6:4f:1e:20:f8:40:4d:1b:e3:ac:ec:60: 7a:76:e9:54:f4:29:45:a1:fe:a2:15:79:fb:bc:79: 59:87:b6:37:e2:d4:f9:9c:e1:91:dc:49:32:1e:5d: 40:42:d2:37:40:51:fb:35:19:50:68:56:64:86:0f: ad:01:01:cc:73:b3:d8:e5:1e:68:d4:78:0a:5e:83: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:14:31:5C:71:A7:87:8F:8F:A9:73:E2:19:F9:D6:DC:37:58:E7:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26ae0c3c-14d9-3d32-908a-838ff6616574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:44:91:2f:2d:b9:00:5f:b1:25:9e:1d:8b:55:e0:1d:17:91: 8a:2e:c6:f8:32:22:32:69:3c:8c:6b:e6:56:6c:87:f4:34:ee: af:70:35:ea:36:40:a8:00:6e:c8:8f:97:6b:6e:f9:5f:5f:cb: 8d:b9:45:cc:40:31:e6:67:dc:8f:e7:00:2e:dc:7b:f5:08:c6: 0e:f6:8b:89:a5:01:8f:98:a9:25:6c:71:7b:8a:7d:4f:12:f5: 5e:ad:65:4b:15:d4:8e:31:6a:34:af:65:4f:37:48:23:07:3f: 25:f0:fd:ff:46:b0:85:65:31:55:ef:8d:6d:eb:b2:9e:28:46: 68:3f:07:cf:ad:aa:34:31:c8:f4:ff:2f:25:c1:87:27:b2:d1: c0:af:15:50:ec:12:07:b7:90:b1:92:1a:2a:a2:eb:a8:a2:a3: 78:f4:48:4b:7c:ee:f4:ee:42:88:52:dc:c7:0e:00:b5:36:19: a0:09:5e:54:f1:d1:38:73:80:91:48:68:e7:1a:35:68:03:12: f0:1d:ad:67:76:5f:18:e1:d3:16:df:d9:c5:50:0c:3d:61:da: 4d:40:e1:1d:7f:23:43:0d:4c:56:d8:4f:35:77:8c:02:cb:42: e5:37:88:66:b1:06:31:cd:02:67:15:12:51:b6:f2:f5:06:ec: 9b:8a:cc:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWlcKP6uI19XOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YTI1YzczNTMtYzI2ZS00Zjc1LWFkYmUtMDk3MGYyNzIzY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgeLdDfgt91H2mUJGAFWIv2mJGVAo2r5JoeG fjYk/IRVgJL2f67l5Wo0moDxubhUqAm2BBXr4n/8DJ9/VXoYlm4lg/Yuv5xpFt8H Vl1q0yLNeW/Ub7CoeIY+gwdfkhR5xgt+UBpsgYPUHa30B8jJ2mzS8jApdviiLmfB c4McPkU09WOoia0ZkERW1z9xrGMNBkod3CqK05bVCFlZCMkpt3wGi6UNYsCTYtgt gemTHBQQbm/NtlH2Tx4g+EBNG+Os7GB6dulU9ClFof6iFXn7vHlZh7Y34tT5nOGR 3EkyHl1AQtI3QFH7NRlQaFZkhg+tAQHMc7PY5R5o1HgKXoMjqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgUMVxxp4ePj6lz4hn51tw3WOdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjZhZTBjM2MtMTRkOS0z ZDMyLTkwOGEtODM4ZmY2NjE2NTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMmCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBEkS8tuQBfsSWeHYtV4B0XkYouxvgyIjJpPIxr5lZsh/Q07q9wNeo2 QKgAbsiPl2tu+V9fy425RcxAMeZn3I/nAC7ce/UIxg72i4mlAY+YqSVscXuKfU8S 9V6tZUsV1I4xajSvZU83SCMHPyXw/f9GsIVlMVXvjW3rsp4oRmg/B8+tqjQxyPT/ LyXBhyey0cCvFVDsEge3kLGSGiqi66iio3j0SEt87vTuQohS3McOALU2GaAJXlTx 0ThzgJFIaOcaNWgDEvAdrWd2Xxjh0xbf2cVQDD1h2k1A4R1/I0MNTFbYTzV3jALL QuU3iGaxBjHNAmcVElG28vUG7JuKzNE= -----END CERTIFICATE-----Generated at Tue Sep 29 23:38:00 2026 by rpki-client