$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa File: 09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa (raw, json) Hash identifier: WTjUb9qXa+9XC4/2bdeFs7kYNJ9JM+d48getMkaH/n4= Subject key identifier: D9:6F:6A:4A:8D:74:04:B7:4F:05:26:EF:BA:C8:F8:12:85:19:AE:95 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584E86F4F21C5EE9B1F5637E13E0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 29802 IP address blocks: 199.91.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:f2:1c:5e:e9:b1:f5:63:7e:13:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=adf140ad-4989-4964-ace5-088816657070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0c:71:76:51:9e:20:3b:90:be:b2:d1:44:cc: 90:6d:20:b2:72:28:8e:8b:67:94:74:66:bc:82:7c: 90:8d:43:7a:dd:e2:2f:e5:1f:e7:0b:88:88:5f:a0: 91:64:c6:64:07:48:ed:32:95:bb:e9:0e:6a:d8:2b: a2:c6:65:f5:5f:c4:d4:a5:59:d2:a8:45:2c:7a:32: 40:c4:11:9c:65:23:af:c2:99:79:de:1a:4e:40:c7: 8a:12:b4:da:c7:ad:73:1a:46:ff:8d:cb:cd:2f:a0: 32:98:ef:35:2a:84:ed:75:c3:87:46:9a:6f:80:78: 29:fe:fc:05:b3:74:67:9f:c4:9e:98:36:9d:ab:56: ad:a4:e4:5e:1c:36:f1:1f:bb:d1:d5:e0:e6:79:48: d1:4a:2e:ae:db:99:50:0b:37:7d:19:68:f0:e9:20: bd:cb:85:7e:6a:0f:bd:28:95:fd:33:4a:5c:92:7a: bd:3a:1c:62:3b:4c:e3:d4:1d:f1:7d:e4:4f:2b:d5: 03:e6:bb:ac:bf:3a:44:93:47:52:45:6b:e8:0d:11: a1:a5:d2:97:ab:c3:67:07:d5:5e:3c:47:77:cb:c2: d3:7b:91:42:dc:f2:f2:71:06:3d:de:bd:3f:6c:d8: 6e:d0:a0:1b:b3:bc:65:b8:89:8f:3d:70:2a:66:13: 06:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6F:6A:4A:8D:74:04:B7:4F:05:26:EF:BA:C8:F8:12:85:19:AE:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/09403143-8aba-3d7c-a93c-c10c7ba8d9f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 199.91.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ff:81:59:06:2a:1f:ba:fb:a0:14:24:59:65:89:e6:b9:61: 9f:69:34:f0:69:93:45:4a:1f:0a:ec:fd:a6:56:94:5c:0e:b3: 2c:d7:47:f1:ae:3d:4b:cb:90:9b:57:6c:54:10:5f:eb:aa:9f: 7e:d4:8c:9b:22:d4:4e:89:5b:59:33:6e:28:d4:5b:62:76:3b: 88:e0:11:7a:1e:b5:08:c1:51:5d:95:e2:41:aa:f2:d4:b6:e6: 5f:1b:66:0d:af:6b:8c:b0:6c:99:38:9a:c6:48:f3:94:35:0a: 29:f7:66:1c:c1:fb:df:df:f3:21:b7:b9:1a:fe:64:fa:eb:8e: 40:a4:77:cf:07:52:1c:a8:13:ef:34:21:d2:58:fa:00:b0:7f: 94:b2:f1:68:64:5d:85:2c:82:79:e2:15:4e:16:54:fb:38:34: d6:d1:e4:d5:9a:48:54:5b:d9:af:72:83:52:74:76:fa:54:8a: 69:4f:57:9b:6e:b1:6e:b7:80:32:54:e0:6a:3b:fe:29:4c:33: 92:f4:d4:8d:10:7d:58:e1:ca:bb:39:e5:72:1a:bc:89:d1:2b: d6:8b:9c:9d:0c:71:84:c5:df:76:ef:48:da:bb:34:91:64:32: 87:6d:6a:13:4f:c1:1a:39:e0:c6:a3:2b:fd:5b:a3:2f:c9:c5: 0f:dd:3f:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9PIcXumx9WN+E+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk YWRmMTQwYWQtNDk4OS00OTY0LWFjZTUtMDg4ODE2NjU3MDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAxxdlGeIDuQvrLRRMyQbSCyciiOi2eUdGa8 gnyQjUN63eIv5R/nC4iIX6CRZMZkB0jtMpW76Q5q2CuixmX1X8TUpVnSqEUsejJA xBGcZSOvwpl53hpOQMeKErTax61zGkb/jcvNL6AymO81KoTtdcOHRppvgHgp/vwF s3Rnn8SemDadq1atpOReHDbxH7vR1eDmeUjRSi6u25lQCzd9GWjw6SC9y4V+ag+9 KJX9M0pcknq9OhxiO0zj1B3xfeRPK9UD5rusvzpEk0dSRWvoDRGhpdKXq8NnB9Ve PEd3y8LTe5FC3PLycQY93r0/bNhu0KAbs7xluImPPXAqZhMG6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlvakqNdAS3TwUm77rI+BKFGa6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMDk0MDMxNDMtOGFiYS0z ZDdjLWE5M2MtYzEwYzdiYThkOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1tAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJT/gVkGKh+6+6AUJFlliea5YZ9pNPBpk0VKHwrs/aZWlFwOsyzXR/Gu PUvLkJtXbFQQX+uqn37UjJsi1E6JW1kzbijUW2J2O4jgEXoetQjBUV2V4kGq8tS2 5l8bZg2va4ywbJk4msZI85Q1Cin3ZhzB+9/f8yG3uRr+ZPrrjkCkd88HUhyoE+80 IdJY+gCwf5Sy8WhkXYUsgnniFU4WVPs4NNbR5NWaSFRb2a9yg1J0dvpUimlPV5tu sW63gDJU4Go7/ilMM5L01I0QfVjhyrs55XIavInRK9aLnJ0McYTF33bvSNq7NJFk ModtahNPwRo54MajK/1boy/JxQ/dPzQ= -----END CERTIFICATE-----Generated at Fri Jul 24 12:44:47 2026 by rpki-client