$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0a814e36-fe37-38ec-8bb7-4226458a1679.roa File: 0a814e36-fe37-38ec-8bb7-4226458a1679.roa (raw, json) Hash identifier: 7pRyXeNwPkeJ0I5jH+d6CK/T2aEgPtfgc7TpBB6HWlw= Subject key identifier: 12:5B:46:96:3F:94:8B:B1:A6:7F:C5:66:B5:11:A3:77:3F:D1:AC:8A Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584DA81579C2828647B93788B380 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0a814e36-fe37-38ec-8bb7-4226458a1679.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 29802 IP address blocks: 199.231.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:79:c2:82:86:47:b9:37:88:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=688132da-328c-4a61-a566-4b4d46c58565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:05:9c:9a:48:79:ff:31:71:91:fc:30:cb: 00:1e:35:5a:af:a8:72:d3:6e:ad:64:71:32:b6:c5: 23:52:c0:2b:16:ee:e8:54:07:97:06:c5:89:36:20: f5:04:3e:fd:ca:06:7b:03:71:3d:35:17:8e:0b:51: fc:bb:1f:b3:8b:a9:21:ca:e1:35:a7:d6:4f:11:6d: 1f:29:6c:02:72:b6:81:f7:e8:df:af:e9:a1:c9:bd: e5:2a:d9:2e:64:5c:14:88:14:00:4d:d3:df:3a:ba: 74:18:48:90:17:7d:03:ea:28:ab:f2:dc:8f:b2:d8: 50:01:8d:55:4a:9d:75:50:c6:11:a0:65:5a:8c:67: e0:b0:72:22:c4:68:90:21:a4:f8:73:f9:a3:9c:dc: 11:bf:91:25:ac:54:03:4e:51:8e:c2:a8:f0:ea:81: ff:9b:0c:07:9f:62:e2:4a:1d:db:aa:13:32:1c:8c: 51:1c:0f:1c:74:f3:93:c3:ba:31:54:4f:4a:f3:40: f1:05:c7:f1:ec:54:d1:e2:d8:ac:a9:f9:17:a9:d4: 71:52:0a:b2:39:5b:3f:0a:4a:6c:ab:d5:a2:42:95: a4:08:10:c6:b8:54:23:0b:bc:d5:a8:33:72:33:d1: e4:ff:4a:f6:c2:28:16:d8:48:62:42:db:e8:0e:da: 36:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5B:46:96:3F:94:8B:B1:A6:7F:C5:66:B5:11:A3:77:3F:D1:AC:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0a814e36-fe37-38ec-8bb7-4226458a1679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 199.231.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:08:d6:ca:c3:07:49:7a:92:a0:7c:f0:3f:ce:ad:86:67:59: 4d:e6:e1:5f:a3:e9:d3:69:bc:b1:76:e2:35:5b:8f:d2:55:d7: 51:c2:5f:e2:a1:3d:22:6e:c3:bb:61:2a:0e:db:7d:e6:c1:a9: fb:ce:55:01:03:eb:bd:51:84:93:cd:61:24:7a:ae:e7:29:be: 12:5f:85:a9:24:54:3d:7b:c6:53:df:c9:79:9e:7b:89:37:aa: fd:09:56:39:40:1b:cd:f6:6b:77:74:83:27:28:46:4c:ac:57: 98:5f:e7:ed:7e:98:63:43:99:56:71:8c:45:27:92:d4:e3:9a: 45:f3:65:c2:ce:09:a7:56:9a:1c:31:f9:3c:a0:da:d6:9a:a2: f0:77:6e:05:01:e8:e0:00:21:06:6c:15:cd:eb:22:c1:b6:b0: 4a:39:62:0c:46:ff:b8:dd:3b:5b:53:91:b4:1e:34:0f:13:7c: 7b:7d:d2:56:60:32:aa:02:2c:fb:cf:8f:5b:60:a7:3f:b4:7c: 3a:aa:04:59:c8:46:33:60:33:2a:62:03:90:7e:f3:a7:43:ba: 35:9c:d5:de:65:6f:19:ff:47:f5:a9:1a:87:1f:1f:fa:8f:9c: b0:a8:42:5d:9d:38:e1:74:9c:ac:dd:16:be:8e:50:0e:4b:bc: 6c:af:58:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXnCgoZHuTeIs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk Njg4MTMyZGEtMzI4Yy00YTYxLWE1NjYtNGI0ZDQ2YzU4NTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0YFnJpIef8xcZH8MMsAHjVar6hy026tZHEy tsUjUsArFu7oVAeXBsWJNiD1BD79ygZ7A3E9NReOC1H8ux+zi6khyuE1p9ZPEW0f KWwCcraB9+jfr+mhyb3lKtkuZFwUiBQATdPfOrp0GEiQF30D6iir8tyPsthQAY1V Sp11UMYRoGVajGfgsHIixGiQIaT4c/mjnNwRv5ElrFQDTlGOwqjw6oH/mwwHn2Li Sh3bqhMyHIxRHA8cdPOTw7oxVE9K80DxBcfx7FTR4tisqfkXqdRxUgqyOVs/Ckps q9WiQpWkCBDGuFQjC7zVqDNyM9Hk/0r2wigW2EhiQtvoDto2lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJbRpY/lIuxpn/FZrURo3c/0ayKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMGE4MTRlMzYtZmUzNy0z OGVjLThiYjctNDIyNjQ1OGExNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx+egMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgI1srDB0l6kqB88D/OrYZnWU3m4V+j6dNpvLF24jVbj9JV11HCX+Kh PSJuw7thKg7bfebBqfvOVQED671RhJPNYSR6rucpvhJfhakkVD17xlPfyXmee4k3 qv0JVjlAG832a3d0gycoRkysV5hf5+1+mGNDmVZxjEUnktTjmkXzZcLOCadWmhwx +Tyg2taaovB3bgUB6OAAIQZsFc3rIsG2sEo5YgxG/7jdO1tTkbQeNA8TfHt90lZg MqoCLPvPj1tgpz+0fDqqBFnIRjNgMypiA5B+86dDujWc1d5lbxn/R/WpGocfH/qP nLCoQl2dOOF0nKzdFr6OUA5LvGyvWCU= -----END CERTIFICATE-----Generated at Wed May 13 11:24:36 2026 by rpki-client