$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88a6e306-1139-3cb5-be98-2af8129d2c08.roa File: 88a6e306-1139-3cb5-be98-2af8129d2c08.roa (raw, json) Hash identifier: OicFBzmsG7EW0b2Y3uBm5A+Yl+eaPKFWjZNbtM1CQ2A= Subject key identifier: C2:0F:2E:8E:3A:A0:75:68:0B:05:A9:61:2D:72:3A:7B:49:50:19:DA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A79AF1FA033ADB06500A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88a6e306-1139-3cb5-be98-2af8129d2c08.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 31898 IP address blocks: 50.96.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:79:af:1f:a0:33:ad:b0:65:00:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=0a5e8c41-e9ca-4516-9eda-034e70e77ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3e:c8:38:cc:5c:83:31:f0:34:ba:b1:62:6b: 73:c8:f3:74:b4:25:36:e9:94:1d:61:9f:93:6f:5f: 78:2a:89:45:f5:26:1b:31:4d:f4:38:4d:53:7c:87: 68:de:cf:a3:f1:42:f1:48:cc:13:71:a9:87:9e:3f: ba:6b:0b:7f:81:ea:d0:42:44:2c:20:d5:19:70:05: 0f:ca:51:ce:fc:56:58:f2:20:1c:01:76:23:21:06: ea:c5:ed:d1:f2:fb:31:5d:98:d9:06:2f:2f:48:9a: dd:ab:ec:5d:8a:ab:e6:0d:ad:7b:26:7f:b3:24:f3: 78:93:35:59:73:48:14:ef:a3:b0:63:19:a5:97:d2: d4:d1:69:5b:60:64:0b:d0:c8:6c:9e:8c:36:7f:5f: 8b:bf:4d:04:9d:16:78:59:66:79:f0:d3:d5:66:4a: 18:2f:22:38:62:ab:c9:7b:45:8e:24:57:eb:b0:ac: 11:62:35:7e:1f:61:f7:3a:ab:fb:cf:86:9f:3a:dc: 02:02:dc:48:1c:de:13:cf:e3:c6:e9:b5:18:e4:74: 34:b4:e0:76:1d:e8:dc:1e:4f:1e:d7:fb:19:fc:81: b7:44:80:9f:9c:ff:00:6f:42:2e:38:32:9a:9b:13: 48:74:58:63:83:9a:59:24:3f:02:ab:4b:00:54:2d: df:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0F:2E:8E:3A:A0:75:68:0B:05:A9:61:2D:72:3A:7B:49:50:19:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88a6e306-1139-3cb5-be98-2af8129d2c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f0:77:f4:30:17:17:73:d4:42:68:b4:e0:db:a3:10:56:ac: 95:c8:cf:5c:9f:74:e1:d7:bd:0c:74:2c:d1:6f:aa:8f:04:f9: 14:76:d1:3d:aa:2b:c2:b6:0c:16:df:e0:5c:b3:84:f2:40:fd: 09:b3:62:d9:85:27:09:a6:58:f0:b5:24:21:3e:8f:e3:df:fb: 83:d3:1e:aa:22:df:90:1b:9d:e4:0f:a6:25:97:41:66:e3:01: 9f:60:9d:d9:03:e8:60:4d:a7:49:27:c1:f5:da:55:ec:e1:6c: 1c:81:30:29:02:9a:76:24:0d:b8:d0:0a:c4:f2:ee:bf:03:71: 8b:5a:da:4f:8a:47:25:89:5f:59:63:30:83:9c:c0:88:18:6d: 9e:ec:5a:1d:65:90:d9:64:58:9f:93:a5:17:c1:5c:08:06:97: bd:bb:59:7a:e0:34:4d:cc:0a:83:fa:0f:0e:96:a7:73:f2:99: 6d:6a:d7:d0:a4:ee:62:e5:a4:53:c9:6f:f2:c2:c9:34:ec:b0: 1e:b4:59:c0:6c:f9:a2:36:e6:68:f3:a0:d6:2e:c3:1b:f9:1d: 9b:3e:fc:19:91:35:d1:53:f7:3f:e5:3c:9a:ab:0f:1a:1a:72: df:1e:84:86:d3:cb:ee:65:e1:06:40:35:df:63:98:1c:c7:d8: 44:24:8b:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnmvH6AzrbBlAKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MGE1ZThjNDEtZTljYS00NTE2LTllZGEtMDM0ZTcwZTc3YmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT7IOMxcgzHwNLqxYmtzyPN0tCU26ZQdYZ+T b194KolF9SYbMU30OE1TfIdo3s+j8ULxSMwTcamHnj+6awt/gerQQkQsINUZcAUP ylHO/FZY8iAcAXYjIQbqxe3R8vsxXZjZBi8vSJrdq+xdiqvmDa17Jn+zJPN4kzVZ c0gU76OwYxmll9LU0WlbYGQL0Mhsnow2f1+Lv00EnRZ4WWZ58NPVZkoYLyI4YqvJ e0WOJFfrsKwRYjV+H2H3Oqv7z4afOtwCAtxIHN4Tz+PG6bUY5HQ0tOB2HejcHk8e 1/sZ/IG3RICfnP8Ab0IuODKamxNIdFhjg5pZJD8Cq0sAVC3fiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIPLo46oHVoCwWpYS1yOntJUBnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODhhNmUzMDYtMTEzOS0z Y2I1LWJlOTgtMmFmODEyOWQyYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmArMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvwd/QwFxdz1EJotODboxBWrJXIz1yfdOHXvQx0LNFvqo8E+RR20T2q K8K2DBbf4FyzhPJA/QmzYtmFJwmmWPC1JCE+j+Pf+4PTHqoi35AbneQPpiWXQWbj AZ9gndkD6GBNp0knwfXaVezhbByBMCkCmnYkDbjQCsTy7r8DcYta2k+KRyWJX1lj MIOcwIgYbZ7sWh1lkNlkWJ+TpRfBXAgGl727WXrgNE3MCoP6Dw6Wp3PymW1q19Ck 7mLlpFPJb/LCyTTssB60WcBs+aI25mjzoNYuwxv5HZs+/BmRNdFT9z/lPJqrDxoa ct8ehIbTy+5l4QZANd9jmBzH2EQki9E= -----END CERTIFICATE-----Generated at Thu Mar 26 16:06:51 2026 by rpki-client