$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34369aa8-0896-3e8f-b764-c2a5457fe097.roa File: 34369aa8-0896-3e8f-b764-c2a5457fe097.roa (raw, json) Hash identifier: pabvjO+zuLarQDEYkOYI/BZuDYt/17qNMetxftcsyy0= Subject key identifier: C2:36:71:B9:41:C5:60:54:A3:6C:16:21:F1:E7:D8:47:36:0F:20:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F8549EF14DAD6E23FD200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34369aa8-0896-3e8f-b764-c2a5457fe097.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 50.96.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:85:49:ef:14:da:d6:e2:3f:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=c1a2e197-bfa5-4fad-8476-a5e659fed6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:53:d0:85:11:7c:8e:6b:62:d7:25:3b:ca:29: d7:d5:5e:71:87:cb:e8:18:38:80:17:0d:05:b4:e0: 02:69:e3:cb:09:0e:f9:84:ea:a1:ff:4d:1a:bb:27: f3:ac:f6:96:ee:e9:04:12:c8:67:2e:9f:29:ee:02: 87:ad:d2:3f:2b:20:cd:f5:be:90:c4:a6:9a:23:46: 1f:48:d4:75:5c:e9:20:6b:50:4e:bf:29:29:7c:42: 03:25:4e:3e:1a:88:70:a2:21:7b:10:c7:85:90:b1: 40:72:7a:c8:96:6b:02:cf:de:55:3c:eb:6b:88:0d: 9f:ee:3f:ae:79:78:9f:fa:0b:1f:fd:8d:05:f9:37: ed:d7:c9:41:77:b1:4c:2d:78:9d:cc:8e:a4:cd:5f: fe:e1:e5:71:55:15:ab:08:15:57:46:17:67:d2:c1: 76:60:de:36:47:e4:3b:ef:29:92:4d:b6:3d:7a:ca: c4:b0:01:6c:24:55:57:18:d1:12:dc:47:45:c7:f2: 42:35:a9:80:4d:8d:2e:20:66:d1:b8:7c:5e:50:36: 74:6b:63:1c:be:13:05:64:6a:b9:d9:14:50:37:02: 1b:0a:2a:cd:dd:b5:f9:56:df:be:37:40:bf:2f:29: ee:3c:c5:47:de:0a:e5:d6:bf:b7:c3:df:18:81:93: 0e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:36:71:B9:41:C5:60:54:A3:6C:16:21:F1:E7:D8:47:36:0F:20:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34369aa8-0896-3e8f-b764-c2a5457fe097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f8:fd:c6:1f:13:58:dc:25:2a:55:9a:64:9e:7e:02:8f:cd: 12:19:3f:6d:22:8a:fa:42:60:cb:0a:bb:8f:ae:cf:6b:a7:31: 02:5c:f3:61:54:54:df:33:f6:c5:1f:3f:34:9a:0c:13:d6:f4: e8:fa:95:91:c4:09:b7:52:7b:df:10:03:2a:f7:c1:de:55:73: 4c:80:06:8a:29:b7:a8:e7:97:a9:43:96:bd:e1:d9:2f:9f:63: 41:40:f7:53:83:e2:1f:16:79:44:3e:59:7b:23:a4:a3:e8:af: 98:0b:0b:d6:33:f6:18:87:4b:b1:b6:42:61:80:6b:6c:25:f8: 51:9d:cd:29:59:09:31:4b:1e:fb:b6:5a:18:ad:09:91:89:32: 98:22:68:3b:7d:ef:cd:52:03:2b:ee:57:bd:4f:5b:33:85:ce: 7d:73:bb:d8:19:4d:5f:77:ba:1d:83:b1:ff:0a:38:89:b9:ab: 31:c0:55:c4:d0:33:74:5a:b4:02:a1:00:8b:5b:79:8f:0b:d6: 69:92:dd:0e:eb:1d:00:2d:00:8f:91:ed:7e:f5:ca:75:5d:6a: db:6b:6f:13:ad:e9:38:27:19:df:b1:93:bc:38:68:8f:6c:c1: 55:b1:5b:3a:26:fd:c9:8e:8a:a0:40:8a:42:27:a3:87:3f:87: 11:0e:ea:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4VJ7xTa1uI/0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YzFhMmUxOTctYmZhNS00ZmFkLTg0NzYtYTVlNjU5ZmVkNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVPQhRF8jmti1yU7yinX1V5xh8voGDiAFw0F tOACaePLCQ75hOqh/00auyfzrPaW7ukEEshnLp8p7gKHrdI/KyDN9b6QxKaaI0Yf SNR1XOkga1BOvykpfEIDJU4+GohwoiF7EMeFkLFAcnrIlmsCz95VPOtriA2f7j+u eXif+gsf/Y0F+Tft18lBd7FMLXidzI6kzV/+4eVxVRWrCBVXRhdn0sF2YN42R+Q7 7ymSTbY9esrEsAFsJFVXGNES3EdFx/JCNamATY0uIGbRuHxeUDZ0a2McvhMFZGq5 2RRQNwIbCirN3bX5Vt++N0C/LynuPMVH3grl1r+3w98YgZMO3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI2cblBxWBUo2wWIfHn2Ec2DyC4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzQzNjlhYTgtMDg5Ni0z ZThmLWI3NjQtYzJhNTQ1N2ZlMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz4/cYfE1jcJSpVmmSefgKPzRIZP20iivpCYMsKu4+uz2unMQJc82FU VN8z9sUfPzSaDBPW9Oj6lZHECbdSe98QAyr3wd5Vc0yABoopt6jnl6lDlr3h2S+f Y0FA91OD4h8WeUQ+WXsjpKPor5gLC9Yz9hiHS7G2QmGAa2wl+FGdzSlZCTFLHvu2 WhitCZGJMpgiaDt9781SAyvuV71PWzOFzn1zu9gZTV93uh2Dsf8KOIm5qzHAVcTQ M3RatAKhAItbeY8L1mmS3Q7rHQAtAI+R7X71ynVdattrbxOt6TgnGd+xk7w4aI9s wVWxWzom/cmOiqBAikIno4c/hxEO6no= -----END CERTIFICATE-----Generated at Thu Mar 26 07:51:37 2026 by rpki-client