$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0137a339-1d50-3e8e-b488-2dc14493982a.roa File: 0137a339-1d50-3e8e-b488-2dc14493982a.roa (raw, json) Hash identifier: SKS37G77UdcWNx5V9q2si11whAHCMejAMr7Ch3n3FGk= Subject key identifier: 66:11:68:67:1F:FA:31:52:98:76:87:86:D3:F4:32:6C:60:09:51:59 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49731D6592DC40D21EF19C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0137a339-1d50-3e8e-b488-2dc14493982a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 50.81.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:1d:65:92:dc:40:d2:1e:f1:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=35db4fb6-5d3f-4de6-a3a6-0fca06ec1090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e1:02:97:66:55:45:a0:3c:19:95:2e:aa:61: bd:f9:3f:5b:43:50:e9:f7:83:b0:86:bb:10:cc:3b: ef:40:af:eb:b4:0e:81:f7:72:b7:b3:0d:4b:d0:24: 17:98:06:ab:15:e5:dd:3f:4c:ed:94:a8:e8:55:03: d6:c4:f5:6a:e7:8e:6a:e2:e1:3e:22:60:79:08:cd: 2d:db:69:5f:11:51:27:8e:7b:f3:02:d7:0f:83:59: fb:b9:e4:0e:f0:ce:3a:43:c0:37:a9:f7:50:2c:ff: f5:d1:cf:d9:fe:76:e8:05:7d:76:b5:5d:9a:64:dd: a4:4c:39:bd:e4:36:25:da:9f:bd:8d:b6:50:96:3b: c2:95:52:e9:e0:0a:9b:c8:78:24:fa:f9:84:1e:94: 05:4f:34:60:e7:4e:4e:64:80:a1:fa:9e:16:ce:93: 41:7e:5b:b1:d7:d4:60:5e:67:b7:95:81:ba:00:47: 18:8c:ca:b2:72:49:60:18:65:50:df:3b:79:de:72: f6:f2:ca:ad:3d:b2:8d:53:b3:d9:7c:dc:b9:e3:7f: 2d:52:42:ca:4a:c6:84:b7:90:5c:64:d4:5a:8a:0c: 57:e5:44:5d:36:78:72:3f:bf:9e:3f:ae:9e:6d:52: 13:f3:42:ad:c7:6e:4c:3d:e1:ec:5e:1e:4a:bb:2f: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:11:68:67:1F:FA:31:52:98:76:87:86:D3:F4:32:6C:60:09:51:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0137a339-1d50-3e8e-b488-2dc14493982a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.81.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:96:78:8a:f9:0b:93:da:7b:cd:7a:45:b6:59:52:cb:d3:4a: 31:96:98:8b:0a:0e:e2:94:d9:c2:8f:f4:34:59:f6:b6:c2:3c: eb:78:8d:61:1f:1e:f7:a1:c2:1f:b2:55:eb:64:10:e5:ec:71: 8b:8c:75:8e:0c:e4:1f:28:42:d7:b0:45:81:1e:89:4b:1d:1e: ef:49:83:10:92:e7:23:03:28:23:be:25:0c:02:b3:b0:4a:26: c2:25:c8:d4:60:22:64:4d:c3:da:de:58:4c:91:cd:b9:61:e8: 84:37:1e:52:60:f7:39:27:94:52:3e:dd:ce:8c:fc:9a:44:0c: 1e:31:5c:57:1b:ae:ec:f8:ae:d3:4e:86:ef:52:20:09:a9:45: 08:f4:65:79:60:29:c0:f4:5a:92:79:40:5b:9e:64:8c:38:0a: aa:78:09:6e:97:91:20:c3:8b:05:d4:3a:7a:6c:c7:af:e3:a0: b9:62:d5:a6:9c:8f:89:46:c3:bd:c7:9e:aa:3f:a0:23:2f:02: d8:15:86:b7:9b:9b:be:c0:dd:f5:21:1f:0b:03:45:ad:cb:a2: 15:cd:2f:84:d6:d7:5a:8e:56:55:4d:73:f3:4a:86:fd:7f:83: 5b:36:20:c3:10:6c:cc:28:dc:2a:4e:2b:0d:1e:4e:9f:ea:08: 07:ec:0c:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcx1lktxA0h7xnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzVkYjRmYjYtNWQzZi00ZGU2LWEzYTYtMGZjYTA2ZWMxMDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOECl2ZVRaA8GZUuqmG9+T9bQ1Dp94OwhrsQ zDvvQK/rtA6B93K3sw1L0CQXmAarFeXdP0ztlKjoVQPWxPVq545q4uE+ImB5CM0t 22lfEVEnjnvzAtcPg1n7ueQO8M46Q8A3qfdQLP/10c/Z/nboBX12tV2aZN2kTDm9 5DYl2p+9jbZQljvClVLp4AqbyHgk+vmEHpQFTzRg505OZICh+p4WzpNBflux19Rg Xme3lYG6AEcYjMqycklgGGVQ3zt53nL28sqtPbKNU7PZfNy5438tUkLKSsaEt5Bc ZNRaigxX5URdNnhyP7+eP66ebVIT80Ktx25MPeHsXh5Kuy9s+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYRaGcf+jFSmHaHhtP0MmxgCVFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDEzN2EzMzktMWQ1MC0z ZThlLWI0ODgtMmRjMTQ0OTM5ODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOWeIr5C5Pae816RbZZUsvTSjGWmIsKDuKU2cKP9DRZ9rbCPOt4jWEf Hvehwh+yVetkEOXscYuMdY4M5B8oQtewRYEeiUsdHu9JgxCS5yMDKCO+JQwCs7BK JsIlyNRgImRNw9reWEyRzblh6IQ3HlJg9zknlFI+3c6M/JpEDB4xXFcbruz4rtNO hu9SIAmpRQj0ZXlgKcD0WpJ5QFueZIw4Cqp4CW6XkSDDiwXUOnpsx6/joLli1aac j4lGw73Hnqo/oCMvAtgVhrebm77A3fUhHwsDRa3LohXNL4TW11qOVlVNc/NKhv1/ g1s2IMMQbMwo3CpOKw0eTp/qCAfsDBw= -----END CERTIFICATE-----Generated at Sat Sep 26 12:54:31 2026 by rpki-client