$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ff68b01-3143-3889-bdac-e9d5d97e294e.roa File: 7ff68b01-3143-3889-bdac-e9d5d97e294e.roa (raw, json) Hash identifier: cEXwhQ5SxMGMbXxfj4hpHnnQIRoAADfIa4Py73bGD/s= Subject key identifier: CB:65:67:5B:D0:C6:B9:8C:E4:C3:A8:90:61:4E:DE:E0:0A:52:AF:47 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49737D05BD7242C9A3180F60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ff68b01-3143-3889-bdac-e9d5d97e294e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 50.81.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:7d:05:bd:72:42:c9:a3:18:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=05589f80-9c00-41f0-a536-005ace672f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:16:68:93:c5:d5:47:54:c3:a9:1f:56:a4: c0:e7:7a:b9:15:2f:e2:36:a3:3b:21:b2:e7:9f:00: b7:56:cc:24:5e:6b:f1:63:60:17:1b:57:b1:83:8f: 1a:86:81:8c:5b:e2:76:92:89:62:72:97:77:89:c4: 83:d8:9c:29:ac:cc:8e:7c:d0:49:ba:65:a7:f6:4b: 3e:98:cd:1b:b9:ae:ee:f3:ac:1e:34:7d:f4:68:6a: 34:16:8d:63:0b:78:57:e2:10:e7:8a:81:5b:ac:60: 33:c0:9f:35:ee:33:ba:92:fb:f1:35:dd:89:eb:34: 2e:03:6e:d2:45:f1:e1:69:e8:76:51:93:65:13:9f: 23:39:36:b8:5e:46:22:e7:3d:e9:a5:a5:14:26:bd: 7e:a7:8b:84:a0:57:80:6b:bc:c5:c6:59:ee:2b:3a: e9:2c:b4:7b:bf:c5:5e:53:cc:33:c8:2b:b9:cd:7a: 9d:4e:fd:c6:5f:a7:68:9c:dd:26:fa:e0:fa:df:17: 9c:17:72:05:90:e3:7f:eb:10:a6:98:ec:02:f9:7e: 41:3e:ac:bc:86:62:aa:bc:ae:77:91:ef:b4:a2:67: e7:bb:6c:25:58:41:ad:39:c4:d4:8e:45:d9:da:91: 23:11:2d:57:9b:92:6d:38:95:7d:ff:cf:ba:aa:c3: 7a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:65:67:5B:D0:C6:B9:8C:E4:C3:A8:90:61:4E:DE:E0:0A:52:AF:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ff68b01-3143-3889-bdac-e9d5d97e294e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.81.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:48:de:d5:17:36:36:8b:17:06:bc:8b:a8:62:d3:a7:4e:ca: 13:c5:3b:24:2c:b4:7e:80:b3:31:d7:36:21:22:6a:49:d6:d4: 04:a0:0c:80:94:7c:5f:6b:33:ea:d0:39:2b:79:aa:e6:24:64: 91:ab:bf:01:ee:0c:fa:ce:8a:cc:cc:af:38:d3:6c:89:d4:bb: c9:2d:23:20:3f:93:46:f8:94:33:0a:64:19:c9:26:27:2d:e3: cd:b8:b1:8f:81:3b:e4:fb:4e:15:43:c3:91:62:e7:54:75:93: 98:52:d9:6a:9a:c5:b6:f2:1b:54:18:b5:fe:9f:38:66:43:4e: f0:b0:48:35:66:49:93:60:78:87:76:55:7c:e5:d9:ec:06:25: 0b:e9:29:31:07:6f:c8:dc:dc:ad:5a:72:57:78:b4:e5:ad:25: 7e:60:46:2f:09:9e:28:3b:b9:90:1b:fd:ff:67:e8:45:26:58: 8f:ef:7f:a5:bc:57:95:51:23:fb:a3:c1:43:81:a5:a6:da:07: 92:f8:88:99:b4:85:e0:6f:21:46:9a:7b:6c:82:ec:cf:c8:fb: 32:1c:03:78:33:a2:5a:02:00:47:0b:a8:2a:d4:37:39:37:15: 8d:82:1c:2e:61:50:ae:67:68:b8:a2:39:5d:21:5e:0d:ac:07: 48:3a:52:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc30FvXJCyaMYD2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDU1ODlmODAtOWMwMC00MWYwLWE1MzYtMDA1YWNlNjcyZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmgWaJPF1UdUw6kfVqTA53q5FS/iNqM7IbLn nwC3VswkXmvxY2AXG1exg48ahoGMW+J2kolicpd3icSD2JwprMyOfNBJumWn9ks+ mM0bua7u86weNH30aGo0Fo1jC3hX4hDnioFbrGAzwJ817jO6kvvxNd2J6zQuA27S RfHhaeh2UZNlE58jOTa4XkYi5z3ppaUUJr1+p4uEoFeAa7zFxlnuKzrpLLR7v8Ve U8wzyCu5zXqdTv3GX6donN0m+uD63xecF3IFkON/6xCmmOwC+X5BPqy8hmKqvK53 ke+0omfnu2wlWEGtOcTUjkXZ2pEjES1Xm5JtOJV9/8+6qsN6LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtlZ1vQxrmM5MOokGFO3uAKUq9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2ZmNjhiMDEtMzE0My0z ODg5LWJkYWMtZTlkNWQ5N2UyOTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlHpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNI3tUXNjaLFwa8i6hi06dOyhPFOyQstH6AszHXNiEiaknW1ASgDICU fF9rM+rQOSt5quYkZJGrvwHuDPrOiszMrzjTbInUu8ktIyA/k0b4lDMKZBnJJict 4824sY+BO+T7ThVDw5Fi51R1k5hS2WqaxbbyG1QYtf6fOGZDTvCwSDVmSZNgeId2 VXzl2ewGJQvpKTEHb8jc3K1acld4tOWtJX5gRi8Jnig7uZAb/f9n6EUmWI/vf6W8 V5VRI/ujwUOBpabaB5L4iJm0heBvIUaae2yC7M/I+zIcA3gzoloCAEcLqCrUNzk3 FY2CHC5hUK5naLiiOV0hXg2sB0g6Umg= -----END CERTIFICATE-----Generated at Sat Sep 26 01:49:13 2026 by rpki-client