$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3563ec46-49a9-3c3c-a36b-913e8e570e38.roa File: 3563ec46-49a9-3c3c-a36b-913e8e570e38.roa (raw, json) Hash identifier: 5YjSNrxGrF1nH3mM8ZSGLPC50Df1vDlYwVDLkzqsQEU= Subject key identifier: C2:39:0C:73:AB:72:6E:05:0A:24:4C:05:41:C7:78:1A:1C:5D:A0:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8D5BEB4F52D199E68300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3563ec46-49a9-3c3c-a36b-913e8e570e38.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 50.96.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8d:5b:eb:4f:52:d1:99:e6:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=1b2be80e-e912-44cb-a3e1-c60a9a887056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:40:5e:a3:3b:53:23:8c:b7:c6:3d:7f:b5:f8: fd:1c:fe:c1:26:34:22:30:11:64:42:3a:8a:c7:47: c9:09:1e:66:79:1e:a5:f8:b4:39:2b:01:66:23:a3: 8a:7f:e2:a2:99:87:ed:ad:66:f4:31:d6:d0:cf:5d: 40:1d:3b:a0:31:58:ec:21:3f:2d:dc:28:aa:dd:71: e3:9b:2e:99:09:5b:be:a7:c8:ca:ff:10:f3:7d:09: a7:32:bf:ab:d5:80:39:06:15:0d:f3:a3:a0:9c:e9: 44:c1:40:7f:b6:cc:b5:ad:6a:b8:0e:5d:75:ac:ee: 75:3c:af:5e:84:23:eb:f1:2d:87:37:52:ec:9c:19: 7d:7a:db:73:05:31:b6:2c:9d:a7:bb:4d:b3:ec:5f: 59:ce:1a:be:a0:5e:cc:64:b3:32:e9:a4:6b:49:6c: 1f:35:b6:be:de:d4:4c:ac:10:f1:d1:b6:ed:51:93: 6f:45:94:38:a4:88:1d:45:d8:9b:9b:4d:07:8c:25: 58:14:58:0f:29:e0:6f:77:a2:95:98:20:fe:b4:7a: 18:d8:e1:0e:84:02:24:60:1e:a7:df:ed:13:1e:63: 0f:e0:13:08:fc:ef:1d:f2:c2:73:f3:84:05:b1:99: 6c:5a:c1:bf:08:7c:f5:f1:68:bd:52:fa:f5:ff:78: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:39:0C:73:AB:72:6E:05:0A:24:4C:05:41:C7:78:1A:1C:5D:A0:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3563ec46-49a9-3c3c-a36b-913e8e570e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:3e:23:99:6e:5f:58:aa:ab:34:e4:fd:2d:bf:8d:13:ec:d6: 40:de:92:7a:2f:cd:d4:b9:57:a4:48:f5:e4:a2:69:0b:67:c2: 30:14:fc:b2:76:bd:cf:0c:cc:2d:ba:ab:6f:ee:92:8a:b6:6d: 3a:9a:f0:65:4c:dc:d6:f7:2a:1f:1c:b7:64:73:6c:40:d4:d4: 5f:48:80:56:a2:17:1e:0d:d7:de:90:43:74:65:55:bf:1c:f3: d1:99:ad:35:54:fb:c0:29:01:17:e7:bf:5b:4e:70:49:12:7c: b5:6c:d2:1a:f7:1e:6e:9d:1e:f7:d7:88:cb:45:f8:b0:8a:fd: 97:2e:ff:4f:91:de:12:0a:b1:6c:f6:77:73:de:87:87:22:3a: c8:f2:80:09:72:9a:d1:e9:c8:dd:17:6a:6d:09:b8:4a:1c:a0: ab:47:aa:99:7c:24:e0:5f:fb:0c:32:e3:c7:e3:5e:7b:ce:1d: 1e:fb:fd:bf:ec:91:c9:da:61:39:ac:f9:81:e4:b5:5e:4d:1a: 98:21:74:2b:3e:fe:2b:30:44:73:3f:7c:c3:63:1b:25:b0:42: b2:35:aa:19:a7:1c:af:90:de:fd:77:cc:e8:c5:e8:13:3d:d4: 10:b4:1c:e7:db:10:47:ce:48:70:4b:dc:33:3c:31:22:cc:a1: 55:9c:eb:47 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9UnY1b609S0ZnmgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MWIyYmU4MGUtZTkxMi00NGNiLWEzZTEtYzYwYTlhODg3MDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkBeoztTI4y3xj1/tfj9HP7BJjQiMBFkQjqK x0fJCR5meR6l+LQ5KwFmI6OKf+KimYftrWb0MdbQz11AHTugMVjsIT8t3Ciq3XHj my6ZCVu+p8jK/xDzfQmnMr+r1YA5BhUN86OgnOlEwUB/tsy1rWq4Dl11rO51PK9e hCPr8S2HN1LsnBl9ettzBTG2LJ2nu02z7F9Zzhq+oF7MZLMy6aRrSWwfNba+3tRM rBDx0bbtUZNvRZQ4pIgdRdibm00HjCVYFFgPKeBvd6KVmCD+tHoY2OEOhAIkYB6n 3+0THmMP4BMI/O8d8sJz84QFsZlsWsG/CHz18Wi9Uvr1/3j/TwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMI5DHOrcm4FCiRMBUHHeBocXaD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzU2M2VjNDYtNDlhOS0z YzNjLWEzNmItOTEzZThlNTcwZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAMmAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARD4jmW5fWKqrNOT9Lb+NE+zWQN6Sei/N1LlXpEj15KJpC2fCMBT8sna9 zwzMLbqrb+6SirZtOprwZUzc1vcqHxy3ZHNsQNTUX0iAVqIXHg3X3pBDdGVVvxzz 0ZmtNVT7wCkBF+e/W05wSRJ8tWzSGvcebp0e99eIy0X4sIr9ly7/T5HeEgqxbPZ3 c96HhyI6yPKACXKa0enI3RdqbQm4Shygq0eqmXwk4F/7DDLjx+Nee84dHvv9v+yR ydphOaz5geS1Xk0amCF0Kz7+KzBEcz98w2MbJbBCsjWqGaccr5De/XfM6MXoEz3U ELQc59sQR85IcEvcMzwxIsyhVZzrRw== -----END CERTIFICATE-----Generated at Thu Oct 8 09:02:57 2026 by rpki-client