$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa File: 1f6da251-413c-3667-8773-4dc6a9dda959.roa (raw, json) Hash identifier: KYGM/3oxq+0/2QxRf232ABGwej2rxtRYUpIIMezkZ2A= Subject key identifier: 42:3B:40:47:FF:EE:9B:5D:CD:02:36:20:8F:07:A9:1B:4B:FC:FA:3E Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584E815F8BD1F86A5682FEEA41F8 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 29802 IP address blocks: 192.211.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:8b:d1:f8:6a:56:82:fe:ea:41:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=d5d78c63-c88c-4bd8-8180-938698312999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:af:69:4d:b5:ac:27:ba:8f:f5:f6:eb:0d: e2:68:66:00:2b:c9:09:20:a3:ce:72:28:dc:0c:a9: 6c:78:8e:a8:3f:88:bd:f5:fc:3c:40:5a:47:ae:78: 5e:7e:fb:e1:a4:b0:96:f0:11:65:f8:6e:cc:a9:8a: 0e:76:6e:72:b4:c4:ba:9e:29:45:ff:9b:2d:bf:9c: 39:31:03:7a:cd:95:25:60:2a:67:83:96:7a:54:cb: 80:55:b6:7f:80:1e:b0:1f:e7:55:22:61:64:6d:0c: a4:52:93:b0:ad:7e:ec:6f:a4:56:2c:1b:47:d4:30: b1:34:af:73:76:1b:36:e1:8b:fb:39:ff:cc:46:8c: dc:40:17:c0:ab:67:f6:d2:2f:b1:82:43:ce:25:78: b3:d6:a0:28:4f:bd:16:61:e5:35:74:de:4e:c9:31: ef:51:1e:e1:2c:51:80:28:72:57:79:0c:9a:8b:4c: 33:b6:f1:0c:0d:b1:0b:d1:dc:cc:71:77:4d:20:9a: 49:e4:22:ff:bf:16:48:2f:08:98:0a:6f:0e:b0:7b: 54:8d:f0:42:48:b9:e2:0c:08:45:a9:31:69:2c:86: 22:e4:e5:45:42:10:fb:68:5b:76:6a:9d:15:f0:43: 8b:7c:62:a8:64:1c:c2:52:a3:1b:c1:d7:ce:05:c2: fc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3B:40:47:FF:EE:9B:5D:CD:02:36:20:8F:07:A9:1B:4B:FC:FA:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1f6da251-413c-3667-8773-4dc6a9dda959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 192.211.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e1:53:7d:a5:af:c5:86:13:87:23:92:90:78:6e:2e:35:39: 56:a4:0c:b2:8c:b5:d9:10:8d:2d:ec:b4:f6:fd:b6:ce:c9:a9: ef:b1:b5:d4:e3:ed:1f:e7:09:0e:e2:9c:48:11:27:6c:7b:8e: f9:8a:92:2b:af:f8:0c:0d:49:8b:9a:02:89:04:4b:40:98:18: 95:52:26:0f:be:14:a5:ad:76:9f:41:57:97:a9:d7:1d:dd:70: 02:9b:14:00:b7:4a:18:89:ad:33:83:fe:7c:02:99:3e:fe:91: ca:eb:f4:e2:e4:54:08:bf:69:10:a8:ae:2d:ab:6e:62:4e:1a: 77:78:ae:a1:f4:be:27:1f:94:b5:09:b9:10:d6:f9:d0:2a:85: 98:64:94:6b:32:08:b9:5e:e1:5b:15:e2:34:17:9b:4f:e5:d6: 8a:6a:ed:0a:e5:09:29:c7:ca:23:bf:71:e3:5a:98:de:11:7f: 08:cf:96:c7:9c:d2:35:1c:8f:ac:56:9f:b7:59:d1:73:9e:d6: a4:c5:3b:99:10:75:ae:14:a0:77:63:95:6c:2d:eb:75:45:8d: a5:25:48:43:39:74:3a:b8:bb:f6:a4:9b:45:03:f6:59:5c:2b: 03:f3:c2:d9:a5:c8:57:63:ff:d2:8c:03:9a:7e:64:b9:57:be: c8:fd:bf:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX4vR+GpWgv7qQfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk ZDVkNzhjNjMtYzg4Yy00YmQ4LTgxODAtOTM4Njk4MzEyOTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFOvaU21rCe6j/X26w3iaGYAK8kJIKPOcijc DKlseI6oP4i99fw8QFpHrnhefvvhpLCW8BFl+G7MqYoOdm5ytMS6nilF/5stv5w5 MQN6zZUlYCpng5Z6VMuAVbZ/gB6wH+dVImFkbQykUpOwrX7sb6RWLBtH1DCxNK9z dhs24Yv7Of/MRozcQBfAq2f20i+xgkPOJXiz1qAoT70WYeU1dN5OyTHvUR7hLFGA KHJXeQyai0wztvEMDbEL0dzMcXdNIJpJ5CL/vxZILwiYCm8OsHtUjfBCSLniDAhF qTFpLIYi5OVFQhD7aFt2ap0V8EOLfGKoZBzCUqMbwdfOBcL8lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI7QEf/7ptdzQI2II8HqRtL/Po+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMWY2ZGEyNTEtNDEzYy0z NjY3LTg3NzMtNGRjNmE5ZGRhOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwNMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXhU32lr8WGE4cjkpB4bi41OVakDLKMtdkQjS3stPb9ts7Jqe+xtdTj 7R/nCQ7inEgRJ2x7jvmKkiuv+AwNSYuaAokES0CYGJVSJg++FKWtdp9BV5ep1x3d cAKbFAC3ShiJrTOD/nwCmT7+kcrr9OLkVAi/aRCori2rbmJOGnd4rqH0vicflLUJ uRDW+dAqhZhklGsyCLle4VsV4jQXm0/l1opq7QrlCSnHyiO/ceNamN4RfwjPlsec 0jUcj6xWn7dZ0XOe1qTFO5kQda4UoHdjlWwt63VFjaUlSEM5dDq4u/akm0UD9llc KwPzwtmlyFdj/9KMA5p+ZLlXvsj9v6E= -----END CERTIFICATE-----Generated at Fri Jul 24 09:08:14 2026 by rpki-client