$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/996973d4-d374-347d-9273-890b80e08839.roa File: 996973d4-d374-347d-9273-890b80e08839.roa (raw, json) Hash identifier: BXi8v1M4h2TrOeeXPjMCaXSy5cjSl4W6KaimoT1nex8= Subject key identifier: EB:75:6A:1A:08:3C:27:83:9F:88:EA:34:D7:4B:3C:0C:16:BD:5B:D3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D44FA6D370FAD1AEE4E16D460 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/996973d4-d374-347d-9273-890b80e08839.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 19905 IP address blocks: 50.82.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:6d:37:0f:ad:1a:ee:4e:16:d4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=b9ea7513-53d5-4ab3-ad85-1e2465ab3125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e3:93:dd:93:79:db:77:34:ba:20:51:0b:e0: 57:03:52:95:f1:b7:5c:6f:79:63:04:1b:8a:9c:40: 2d:3f:7b:30:57:6d:84:4d:78:22:44:9f:38:ec:43: 46:24:41:67:59:13:45:16:90:f6:43:17:65:8b:46: 0f:5f:b6:3d:41:b0:7b:b8:2e:c0:40:03:52:b6:0f: c6:38:a1:1a:2c:d4:6f:70:75:f7:f4:bd:a3:13:c5: 5d:75:bb:90:5d:20:ef:ce:a0:66:ad:24:e8:05:b5: 3b:1c:bc:9f:3f:02:02:3e:06:7b:84:db:06:c7:1b: 8c:05:84:73:a2:53:80:d7:8b:c1:5b:ba:73:fb:42: bd:fc:58:0f:05:32:70:9e:81:7e:0a:b5:99:a1:0c: a3:cd:3c:6d:ff:d7:04:fa:34:f4:2c:74:82:7f:04: 00:8b:b5:60:f4:43:b7:94:20:4a:69:56:98:87:8b: 02:6f:b1:b0:60:9f:df:1b:2c:cd:3f:6f:64:c9:9f: 40:94:45:a7:d6:58:cb:84:86:88:2c:d9:67:d2:96: 71:77:36:56:48:70:b4:f3:24:7f:4f:8f:ae:54:d5: 94:75:2e:ba:f6:e3:d0:1e:88:7b:92:ab:02:34:d8: 16:ef:28:b4:c7:7d:96:0b:bc:19:f7:1c:b9:8c:75: 09:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:75:6A:1A:08:3C:27:83:9F:88:EA:34:D7:4B:3C:0C:16:BD:5B:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/996973d4-d374-347d-9273-890b80e08839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.82.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:79:2c:c3:99:da:86:a7:d7:7a:52:ba:92:e3:e8:19:f7:30: 59:1e:ee:bf:e8:d3:88:3d:9c:81:f1:41:64:08:97:ae:4f:32: 98:eb:0b:d4:30:70:28:56:7c:f6:62:c2:84:ff:54:bb:ea:9d: 95:58:8a:6c:f7:e0:97:4a:be:71:9d:8a:38:4a:6e:53:77:fe: 4c:c0:92:4d:7e:3c:28:ee:23:f5:b7:54:63:8e:ad:d9:ab:d5: 77:be:27:75:82:4c:87:af:2c:09:c7:62:0d:79:0a:61:9e:bb: 18:01:b7:a3:ca:49:ea:e9:d0:6b:ac:72:ba:89:5f:94:7b:da: f1:49:f1:34:bc:47:99:a1:70:1b:9a:bd:2b:cb:6e:19:51:6d: 46:a9:10:83:c9:9d:e0:dc:48:eb:65:28:dd:1a:8a:71:4d:80: 23:77:bb:0d:b8:99:76:21:1d:83:96:ed:35:b8:f0:5b:5b:de: db:d2:60:16:10:fc:d0:35:4e:dc:03:11:b6:9d:bc:1c:d3:db: 05:33:f2:5c:b1:47:fa:74:72:a5:49:0a:29:75:e9:d9:8d:79: 4c:37:31:fc:1d:d8:0a:d1:f8:08:02:e5:ba:13:78:12:0e:ed: 2e:ae:04:cf:56:76:69:a4:4b:07:02:00:29:95:2b:5b:9e:34: 4d:60:0b:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+m03D60a7k4W1GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YjllYTc1MTMtNTNkNS00YWIzLWFkODUtMWUyNDY1YWIzMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeOT3ZN523c0uiBRC+BXA1KV8bdcb3ljBBuK nEAtP3swV22ETXgiRJ847ENGJEFnWRNFFpD2Qxdli0YPX7Y9QbB7uC7AQANStg/G OKEaLNRvcHX39L2jE8VddbuQXSDvzqBmrSToBbU7HLyfPwICPgZ7hNsGxxuMBYRz olOA14vBW7pz+0K9/FgPBTJwnoF+CrWZoQyjzTxt/9cE+jT0LHSCfwQAi7Vg9EO3 lCBKaVaYh4sCb7GwYJ/fGyzNP29kyZ9AlEWn1ljLhIaILNln0pZxdzZWSHC08yR/ T4+uVNWUdS669uPQHoh7kqsCNNgW7yi0x32WC7wZ9xy5jHUJCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOt1ahoIPCeDn4jqNNdLPAwWvVvTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTk2OTczZDQtZDM3NC0z NDdkLTkyNzMtODkwYjgwZTA4ODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMlKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV5LMOZ2oan13pSupLj6Bn3MFke7r/o04g9nIHxQWQIl65PMpjrC9Qw cChWfPZiwoT/VLvqnZVYimz34JdKvnGdijhKblN3/kzAkk1+PCjuI/W3VGOOrdmr 1Xe+J3WCTIevLAnHYg15CmGeuxgBt6PKSerp0GuscrqJX5R72vFJ8TS8R5mhcBua vSvLbhlRbUapEIPJneDcSOtlKN0ainFNgCN3uw24mXYhHYOW7TW48Ftb3tvSYBYQ /NA1TtwDEbadvBzT2wUz8lyxR/p0cqVJCil16dmNeUw3Mfwd2ArR+AgC5boTeBIO 7S6uBM9WdmmkSwcCACmVK1ueNE1gC3s= -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:45 2026 by rpki-client