$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/157db028-771f-323b-9944-ce053ce2571d.roa File: 157db028-771f-323b-9944-ce053ce2571d.roa (raw, json) Hash identifier: wd2K7NDbl1cFA7XJFDQxz0tyihROiUx0xDloXe9X0Ak= Subject key identifier: 17:16:35:DC:CE:E3:4F:6F:5D:B4:E4:44:B5:4D:E5:2C:C8:06:A3:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E9D4A6A30C2FAAD02E4072D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/157db028-771f-323b-9944-ce053ce2571d.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 7029 IP address blocks: 50.96.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:6a:30:c2:fa:ad:02:e4:07:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=1ac3b63b-d7b1-46ac-a2b6-d656b24dccc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:27:cc:3e:b0:c4:8e:75:e7:44:4a:67:9a:c8: 00:de:6c:55:3a:00:1c:4f:c5:33:e8:62:94:a4:db: bf:b6:85:7c:1f:f5:d1:26:8d:6e:db:66:b6:aa:64: f8:b1:cb:e7:d1:9b:c9:21:bf:67:f2:29:2f:ab:9e: 68:2b:32:1f:23:35:43:79:74:da:16:e9:04:9c:d9: 2d:0f:dd:2d:62:81:73:28:0b:1d:cc:73:33:b2:bf: 18:ec:66:16:cc:bb:65:ec:5b:9a:d5:66:00:a4:b7: 8a:3e:83:e4:50:56:61:23:89:b5:71:7a:11:98:9e: 3c:21:5e:d8:17:92:d8:61:8d:25:79:f2:db:f9:b3: 6e:48:b7:72:87:2a:d2:a6:e1:d7:d0:64:d3:c7:db: 7b:55:a2:b0:7c:27:46:81:ac:4d:40:f4:58:c2:4d: 41:4e:21:8b:8e:45:d0:4d:68:65:94:e8:40:93:dd: b8:5b:ff:bf:ba:e6:91:96:d3:07:74:94:08:e1:b7: 60:16:a1:af:c3:c5:21:fa:b2:38:d2:42:84:f0:9c: 74:d6:af:5f:a7:36:8e:26:4c:b1:a2:67:1f:e9:e6: aa:3a:e8:86:40:4d:f9:fc:59:da:46:be:f7:75:0c: 46:35:39:33:1e:bc:56:9b:3d:20:c0:f4:bf:92:8f: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:16:35:DC:CE:E3:4F:6F:5D:B4:E4:44:B5:4D:E5:2C:C8:06:A3:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/157db028-771f-323b-9944-ce053ce2571d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:dc:99:f6:de:b6:f2:de:7c:a7:3e:55:a7:43:58:b1:d7:10: 67:7b:f3:fd:04:7e:e3:12:2b:23:e9:c7:d7:cb:8a:7f:f1:bc: 37:2b:82:4e:eb:39:5d:a1:f2:3c:c4:fd:7e:cb:3d:5d:5a:4f: 73:6b:3f:de:d8:70:ca:8d:cc:3c:3c:67:37:6d:37:12:4f:7a: ae:60:72:b3:75:33:d2:4f:3b:d9:6a:1f:76:dc:a6:9e:34:1b: 82:b8:8b:bb:6f:bf:61:2c:db:3a:41:b4:98:af:32:d5:ce:05: 3a:ad:12:6e:07:fa:db:71:57:c9:71:17:00:42:6d:f2:41:2f: cf:30:3c:0c:e4:cf:a5:f3:e0:0a:7a:9e:01:bf:22:db:2c:03: a9:ca:f6:98:ed:9c:09:32:90:a4:9e:58:10:1e:b3:40:d1:05: 79:1e:1d:59:23:67:c6:cd:6a:2c:e4:90:3e:cf:04:5f:49:97: 5b:39:9a:a7:e0:cd:52:44:46:64:e9:45:18:12:00:29:b3:51: 77:00:eb:5b:b2:a8:dc:5b:d7:fc:05:a5:16:fe:71:45:07:d6: 71:fa:0a:e8:3c:2a:1c:19:e8:e0:34:a3:ad:c5:bd:a5:62:24: 62:02:5a:65:3d:e0:97:6f:ad:54:47:71:16:73:75:16:dd:32: 5d:d0:15:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmowwvqtAuQHLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk MWFjM2I2M2ItZDdiMS00NmFjLWEyYjYtZDY1NmIyNGRjY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSfMPrDEjnXnREpnmsgA3mxVOgAcT8Uz6GKU pNu/toV8H/XRJo1u22a2qmT4scvn0ZvJIb9n8ikvq55oKzIfIzVDeXTaFukEnNkt D90tYoFzKAsdzHMzsr8Y7GYWzLtl7Fua1WYApLeKPoPkUFZhI4m1cXoRmJ48IV7Y F5LYYY0lefLb+bNuSLdyhyrSpuHX0GTTx9t7VaKwfCdGgaxNQPRYwk1BTiGLjkXQ TWhllOhAk924W/+/uuaRltMHdJQI4bdgFqGvw8Uh+rI40kKE8Jx01q9fpzaOJkyx omcf6eaqOuiGQE35/FnaRr73dQxGNTkzHrxWmz0gwPS/ko+wowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcWNdzO409vXbTkRLVN5SzIBqNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTU3ZGIwMjgtNzcxZi0z MjNiLTk5NDQtY2UwNTNjZTI1NzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMmD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfcmfbetvLefKc+VadDWLHXEGd78/0EfuMSKyPpx9fLin/xvDcrgk7r OV2h8jzE/X7LPV1aT3NrP97YcMqNzDw8ZzdtNxJPeq5gcrN1M9JPO9lqH3bcpp40 G4K4i7tvv2Es2zpBtJivMtXOBTqtEm4H+ttxV8lxFwBCbfJBL88wPAzkz6Xz4Ap6 ngG/ItssA6nK9pjtnAkykKSeWBAes0DRBXkeHVkjZ8bNaizkkD7PBF9Jl1s5mqfg zVJERmTpRRgSACmzUXcA61uyqNxb1/wFpRb+cUUH1nH6Cug8KhwZ6OA0o63FvaVi JGICWmU94JdvrVRHcRZzdRbdMl3QFY0= -----END CERTIFICATE-----Generated at Tue Jul 28 21:03:10 2026 by rpki-client