$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12bc439f-9ec5-36fe-9261-668e38a75b05.roa File: 12bc439f-9ec5-36fe-9261-668e38a75b05.roa (raw, json) Hash identifier: D5YpDDWv6AbSe1NyIStc1+EQhpXWT9i5ogaE4qO2pEc= Subject key identifier: 24:3E:E9:3E:0C:17:52:27:E2:F2:55:35:1F:3E:F2:2C:B7:87:52:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F2EED29C896CBE3ECA79392C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12bc439f-9ec5-36fe-9261-668e38a75b05.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 50.96.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:29:c8:96:cb:e3:ec:a7:93:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=494e7efb-090a-4cb4-ae27-f1ce8f5e7353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:90:75:c1:3b:f6:46:a2:c5:ca:35:a6:b3:36: 56:6f:19:67:8e:d3:da:45:f1:e4:66:59:c1:94:bd: d6:9b:7d:99:ea:d5:a4:74:5b:c8:f1:1e:89:c1:08: 02:cf:85:ec:e3:fc:21:cd:16:e7:fb:18:06:c9:6e: c7:82:94:d6:0b:d7:bd:cd:f9:5f:78:27:d0:59:3a: e0:19:0d:cc:b2:25:40:60:71:d4:47:36:b7:e2:4b: 86:84:a7:ee:a8:c1:99:b7:51:af:79:ab:30:f7:c8: c6:1c:10:32:6c:63:9a:76:0c:8d:af:64:8e:7a:d0: bd:85:58:80:8a:76:c7:ab:ac:03:2a:2d:81:ce:b7: 3b:d2:b9:2d:8c:56:ae:27:78:f9:6a:11:09:03:9f: 3a:35:f2:69:59:04:df:e1:73:03:29:79:cf:18:a0: 54:71:b4:90:e4:85:65:c1:10:b1:e3:16:6c:40:cb: 75:76:6c:7b:ec:e1:41:75:45:13:f4:b1:1c:b4:c3: 6a:fe:46:c2:0e:85:51:62:a6:a2:2a:f3:ad:19:c4: d6:28:71:cc:ae:88:bb:65:b3:39:70:ea:3e:0e:8c: d5:7e:4e:a9:22:3b:93:ac:e4:91:bf:b2:45:28:bb: 19:8e:ac:2e:78:3b:9c:74:da:29:a4:a4:f9:f3:2e: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3E:E9:3E:0C:17:52:27:E2:F2:55:35:1F:3E:F2:2C:B7:87:52:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12bc439f-9ec5-36fe-9261-668e38a75b05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:55:ec:24:39:06:4d:df:76:cb:27:12:55:3e:0e:f0:f0:7f: 3f:51:2b:41:54:39:a7:89:c1:a9:1e:71:67:94:d5:d2:a2:91: f9:e1:c9:2a:a4:57:c1:c4:90:38:55:fe:27:4b:de:5d:35:6c: 77:9e:39:0d:f4:37:cd:41:39:ee:9e:9e:74:ba:82:6c:7e:e9: e0:c6:19:d9:8f:3e:7e:2c:a8:b2:ed:4f:a9:ba:0a:f7:dc:a8: e7:38:76:45:de:66:2a:78:aa:db:7a:b2:d7:c4:78:37:4a:96: 37:73:90:db:3b:13:95:b3:ce:5c:86:ff:a5:27:f0:15:69:9b: 52:1a:07:a2:ce:64:f6:0e:7e:67:85:df:b1:6a:8a:6d:ee:54: 18:df:23:fd:fe:ff:cd:fe:c3:dd:fa:fe:78:f0:7c:30:5f:a7: 96:71:70:96:21:8c:61:12:02:89:7c:3c:f3:3e:06:9b:5d:0c: 29:6d:82:12:db:a3:f3:ce:c0:76:09:aa:a3:42:55:a7:b8:c2: 48:e4:59:d4:17:71:49:e9:1a:31:91:04:58:5b:04:a7:05:1f: df:1c:34:78:a9:de:18:48:80:23:c8:98:96:0f:73:47:34:6b: 2d:3c:03:14:71:4c:ab:37:ea:a5:57:bc:76:ce:8a:ba:6d:0d: 7e:74:bf:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7SnIlsvj7KeTksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NDk0ZTdlZmItMDkwYS00Y2I0LWFlMjctZjFjZThmNWU3MzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpB1wTv2RqLFyjWmszZWbxlnjtPaRfHkZlnB lL3Wm32Z6tWkdFvI8R6JwQgCz4Xs4/whzRbn+xgGyW7HgpTWC9e9zflfeCfQWTrg GQ3MsiVAYHHURza34kuGhKfuqMGZt1Gveasw98jGHBAybGOadgyNr2SOetC9hViA inbHq6wDKi2Bzrc70rktjFauJ3j5ahEJA586NfJpWQTf4XMDKXnPGKBUcbSQ5IVl wRCx4xZsQMt1dmx77OFBdUUT9LEctMNq/kbCDoVRYqaiKvOtGcTWKHHMroi7ZbM5 cOo+DozVfk6pIjuTrOSRv7JFKLsZjqwueDucdNoppKT58y7Z0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQ+6T4MF1In4vJVNR8+8iy3h1IZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTJiYzQzOWYtOWVjNS0z NmZlLTkyNjEtNjY4ZTM4YTc1YjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpV7CQ5Bk3fdssnElU+DvDwfz9RK0FUOaeJwakecWeU1dKikfnhySqk V8HEkDhV/idL3l01bHeeOQ30N81BOe6ennS6gmx+6eDGGdmPPn4sqLLtT6m6Cvfc qOc4dkXeZip4qtt6stfEeDdKljdzkNs7E5WzzlyG/6Un8BVpm1IaB6LOZPYOfmeF 37Fqim3uVBjfI/3+/83+w936/njwfDBfp5ZxcJYhjGESAol8PPM+BptdDCltghLb o/POwHYJqqNCVae4wkjkWdQXcUnpGjGRBFhbBKcFH98cNHip3hhIgCPImJYPc0c0 ay08AxRxTKs36qVXvHbOirptDX50v1Y= -----END CERTIFICATE-----Generated at Tue Sep 22 12:52:03 2026 by rpki-client