$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e9439d6-a2c5-3f88-b02c-dc81ae99f030.roa File: 4e9439d6-a2c5-3f88-b02c-dc81ae99f030.roa (raw, json) Hash identifier: /2i2AehtlOlWTuHZOYd83yTi0z2nKN8af7Nip/Lr+7E= Subject key identifier: AA:8E:4C:D1:19:5E:14:FA:41:03:A9:74:12:B2:FA:58:A6:F6:76:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3DFFE44B03EDCBDAECCEA4A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e9439d6-a2c5-3f88-b02c-dc81ae99f030.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7029 IP address blocks: 50.96.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e4:4b:03:ed:cb:da:ec:ce:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=c4cb6d45-6d16-4584-b79e-61e01057234d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:d2:fe:cb:47:fe:f5:01:5e:74:bd:df:a4: 43:03:1c:c3:46:9d:51:d9:89:79:87:09:c8:8a:bc: e7:18:0a:91:be:2b:0d:4e:c3:ae:ae:11:2f:6b:b1: c0:3a:24:3a:b7:7d:13:6e:30:73:8d:fc:cd:77:f4: e7:4d:b7:28:66:07:27:24:d5:24:87:53:d2:39:01: 7a:fa:2e:ba:19:6b:3f:73:08:b3:59:eb:0e:e6:58: e6:2f:aa:d6:d8:be:bc:27:0c:2a:5a:c5:4a:7c:b7: e3:d1:c1:71:be:56:3d:ff:ec:81:14:27:a7:0a:5a: fa:d7:4c:5c:56:0d:96:e0:cf:b7:24:b7:03:ab:c0: fa:2f:c2:0c:5f:d7:58:29:77:cf:0b:eb:73:c7:70: b3:57:de:8d:82:91:15:46:b7:05:6b:63:8e:9d:c1: b3:ca:49:40:5e:e1:db:9b:a1:4d:72:65:f2:c4:cb: dc:2b:f1:d2:88:26:f4:c8:2a:30:a5:35:66:b9:50: 53:9b:15:ae:e1:40:35:43:9e:f9:9e:f9:bc:d3:41: e4:bb:1f:10:e2:99:68:ed:72:2e:4c:d0:8d:23:0e: c0:2d:ef:f4:62:b6:96:13:a2:d8:a9:be:55:80:6e: ea:e1:91:06:2d:2f:b7:a5:8c:88:77:e8:68:d6:23: 96:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8E:4C:D1:19:5E:14:FA:41:03:A9:74:12:B2:FA:58:A6:F6:76:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e9439d6-a2c5-3f88-b02c-dc81ae99f030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a1:a4:b2:56:89:23:b0:b6:aa:17:7f:84:83:3c:69:3a:79: c8:9a:69:85:4a:bf:53:7f:86:82:87:9c:90:24:de:f3:92:a9: 2f:67:f6:11:5c:df:cd:06:23:17:a4:bd:b2:a6:9a:bc:fb:f4: b6:e4:4a:ae:71:3b:43:e9:e4:71:ac:9f:df:8b:e8:0f:02:39: 9a:ee:ee:a3:ca:c6:93:e5:b1:18:f0:d3:34:52:7c:25:70:7c: d7:93:b3:f3:25:88:68:ca:5b:06:84:41:35:f5:74:8b:09:18: c6:27:a8:85:f2:3e:08:94:9c:59:22:a7:7f:fa:7e:98:37:40: f8:70:4d:b1:b1:16:03:88:b0:3f:7f:ef:ee:d5:e6:0b:17:72: eb:6f:c4:b2:99:ee:3c:a8:4b:2e:0c:1e:2e:6e:43:ba:54:23: d8:f2:a1:74:88:87:b5:a0:ac:47:f0:b0:9a:e8:80:3c:26:f0: 9e:4b:5a:83:67:48:02:38:3b:ca:37:cc:74:6b:01:53:ed:50: 38:2b:40:50:96:53:99:bc:f6:02:a0:ea:02:59:19:1c:29:cf: 76:da:74:e7:b4:39:f2:4e:be:c8:2e:38:79:28:79:94:2b:13: d9:82:f2:c0:de:14:5f:c5:7a:73:78:af:5e:18:db:91:6b:a4: 8b:7d:db:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+RLA+3L2uzOpKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YzRjYjZkNDUtNmQxNi00NTg0LWI3OWUtNjFlMDEwNTcyMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1fS/stH/vUBXnS936RDAxzDRp1R2Yl5hwnI irznGAqRvisNTsOurhEva7HAOiQ6t30TbjBzjfzNd/TnTbcoZgcnJNUkh1PSOQF6 +i66GWs/cwizWesO5ljmL6rW2L68JwwqWsVKfLfj0cFxvlY9/+yBFCenClr610xc Vg2W4M+3JLcDq8D6L8IMX9dYKXfPC+tzx3CzV96NgpEVRrcFa2OOncGzyklAXuHb m6FNcmXyxMvcK/HSiCb0yCowpTVmuVBTmxWu4UA1Q575nvm800Hkux8Q4plo7XIu TNCNIw7ALe/0YraWE6LYqb5VgG7q4ZEGLS+3pYyId+ho1iOWYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqOTNEZXhT6QQOpdBKy+lim9navMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGU5NDM5ZDYtYTJjNS0z Zjg4LWIwMmMtZGM4MWFlOTlmMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6hpLJWiSOwtqoXf4SDPGk6eciaaYVKv1N/hoKHnJAk3vOSqS9n9hFc 380GIxekvbKmmrz79LbkSq5xO0Pp5HGsn9+L6A8COZru7qPKxpPlsRjw0zRSfCVw fNeTs/MliGjKWwaEQTX1dIsJGMYnqIXyPgiUnFkip3/6fpg3QPhwTbGxFgOIsD9/ 7+7V5gsXcutvxLKZ7jyoSy4MHi5uQ7pUI9jyoXSIh7WgrEfwsJrogDwm8J5LWoNn SAI4O8o3zHRrAVPtUDgrQFCWU5m89gKg6gJZGRwpz3badOe0OfJOvsguOHkoeZQr E9mC8sDeFF/FenN4r14Y25FrpIt92zU= -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:58 2026 by rpki-client