$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa240ee4-f6b4-357b-954e-d09a4875efda.roa File: aa240ee4-f6b4-357b-954e-d09a4875efda.roa (raw, json) Hash identifier: HNiom5kuMH5pyQy6/hUY8g6yRCgpG5E3H9snI6UlCSc= Subject key identifier: A7:0F:A8:56:17:0A:B3:08:D5:ED:29:CF:F4:6E:DC:01:8A:1C:5A:80 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D386A5294D60842337958BE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa240ee4-f6b4-357b-954e-d09a4875efda.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 50.96.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:52:94:d6:08:42:33:79:58:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=67f27514-69be-4622-b9a4-e184cc472608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:36:5e:82:76:bf:58:e8:c9:36:4b:76:af: c4:d8:44:cb:e3:99:09:45:b4:b7:ba:58:2b:ce:4a: 73:7b:bb:79:6a:09:f8:d3:c3:4b:d5:2e:12:3e:8e: f6:78:e3:ac:df:62:12:59:de:8c:43:97:82:40:7d: 2e:4c:20:2d:0f:bb:68:ac:0d:3e:e2:6c:ee:21:af: 96:6b:75:48:48:a0:ac:b1:e1:fc:54:bc:8d:26:24: 7d:f7:69:8e:80:39:77:8f:b9:d5:75:88:c4:3d:7b: 46:87:44:6b:dd:c4:a7:35:9b:3d:10:af:03:45:30: 74:bb:70:b7:a3:74:e4:ae:49:60:d7:9e:d1:19:b9: 4c:2e:b5:49:30:a4:bf:34:6b:7f:b0:d9:5f:37:c6: 73:4e:46:9f:ad:3d:a5:19:c8:d3:4e:48:fb:67:22: 1b:3a:74:0f:6f:75:6f:62:32:9f:cc:5d:ea:5a:74: 3c:c8:a9:44:a5:81:ce:12:eb:32:af:34:e4:7e:35: 49:07:e5:52:16:70:23:e0:f7:02:43:d1:c7:a8:23: eb:64:42:6f:82:08:83:4f:be:24:a1:e9:f1:8d:f8: 7e:c2:32:7a:ea:32:83:da:f3:ec:d4:ce:4f:1b:f5: 7d:de:76:8a:67:ef:66:d3:6f:9e:32:91:71:43:64: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0F:A8:56:17:0A:B3:08:D5:ED:29:CF:F4:6E:DC:01:8A:1C:5A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa240ee4-f6b4-357b-954e-d09a4875efda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:28:c0:f9:64:db:ae:f8:3a:40:81:56:a6:b3:5c:1a:ba:c5: fa:55:d0:fd:27:aa:9c:96:54:c0:f9:45:c2:6c:56:3b:36:a1: e0:1b:30:2f:0a:67:4d:fe:28:81:60:32:48:f4:cf:dc:d2:f5: cc:e1:a3:43:d0:b8:1e:7d:0f:69:7e:77:fd:1c:bf:c1:ce:1a: 94:da:68:23:fc:8d:36:9d:aa:3c:77:00:7b:dc:34:72:ab:7d: 0e:0d:16:a2:43:22:2e:74:45:47:ad:a5:c2:f8:1d:46:fc:9a: b8:d2:99:9a:dd:ac:76:fd:a7:b5:53:7e:8c:a1:df:9b:bd:8f: 39:74:6a:f5:3c:f3:79:96:37:c8:30:bd:c3:3c:16:7a:f6:8a: a0:25:ff:49:71:c2:2c:91:f0:ea:42:47:c2:d4:c3:79:95:37: ff:f3:a4:29:f8:de:a9:62:79:e0:2b:a4:8a:05:5b:f1:37:83: 04:8a:7e:d3:e4:fe:6c:e2:b9:15:0c:94:39:a9:4b:32:a9:16: fe:da:cc:0c:42:ac:0f:6b:ea:39:c0:86:67:b3:06:cd:4f:ea: 86:3e:85:21:f2:59:a1:b0:2f:42:64:77:db:f8:b7:8f:1a:12: 8e:8c:e6:f5:93:b3:87:f7:f1:08:af:f0:5a:5a:31:ed:98:81: e8:b7:dc:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alKU1ghCM3lYvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NjdmMjc1MTQtNjliZS00NjIyLWI5YTQtZTE4NGNjNDcyNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLk2XoJ2v1joyTZLdq/E2ETL45kJRbS3ulgr zkpze7t5agn408NL1S4SPo72eOOs32ISWd6MQ5eCQH0uTCAtD7torA0+4mzuIa+W a3VISKCsseH8VLyNJiR992mOgDl3j7nVdYjEPXtGh0Rr3cSnNZs9EK8DRTB0u3C3 o3Tkrklg157RGblMLrVJMKS/NGt/sNlfN8ZzTkafrT2lGcjTTkj7ZyIbOnQPb3Vv YjKfzF3qWnQ8yKlEpYHOEusyrzTkfjVJB+VSFnAj4PcCQ9HHqCPrZEJvggiDT74k oenxjfh+wjJ66jKD2vPs1M5PG/V93naKZ+9m02+eMpFxQ2Q0RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcPqFYXCrMI1e0pz/Ru3AGKHFqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEyNDBlZTQtZjZiNC0z NTdiLTk1NGUtZDA5YTQ4NzVlZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmAXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwowPlk2674OkCBVqazXBq6xfpV0P0nqpyWVMD5RcJsVjs2oeAbMC8K Z03+KIFgMkj0z9zS9czho0PQuB59D2l+d/0cv8HOGpTaaCP8jTadqjx3AHvcNHKr fQ4NFqJDIi50RUetpcL4HUb8mrjSmZrdrHb9p7VTfoyh35u9jzl0avU883mWN8gw vcM8Fnr2iqAl/0lxwiyR8OpCR8LUw3mVN//zpCn43qlieeArpIoFW/E3gwSKftPk /mziuRUMlDmpSzKpFv7azAxCrA9r6jnAhmezBs1P6oY+hSHyWaGwL0Jkd9v4t48a Eo6M5vWTs4f38Qiv8FpaMe2Ygei33LM= -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:35 2026 by rpki-client