$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dd84dd9-ac52-3e46-85b4-378042e54e4a.roa File: 6dd84dd9-ac52-3e46-85b4-378042e54e4a.roa (raw, json) Hash identifier: M76Vom0x/9KrvEUf9aD3C8dxMhqOiVlH3jL7/2dP9/U= Subject key identifier: 09:A8:E4:C0:C1:1A:64:A1:DE:5A:42:24:5E:CA:2F:1D:35:F8:DF:2C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D386A558CE5655F07495F3480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dd84dd9-ac52-3e46-85b4-378042e54e4a.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 50.96.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:55:8c:e5:65:5f:07:49:5f:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=3be6653d-34c4-4660-9a12-337a70b259f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:23:68:b7:6b:7b:ad:ea:29:b2:85:11:63: 26:aa:3a:35:2a:88:bc:84:2e:bd:17:fd:b6:64:d5: ef:9f:6f:b7:8d:d2:06:ed:a0:9b:58:b2:f9:cc:8c: 29:c9:8d:70:45:47:3a:d7:c4:58:1c:37:5a:41:14: 65:1e:52:0e:32:e7:2b:91:44:9e:c9:a2:a3:d0:06: f1:76:3c:c9:4f:6a:ba:f6:3b:b5:80:4b:3d:bb:b8: 8c:73:fe:dc:f6:a8:26:de:b3:2b:be:24:74:70:f5: 03:fe:9b:da:12:50:fc:99:c6:31:2f:e8:47:f5:b8: 21:12:f4:e3:c1:a2:2b:17:c4:3c:4f:14:4e:da:f5: 9f:d9:ed:b7:48:b0:5d:61:78:4f:18:cc:0a:64:8b: 37:92:ea:c8:0a:48:60:3e:06:88:a8:a5:f5:6c:a4: 84:32:b2:4a:58:fc:a6:a6:f6:05:d3:83:22:ca:70: 40:83:73:6d:30:14:87:cc:70:a7:e3:ef:08:e5:0d: 6c:6e:05:6b:43:09:f8:98:67:4a:e0:6c:52:56:c5: f3:fb:a4:bf:d3:39:0f:dd:17:eb:5d:72:0b:bd:b8: b3:9c:a4:86:a0:2b:7f:26:62:67:bd:48:bc:4c:ca: 46:d9:ac:6e:59:91:40:82:e2:4c:01:98:11:09:46: 5c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A8:E4:C0:C1:1A:64:A1:DE:5A:42:24:5E:CA:2F:1D:35:F8:DF:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6dd84dd9-ac52-3e46-85b4-378042e54e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:dc:2a:51:ef:da:86:cd:d5:19:be:46:bc:fe:e5:d9:77:9f: 67:ef:0a:9c:43:2a:76:46:97:95:33:61:f3:f3:da:7d:e6:8b: bb:e4:60:97:87:58:97:20:a6:5a:e0:03:4f:93:5a:8f:ae:38: dc:8b:d9:7a:a2:ee:92:0b:02:c6:5e:81:5f:99:61:0b:36:3a: 0b:2d:2b:58:62:0c:ce:97:e1:d0:d8:a7:fd:b0:ee:b0:2a:cd: 39:ed:52:0b:74:e2:06:5b:f5:09:52:06:0c:a9:2d:22:df:06: 38:98:3f:a7:5b:84:af:45:c6:fd:2a:2c:88:cf:25:89:4d:b8: e5:6e:8d:34:65:b0:28:9b:5b:9b:b8:fc:76:5d:78:54:95:d0: bc:ff:60:6a:e7:be:96:f4:1e:b4:a6:38:12:72:46:5a:97:25: 7e:37:43:59:6c:87:60:71:99:21:f2:45:0b:ab:e9:2d:84:ab: da:18:2a:70:ca:89:d7:78:9a:42:33:0a:78:1d:76:cd:d6:6f: 8e:ab:6c:12:6d:a2:ca:8a:27:b8:6b:95:56:76:47:49:2b:fa: ba:3b:39:a0:52:e1:23:8e:8b:4f:3f:55:7d:30:df:c9:91:ed: 13:86:9c:c2:3a:79:64:03:3f:7e:15:42:3c:e1:d4:b9:5c:11: b4:1e:cd:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alWM5WVfB0lfNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk M2JlNjY1M2QtMzRjNC00NjYwLTlhMTItMzM3YTcwYjI1OWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKojaLdre63qKbKFEWMmqjo1Koi8hC69F/22 ZNXvn2+3jdIG7aCbWLL5zIwpyY1wRUc618RYHDdaQRRlHlIOMucrkUSeyaKj0Abx djzJT2q69ju1gEs9u7iMc/7c9qgm3rMrviR0cPUD/pvaElD8mcYxL+hH9bghEvTj waIrF8Q8TxRO2vWf2e23SLBdYXhPGMwKZIs3kurICkhgPgaIqKX1bKSEMrJKWPym pvYF04MiynBAg3NtMBSHzHCn4+8I5Q1sbgVrQwn4mGdK4GxSVsXz+6S/0zkP3Rfr XXILvbiznKSGoCt/JmJnvUi8TMpG2axuWZFAguJMAZgRCUZc7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmo5MDBGmSh3lpCJF7KLx01+N8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmRkODRkZDktYWM1Mi0z ZTQ2LTg1YjQtMzc4MDQyZTU0ZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3cKlHv2obN1Rm+Rrz+5dl3n2fvCpxDKnZGl5UzYfPz2n3mi7vkYJeH WJcgplrgA0+TWo+uONyL2Xqi7pILAsZegV+ZYQs2OgstK1hiDM6X4dDYp/2w7rAq zTntUgt04gZb9QlSBgypLSLfBjiYP6dbhK9Fxv0qLIjPJYlNuOVujTRlsCibW5u4 /HZdeFSV0Lz/YGrnvpb0HrSmOBJyRlqXJX43Q1lsh2BxmSHyRQur6S2Eq9oYKnDK idd4mkIzCngdds3Wb46rbBJtosqKJ7hrlVZ2R0kr+ro7OaBS4SOOi08/VX0w38mR 7ROGnMI6eWQDP34VQjzh1LlcEbQezS0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:19:27 2026 by rpki-client