$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9761d531-6b31-3351-b19d-f5977ae11d1d.roa File: 9761d531-6b31-3351-b19d-f5977ae11d1d.roa (raw, json) Hash identifier: HaaaD4LCW6D7YgeiUZ+u85tbgJGoV9freS455jCpxcU= Subject key identifier: 1B:4D:F4:CB:F0:72:88:2C:B8:08:6C:03:97:F2:3A:21:A6:9A:05:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D386A5286C26A086298C41340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9761d531-6b31-3351-b19d-f5977ae11d1d.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 50.96.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:52:86:c2:6a:08:62:98:c4:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=b5203a3b-7a98-45c2-b2b7-900eef999735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:44:2a:52:b6:95:02:39:f1:c6:6e:c1:0b:df: 0e:3c:d0:2a:e0:79:52:b0:bb:30:35:94:d7:f4:ff: 61:50:8c:24:e9:a3:b5:97:17:44:6c:4c:e2:d5:54: 67:06:48:1f:1c:3e:32:97:be:73:9b:ba:63:37:94: 0c:6e:db:85:73:64:2c:46:33:a5:fa:d9:bd:e0:20: f3:ee:b7:1a:37:58:18:f9:24:ae:40:83:f0:3b:02: f1:74:a2:58:16:f7:43:86:cc:82:3d:12:d6:16:ea: a9:7d:af:01:72:a9:69:b8:f0:a5:3b:99:e7:6b:9a: 00:dd:f4:c5:1d:c9:23:54:68:6b:e0:a6:bb:f3:7e: eb:b7:42:40:7a:73:ba:09:44:53:98:e8:3f:38:af: 97:7e:31:5c:f2:b2:b4:c6:17:0e:9e:1e:9f:e7:40: c9:c6:8f:80:67:f2:b4:b0:c7:1c:a5:39:83:07:c8: e2:6a:2b:e2:71:70:25:f1:2b:1f:a5:9f:ac:04:0a: 81:82:1b:f2:06:d5:43:bb:62:17:8e:7b:b3:f1:2d: 7b:e5:c9:08:90:32:6c:f6:02:8f:1a:87:55:e2:ea: 99:88:47:a0:14:ea:a6:01:7e:aa:4c:f5:34:bc:13: 07:f3:c8:11:33:3e:90:38:c1:d6:3d:e3:ef:65:f6: 61:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4D:F4:CB:F0:72:88:2C:B8:08:6C:03:97:F2:3A:21:A6:9A:05:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9761d531-6b31-3351-b19d-f5977ae11d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c3:c9:0d:44:95:a2:17:69:88:18:5c:2f:1b:ff:e9:c6:ea: 01:c5:f6:b6:d5:2c:a5:52:19:33:91:95:8b:a1:18:19:4f:6e: 4f:56:f6:f4:5e:23:14:cc:e3:f5:c0:d4:bb:cd:75:8c:26:3c: d5:73:e5:b0:3f:28:dc:f6:36:24:a8:21:b4:4a:09:88:42:92: 5e:64:37:19:ae:69:f2:ad:ff:aa:fc:30:b3:37:3b:6a:e4:4c: 9e:fd:9e:77:10:5e:59:87:60:5f:09:2d:e7:13:9a:a6:e2:02: 9b:2b:3c:78:39:20:15:7e:a5:8c:d4:c2:88:ee:eb:10:33:65: de:95:33:59:9d:87:1e:18:1c:96:92:cc:4c:f7:ec:a5:c5:f6: aa:b3:f0:8a:df:95:19:21:00:b8:28:10:22:dc:f8:d2:6b:98: 1e:01:4a:ca:be:1c:23:e4:47:03:b8:c7:d7:0c:34:07:1d:a4: 55:29:e4:ef:25:97:bb:13:d0:69:b6:4d:e4:40:62:87:61:fa: be:76:db:7b:dd:5e:af:a8:38:fd:b8:4a:9f:fa:2a:0b:5b:dc: 15:0c:21:c9:b0:0b:cd:16:09:19:82:da:3b:d1:43:f4:57:3f: ea:49:43:ba:77:68:dc:b6:dc:40:99:88:01:aa:1f:12:e9:d6: f2:a1:28:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alKGwmoIYpjEE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YjUyMDNhM2ItN2E5OC00NWMyLWIyYjctOTAwZWVmOTk5NzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0QqUraVAjnxxm7BC98OPNAq4HlSsLswNZTX 9P9hUIwk6aO1lxdEbEzi1VRnBkgfHD4yl75zm7pjN5QMbtuFc2QsRjOl+tm94CDz 7rcaN1gY+SSuQIPwOwLxdKJYFvdDhsyCPRLWFuqpfa8BcqlpuPClO5nna5oA3fTF HckjVGhr4Ka7837rt0JAenO6CURTmOg/OK+XfjFc8rK0xhcOnh6f50DJxo+AZ/K0 sMccpTmDB8jiaivicXAl8SsfpZ+sBAqBghvyBtVDu2IXjnuz8S175ckIkDJs9gKP GodV4uqZiEegFOqmAX6qTPU0vBMH88gRMz6QOMHWPePvZfZhoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtN9MvwcogsuAhsA5fyOiGmmgUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTc2MWQ1MzEtNmIzMS0z MzUxLWIxOWQtZjU5NzdhZTExZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBMmAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDDyQ1ElaIXaYgYXC8b/+nG6gHF9rbVLKVSGTORlYuhGBlPbk9W9vRe IxTM4/XA1LvNdYwmPNVz5bA/KNz2NiSoIbRKCYhCkl5kNxmuafKt/6r8MLM3O2rk TJ79nncQXlmHYF8JLecTmqbiApsrPHg5IBV+pYzUwoju6xAzZd6VM1mdhx4YHJaS zEz37KXF9qqz8IrflRkhALgoECLc+NJrmB4BSsq+HCPkRwO4x9cMNAcdpFUp5O8l l7sT0Gm2TeRAYodh+r5223vdXq+oOP24Sp/6Kgtb3BUMIcmwC80WCRmC2jvRQ/RX P+pJQ7p3aNy23ECZiAGqHxLp1vKhKHA= -----END CERTIFICATE-----Generated at Thu Mar 26 19:12:08 2026 by rpki-client