$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50e08332-a8b7-35ad-8b20-712772d10aad.roa File: 50e08332-a8b7-35ad-8b20-712772d10aad.roa (raw, json) Hash identifier: pd84ygA5hvKiVPkqxrZXtt6N2t7g2RbyzFDUZHp+WuQ= Subject key identifier: 31:18:31:5A:B8:D5:11:20:76:7E:5A:49:F8:31:7F:5A:9E:C7:C7:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA12590F361ACDFD32BC60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50e08332-a8b7-35ad-8b20-712772d10aad.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 40.133.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:12:59:0f:36:1a:cd:fd:32:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=be66b24d-a692-4057-9f83-e596d1522b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3b:5d:08:79:a3:6d:03:85:97:5a:bc:5d:3b: 46:7f:33:c7:b2:ae:21:a3:90:53:79:29:0b:05:42: 43:75:ab:55:a3:e0:13:ba:41:db:d8:7a:ca:05:c7: a0:95:d1:4f:ef:5f:24:3d:fd:3c:4d:75:24:3d:83: 72:b7:81:07:3c:50:b3:0f:97:b3:4f:0a:9d:39:d2: cc:8c:d3:3b:2d:8d:27:b3:d9:d3:06:79:91:ef:d1: 82:24:03:0e:02:5a:69:af:ba:ef:2f:23:aa:57:94: f5:c4:ae:05:4a:a4:df:43:5c:46:56:f9:c4:d0:7e: 90:73:5c:dd:a3:6c:d4:24:16:6e:cc:73:a6:98:37: f7:53:94:bb:59:30:1a:85:ef:26:1b:a3:90:bf:2a: 0d:3e:18:64:3b:b6:14:c1:ed:ea:1d:25:fc:a5:c7: b2:82:09:9d:c6:37:da:fd:eb:9d:46:ff:cb:63:b1: 6b:ca:19:11:75:43:53:b5:a4:72:5a:43:2f:e4:e3: 43:9b:93:8b:76:cd:4a:f8:c5:77:71:f0:c5:25:d4: 09:2c:35:6f:0d:cd:ba:44:ea:be:ef:27:bf:c9:9d: 33:5e:a7:70:a6:02:8a:77:45:1a:fe:fd:f9:4f:e0: 5d:8e:7e:ce:a1:82:2d:29:a3:a9:23:98:02:0a:11: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:18:31:5A:B8:D5:11:20:76:7E:5A:49:F8:31:7F:5A:9E:C7:C7:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50e08332-a8b7-35ad-8b20-712772d10aad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.133.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:96:af:30:6f:a9:f8:80:cb:08:30:91:34:ef:b2:55:29:9f: 75:93:dd:8e:e2:22:92:b2:79:f4:78:24:92:3e:84:b4:99:39: b6:71:c8:f5:a4:98:b0:5d:95:79:de:6f:a6:32:25:4d:00:d1: e6:44:36:11:58:7d:c4:d8:2e:de:f2:5a:1a:3b:f4:be:e8:83: 52:10:65:71:fb:0b:49:5d:81:ff:96:e0:59:45:e4:28:da:4d: c8:4c:ab:a0:71:17:7f:a9:d3:f9:d5:88:29:d6:fa:e2:14:4f: 5d:16:09:89:57:70:70:64:16:24:f7:63:78:a9:59:2a:7d:4a: fc:10:f6:5e:c5:f2:73:12:a5:46:95:00:2c:83:4d:86:5e:d0: 7e:16:07:99:ec:79:79:77:10:be:23:07:47:ba:48:68:a1:70: 26:d6:40:82:48:c5:97:f3:c5:cc:37:3d:fc:90:27:0a:ec:9d: ca:03:19:ef:c0:ce:fe:6c:66:ef:94:92:1a:6c:b5:0a:f4:97: e0:9a:41:63:93:b0:95:e1:15:35:28:6a:de:73:81:ff:50:51: 3b:7d:b9:50:47:69:ac:65:27:c3:7f:13:60:9f:d0:03:fc:ca: b0:fc:45:d4:bd:a4:1c:f5:d8:ed:f1:0c:0f:7f:8f:b9:4a:ae: 2c:71:76:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hJZDzYazf0yvGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YmU2NmIyNGQtYTY5Mi00MDU3LTlmODMtZTU5NmQxNTIyYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljtdCHmjbQOFl1q8XTtGfzPHsq4ho5BTeSkL BUJDdatVo+ATukHb2HrKBcegldFP718kPf08TXUkPYNyt4EHPFCzD5ezTwqdOdLM jNM7LY0ns9nTBnmR79GCJAMOAlppr7rvLyOqV5T1xK4FSqTfQ1xGVvnE0H6Qc1zd o2zUJBZuzHOmmDf3U5S7WTAahe8mG6OQvyoNPhhkO7YUwe3qHSX8pceyggmdxjfa /eudRv/LY7FryhkRdUNTtaRyWkMv5ONDm5OLds1K+MV3cfDFJdQJLDVvDc26ROq+ 7ye/yZ0zXqdwpgKKd0Ua/v35T+Bdjn7OoYItKaOpI5gCChHn2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEYMVq41REgdn5aSfgxf1qex8cLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTBlMDgzMzItYThiNy0z NWFkLThiMjAtNzEyNzcyZDEwYWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaWrzBvqfiAywgwkTTvslUpn3WT3Y7iIpKyefR4JJI+hLSZObZxyPWk mLBdlXneb6YyJU0A0eZENhFYfcTYLt7yWho79L7og1IQZXH7C0ldgf+W4FlF5Cja TchMq6BxF3+p0/nViCnW+uIUT10WCYlXcHBkFiT3Y3ipWSp9SvwQ9l7F8nMSpUaV ACyDTYZe0H4WB5nseXl3EL4jB0e6SGihcCbWQIJIxZfzxcw3PfyQJwrsncoDGe/A zv5sZu+UkhpstQr0l+CaQWOTsJXhFTUoat5zgf9QUTt9uVBHaaxlJ8N/E2Cf0AP8 yrD8RdS9pBz12O3xDA9/j7lKrixxdoE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:21:49 2026 by rpki-client