$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/3539c781-77b7-3d87-9f79-249dab3df0e0.roa File: 3539c781-77b7-3d87-9f79-249dab3df0e0.roa (raw, json) Hash identifier: fxbegryaRq401NUKZINMASSfT93vlnGU9fHBGWBhQk8= Subject key identifier: EC:94:31:67:65:5F:DF:DC:F5:37:8D:35:E4:4C:C4:C0:CB:2E:05:B1 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584DA81579D0111C65509743ECC0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/3539c781-77b7-3d87-9f79-249dab3df0e0.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 29802 IP address blocks: 199.119.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:79:d0:11:1c:65:50:97:43:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=64c220a1-47ea-4f7d-8732-c9acdd1b988a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fd:fd:2b:c1:7b:72:11:28:93:5e:02:e9:54: 71:fd:56:b2:61:1e:ed:60:83:00:a7:32:f3:cf:4a: 73:61:44:89:e6:9f:35:2a:d1:00:7e:01:f6:0c:97: 39:f7:71:8a:6a:fa:be:26:6b:8c:2d:76:b3:2f:a6: 19:18:36:cf:55:00:5c:7e:e9:5e:3d:b9:8e:62:48: 62:a1:16:27:a5:ef:04:d6:c4:4a:ac:e5:e4:18:63: 8c:6c:8a:ca:f1:91:09:a2:d0:6f:07:ea:2e:e8:e7: e7:6f:f8:b3:93:78:46:20:5e:27:e6:a9:45:51:e8: 7f:e4:2c:18:aa:e2:f7:56:39:f5:e4:f1:ad:7d:c8: de:22:e9:29:0b:3c:f4:47:c8:68:fe:a9:9e:0a:e9: 21:11:26:1f:99:93:cf:94:07:71:4b:6f:37:46:d1: c5:d0:07:47:ee:88:60:23:29:fe:65:aa:16:25:c8: 55:cc:1c:9b:a0:59:58:0a:46:6c:99:10:37:f5:40: b2:11:6d:69:3f:a4:49:41:51:03:ed:9d:83:d8:97: d0:8f:c2:de:60:a1:7a:49:16:5f:1b:32:c7:3f:4f: d9:d0:2d:28:78:f4:e1:69:32:16:89:be:cb:4c:c9: 4c:5c:d2:96:85:19:a7:f8:22:2b:24:8b:33:10:92: 35:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:94:31:67:65:5F:DF:DC:F5:37:8D:35:E4:4C:C4:C0:CB:2E:05:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/3539c781-77b7-3d87-9f79-249dab3df0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 199.119.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8a:12:09:5d:4b:34:e1:81:9a:e5:0a:cd:0e:a8:d7:fd:66: 76:dd:51:69:76:09:21:1c:49:ab:3c:3b:53:5b:ba:ca:39:5d: e1:10:29:56:95:bf:fc:57:38:6f:34:6f:36:47:c2:63:53:18: dc:10:7c:a6:ff:2b:e2:90:64:74:46:7b:4f:9c:0d:b0:4d:fc: 6b:e6:f0:f2:60:d5:16:79:48:2e:ae:9f:7e:bb:99:5e:85:cb: 73:78:01:aa:e9:08:22:e3:5c:ba:e9:15:e6:a1:c9:f5:32:0a: 53:25:f7:3b:58:36:ce:92:e5:f7:55:8e:8f:4a:54:01:49:1f: a9:8b:11:59:e1:d4:ac:16:b3:4b:8a:10:a8:4c:ee:51:9c:50: b6:3c:e5:8f:66:a9:f9:ac:54:c4:90:db:6e:b0:e1:c7:21:e4: 4d:0e:87:bc:16:ca:1e:55:92:b0:79:0b:dc:93:df:fb:12:0e: 6b:86:8d:79:e5:99:f0:27:10:96:35:38:dc:10:98:7c:4a:ba: c3:d2:85:70:34:a2:5a:c1:97:16:6b:81:e8:ee:0b:50:b4:a5: 2e:a4:a6:07:dc:1c:bb:5b:fb:00:14:da:4d:28:a7:e8:ea:d4: 6f:71:cc:77:3d:64:e5:a0:c1:a3:49:be:f3:f1:b3:fc:31:dc: f3:22:bd:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXnQERxlUJdD7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk NjRjMjIwYTEtNDdlYS00ZjdkLTg3MzItYzlhY2RkMWI5ODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif39K8F7chEok14C6VRx/VayYR7tYIMApzLz z0pzYUSJ5p81KtEAfgH2DJc593GKavq+JmuMLXazL6YZGDbPVQBcfulePbmOYkhi oRYnpe8E1sRKrOXkGGOMbIrK8ZEJotBvB+ou6Ofnb/izk3hGIF4n5qlFUeh/5CwY quL3Vjn15PGtfcjeIukpCzz0R8ho/qmeCukhESYfmZPPlAdxS283RtHF0AdH7ohg Iyn+ZaoWJchVzByboFlYCkZsmRA39UCyEW1pP6RJQVED7Z2D2JfQj8LeYKF6SRZf GzLHP0/Z0C0oePThaTIWib7LTMlMXNKWhRmn+CIrJIszEJI1DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyUMWdlX9/c9TeNNeRMxMDLLgWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMzUzOWM3ODEtNzdiNy0z ZDg3LTlmNzktMjQ5ZGFiM2RmMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3dkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSKEgldSzThgZrlCs0OqNf9ZnbdUWl2CSEcSas8O1Nbuso5XeEQKVaV v/xXOG80bzZHwmNTGNwQfKb/K+KQZHRGe0+cDbBN/Gvm8PJg1RZ5SC6un367mV6F y3N4AarpCCLjXLrpFeahyfUyClMl9ztYNs6S5fdVjo9KVAFJH6mLEVnh1KwWs0uK EKhM7lGcULY85Y9mqfmsVMSQ226w4cch5E0Oh7wWyh5VkrB5C9yT3/sSDmuGjXnl mfAnEJY1ONwQmHxKusPShXA0olrBlxZrgejuC1C0pS6kpgfcHLtb+wAU2k0op+jq 1G9xzHc9ZOWgwaNJvvPxs/wx3PMivbE= -----END CERTIFICATE-----Generated at Wed May 13 12:19:33 2026 by rpki-client