$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db86a2a8-b1dc-38ca-b077-cef249fcbd8f.roa File: db86a2a8-b1dc-38ca-b077-cef249fcbd8f.roa (raw, json) Hash identifier: jcyC7uTI3B53XK/Crxz1JIoVSlLEYaPdP2KUsmMHWwk= Subject key identifier: 77:8F:48:4D:3F:C2:84:E1:F2:A7:F1:AA:2D:2B:F6:35:18:CA:11:ED Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4989C1934811D5E23D78CCB0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db86a2a8-b1dc-38ca-b077-cef249fcbd8f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 50.80.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:c1:93:48:11:d5:e2:3d:78:cc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0c31d7b7-9d1f-4e9d-a5e5-020c55a6c559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:00:5e:cd:87:a1:85:7b:96:f1:0a:8f:48:da: 6b:2d:65:cf:d4:7a:a8:89:71:71:fc:8d:e9:bd:bc: bd:a0:d2:9c:0d:30:40:a6:7a:63:8c:33:f2:c4:85: 3a:2e:bd:4d:a8:80:85:63:bc:9d:89:d1:fe:83:03: 05:ec:c0:8d:27:62:d9:2f:79:1b:a9:6b:b7:77:f2: 27:2d:26:8a:82:e6:fb:e7:3b:55:65:6b:2e:50:13: 20:c5:de:3c:3e:81:99:c3:42:21:2e:55:dc:35:00: 6e:d2:79:9d:96:eb:48:78:03:bd:eb:e3:63:ed:22: 6c:32:5a:a7:c9:b4:59:29:6c:0a:49:46:b8:ee:d0: 63:18:66:da:0b:be:15:33:43:7c:eb:30:0b:d7:db: 7d:3a:a5:39:cb:54:d1:a3:66:e5:75:ed:28:43:af: 4a:9c:39:e7:95:74:d9:d5:61:7f:a3:8a:04:7a:42: 8f:83:e0:5f:6b:bc:09:73:e4:91:a2:42:8d:7f:8e: 5c:d6:83:96:9a:9c:33:08:e1:96:0a:35:e8:7e:b9: 4b:26:42:65:48:35:5a:d0:6e:bc:ba:4b:d1:b5:e0: 2d:47:56:d9:d7:c2:3f:4f:aa:65:a5:d3:b2:90:33: 16:34:0e:8d:8a:e9:d5:20:5d:d8:92:f2:84:3b:44: 24:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8F:48:4D:3F:C2:84:E1:F2:A7:F1:AA:2D:2B:F6:35:18:CA:11:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db86a2a8-b1dc-38ca-b077-cef249fcbd8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 50.80.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0f:e0:27:f5:7e:75:b9:f3:6c:84:53:ab:b7:69:85:07:ad: 3a:c4:09:9c:77:be:15:29:43:e3:aa:11:20:df:61:19:2e:fd: 7b:a4:ce:9c:67:65:c3:be:8b:77:09:c9:77:e1:a5:64:f2:b6: 74:fa:7d:07:47:fc:9d:83:63:f9:0b:08:bf:d7:bc:79:8b:de: 73:12:0f:7f:ca:d9:48:cc:05:1e:79:66:3b:97:34:5c:29:71: 85:08:35:86:1a:b5:51:81:a0:21:15:4c:31:68:34:83:7d:12: 48:68:46:65:fa:e2:e3:bb:0b:f2:3c:01:68:b3:65:5b:72:40: c1:4b:f4:95:1d:a7:f2:30:bb:59:92:2d:c4:08:5f:e8:0a:70: 9f:ec:d2:3d:01:de:95:d5:75:0a:fd:3d:60:51:57:fa:9c:6f: 17:5e:55:06:05:7b:04:0a:88:87:55:9e:02:78:5f:b2:d9:90: 85:ab:7d:97:0b:a1:54:4a:53:80:cc:ed:50:e8:57:02:30:f0: 84:04:0f:dd:57:5a:cb:24:2c:72:a8:1c:fe:61:98:e9:74:c9: 9e:13:91:7b:e5:8c:26:a9:67:44:d0:53:76:c1:ac:68:f4:16: f7:c6:f2:cf:32:bd:28:7f:be:8c:d6:79:d2:e9:b8:9e:2a:55: 73:6e:a8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JicGTSBHV4j14zLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGMzMWQ3YjctOWQxZi00ZTlkLWE1ZTUtMDIwYzU1YTZjNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQBezYehhXuW8QqPSNprLWXP1HqoiXFx/I3p vby9oNKcDTBApnpjjDPyxIU6Lr1NqICFY7ydidH+gwMF7MCNJ2LZL3kbqWu3d/In LSaKgub75ztVZWsuUBMgxd48PoGZw0IhLlXcNQBu0nmdlutIeAO96+Nj7SJsMlqn ybRZKWwKSUa47tBjGGbaC74VM0N86zAL19t9OqU5y1TRo2blde0oQ69KnDnnlXTZ 1WF/o4oEekKPg+Bfa7wJc+SRokKNf45c1oOWmpwzCOGWCjXofrlLJkJlSDVa0G68 ukvRteAtR1bZ18I/T6plpdOykDMWNA6NiunVIF3YkvKEO0QkawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHePSE0/woTh8qfxqi0r9jUYyhHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGI4NmEyYTgtYjFkYy0z OGNhLWIwNzctY2VmMjQ5ZmNiZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMlDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEP4Cf1fnW582yEU6u3aYUHrTrECZx3vhUpQ+OqESDfYRku/Xukzpxn ZcO+i3cJyXfhpWTytnT6fQdH/J2DY/kLCL/XvHmL3nMSD3/K2UjMBR55ZjuXNFwp cYUINYYatVGBoCEVTDFoNIN9EkhoRmX64uO7C/I8AWizZVtyQMFL9JUdp/Iwu1mS LcQIX+gKcJ/s0j0B3pXVdQr9PWBRV/qcbxdeVQYFewQKiIdVngJ4X7LZkIWrfZcL oVRKU4DM7VDoVwIw8IQED91XWsskLHKoHP5hmOl0yZ4TkXvljCapZ0TQU3bBrGj0 FvfG8s8yvSh/vozWedLpuJ4qVXNuqIs= -----END CERTIFICATE-----Generated at Sat Sep 26 00:01:42 2026 by rpki-client