$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa File: 8cf117f2-112a-3cfb-9363-44ee9405c70d.roa (raw, json) Hash identifier: KApPQOUCt+uEpviOjn6EEoAcOdaPXneG6W8t+VNwO3Q= Subject key identifier: 59:03:B0:6C:2E:0D:17:56:E3:46:F3:72:12:D5:3D:63:0A:5C:5A:CF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A965B8BB5243A80787680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 50.96.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:96:5b:8b:b5:24:3a:80:78:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=c35f8767-c505-4bae-8520-35154b033668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b6:90:2b:56:2c:15:51:2f:5c:db:6d:da:4c: 98:4c:29:f6:59:ab:cc:8f:98:da:00:61:14:fe:e5: 51:3b:07:dd:e8:56:6d:f3:19:ee:24:71:4e:af:a7: ad:42:65:a3:68:89:95:5d:f7:50:09:b0:01:b9:b6: 7c:2c:b3:68:c2:0f:8b:e4:90:93:2d:e6:14:5f:fa: ce:b7:ae:83:8f:b7:ca:b1:4b:48:61:99:bf:4f:c3: ed:bc:86:3e:cd:85:60:26:86:ae:e4:36:d8:39:70: c3:53:4b:fe:56:94:e4:5b:5e:c3:ea:d9:a2:78:59: 2e:d8:3c:a2:00:60:6e:c4:75:9c:68:3c:f0:82:a4: 93:79:d0:ee:4a:ee:4d:09:bd:44:f0:62:96:e9:09: b6:a7:02:50:f6:f7:67:65:f8:e0:21:db:46:3a:76: ac:e6:6f:eb:ed:f2:de:5b:66:e3:7e:f1:89:34:3d: 93:8b:fa:bb:36:71:ee:0d:78:11:4e:e5:61:31:0e: e4:7f:f4:16:bb:8c:bc:6f:fc:2d:a6:d8:d6:e7:6b: 34:2d:97:3f:3e:28:13:fe:e8:f4:ec:ea:0c:9e:4d: 6d:71:18:4f:da:31:50:ba:93:7e:5d:15:e4:aa:86: 38:5e:0f:89:ad:56:74:e9:f5:bc:82:95:d6:19:91: 4a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:03:B0:6C:2E:0D:17:56:E3:46:F3:72:12:D5:3D:63:0A:5C:5A:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8cf117f2-112a-3cfb-9363-44ee9405c70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 50.96.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:89:9e:61:45:14:21:1b:62:a3:eb:81:18:10:5e:98:e1:7a: f9:d2:d1:b3:40:f1:00:1d:ba:f4:99:34:32:d6:26:fd:ad:40: 36:3f:c3:82:8c:40:ac:4a:33:bd:89:6d:ec:9c:5e:d0:78:72: 37:22:b1:54:ad:d0:bf:2c:a5:2f:96:4d:a7:11:28:74:f8:7d: 94:1f:28:dd:8a:5b:60:80:b4:62:0d:44:78:b0:2b:b0:2d:db: 58:7e:57:fb:97:72:68:2e:41:d3:75:2b:c8:6f:61:a3:00:3d: a6:14:e1:f3:51:a2:f1:71:de:e5:a9:bc:8c:b9:cb:51:36:5a: e5:4c:97:97:d9:04:4b:48:b5:0e:73:4f:6a:92:3c:1f:b0:8d: 04:6a:3a:b1:2a:d6:e9:d0:fb:1c:a9:18:9d:a3:bf:e2:4a:48: b5:6f:d7:9d:76:ed:40:f2:8c:e4:01:af:98:27:7d:be:9e:a2: be:2c:64:72:19:e8:47:26:b3:6e:e0:fe:6f:94:5a:a3:46:a6: aa:81:0f:b3:11:a4:c8:20:ae:05:f5:0d:e7:22:61:5b:e7:ea: 1a:9c:a8:ac:02:41:ee:74:74:d1:88:0a:7a:8a:ca:2f:bb:80: 46:ea:49:0f:8d:2b:21:cb:9a:68:70:a0:c8:49:8c:12:93:9e: 02:3b:21:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpZbi7UkOoB4doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YzM1Zjg3NjctYzUwNS00YmFlLTg1MjAtMzUxNTRiMDMzNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLaQK1YsFVEvXNtt2kyYTCn2WavMj5jaAGEU /uVROwfd6FZt8xnuJHFOr6etQmWjaImVXfdQCbABubZ8LLNowg+L5JCTLeYUX/rO t66Dj7fKsUtIYZm/T8PtvIY+zYVgJoau5DbYOXDDU0v+VpTkW17D6tmieFku2Dyi AGBuxHWcaDzwgqSTedDuSu5NCb1E8GKW6Qm2pwJQ9vdnZfjgIdtGOnas5m/r7fLe W2bjfvGJND2Ti/q7NnHuDXgRTuVhMQ7kf/QWu4y8b/wtptjW52s0LZc/PigT/uj0 7OoMnk1tcRhP2jFQupN+XRXkqoY4Xg+JrVZ06fW8gpXWGZFK1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkDsGwuDRdW40bzchLVPWMKXFrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGNmMTE3ZjItMTEyYS0z Y2ZiLTkzNjMtNDRlZTk0MDVjNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEMmAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6JnmFFFCEbYqPrgRgQXpjhevnS0bNA8QAduvSZNDLWJv2tQDY/w4KM QKxKM72JbeycXtB4cjcisVSt0L8spS+WTacRKHT4fZQfKN2KW2CAtGINRHiwK7At 21h+V/uXcmguQdN1K8hvYaMAPaYU4fNRovFx3uWpvIy5y1E2WuVMl5fZBEtItQ5z T2qSPB+wjQRqOrEq1unQ+xypGJ2jv+JKSLVv15127UDyjOQBr5gnfb6eor4sZHIZ 6Ecms27g/m+UWqNGpqqBD7MRpMggrgX1DeciYVvn6hqcqKwCQe50dNGICnqKyi+7 gEbqSQ+NKyHLmmhwoMhJjBKTngI7IW8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:01:02 2026 by rpki-client