$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa File: 504a2c0b-e942-3392-a51f-7d8c0fe34915.roa (raw, json) Hash identifier: qYct4TXwPGUMLQ0j09RZHAaFkwFS2HHtB+0qP5xcFKo= Subject key identifier: 75:28:3C:81:CD:D2:2D:28:1F:91:2E:D8:A5:F2:C7:BB:19:47:29:F8 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584D9E500B8C0998D24D0BCD4680 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 29802 IP address blocks: 66.165.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0b:8c:09:98:d2:4d:0b:cd:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=37071857-af23-4f7a-834f-e94489eeb215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:af:41:b6:0f:c5:e2:37:29:7e:a4:58:81: db:79:5e:99:d5:d1:63:78:0a:7b:4c:10:11:91:f8: df:4b:b0:57:88:22:fe:fe:95:29:4f:0f:b9:c0:c9: 2a:ab:23:b7:8b:13:95:1e:f5:18:9d:ee:5b:41:07: 86:f4:63:c2:7c:92:54:1b:73:70:ed:df:0b:ff:86: 84:b9:a8:2b:d0:0b:5f:7b:15:d7:97:4e:c8:53:5b: 6c:96:53:91:84:79:0d:f3:28:75:12:4b:65:f0:d6: dc:2d:f1:fc:73:7b:d6:72:ef:0a:02:4e:19:40:b9: 35:ed:50:ac:35:8a:9e:9a:8b:74:3b:f6:10:ad:c8: d6:2c:0c:fe:d4:4a:f9:d4:30:99:64:f6:c7:46:4d: cb:f1:e4:15:da:6a:f7:2e:a4:08:d8:f4:69:27:5d: 89:aa:bf:90:f6:ed:1a:09:24:96:12:22:e7:c7:0b: 93:fa:77:27:74:57:91:ad:22:4c:ba:d7:5f:1d:3b: d2:55:14:ef:84:14:af:c3:c8:86:00:16:7e:b9:c1: 9c:f7:2a:9e:b2:93:a7:9e:9d:00:b1:35:28:5a:ba: c8:fe:bd:f1:d3:51:0d:e0:57:58:7f:c2:8c:d2:ed: 00:b4:e9:8c:7f:0e:1a:4e:17:d5:9c:cd:58:2b:d2: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:28:3C:81:CD:D2:2D:28:1F:91:2E:D8:A5:F2:C7:BB:19:47:29:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/504a2c0b-e942-3392-a51f-7d8c0fe34915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.165.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:83:22:58:eb:54:36:11:59:6f:72:7f:2d:f1:93:d5:c6:db: c6:95:82:53:ac:a7:97:60:02:06:52:70:06:b8:8c:36:45:f2: fd:3d:20:2f:b4:9f:38:85:98:97:4d:fa:b6:42:01:54:24:97: b1:0d:53:66:79:59:97:8d:8a:a0:75:49:5a:64:7b:8d:78:8c: 68:be:8c:36:e9:6c:c0:51:df:25:de:fa:44:7d:35:c2:c1:08: 52:ae:81:12:1d:97:45:57:e6:df:66:70:73:c5:83:c5:1b:f4: 28:26:e6:f6:b1:01:6d:95:fb:97:37:4b:95:8d:f0:e8:d4:d3: 68:84:c7:b6:99:04:1d:4f:f5:f8:db:8f:15:c0:78:ed:e9:12: 49:aa:ee:ec:a7:aa:af:80:fd:10:6c:5d:4d:77:fe:ef:51:40: 4b:30:42:e8:53:f8:a9:83:13:ec:e9:62:79:b3:c6:e2:99:24: 3f:49:cd:92:fb:95:df:56:a4:f8:f0:36:58:49:db:89:da:fc: 88:48:1e:40:09:b8:b1:e5:c6:b3:6a:4b:be:3e:e3:1c:6d:ff: e1:1c:dd:79:41:18:fe:59:3c:f5:c7:7f:25:99:27:cd:05:28: 6e:21:6d:bf:fa:68:4a:db:27:a5:e2:8b:04:c5:be:4f:a6:04: 0c:7a:9e:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAuMCZjSTQvNRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MzcwNzE4NTctYWYyMy00ZjdhLTgzNGYtZTk0NDg5ZWViMjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOWvQbYPxeI3KX6kWIHbeV6Z1dFjeAp7TBAR kfjfS7BXiCL+/pUpTw+5wMkqqyO3ixOVHvUYne5bQQeG9GPCfJJUG3Nw7d8L/4aE uagr0AtfexXXl07IU1tsllORhHkN8yh1Ektl8NbcLfH8c3vWcu8KAk4ZQLk17VCs NYqemot0O/YQrcjWLAz+1Er51DCZZPbHRk3L8eQV2mr3LqQI2PRpJ12Jqr+Q9u0a CSSWEiLnxwuT+ncndFeRrSJMutdfHTvSVRTvhBSvw8iGABZ+ucGc9yqespOnnp0A sTUoWrrI/r3x01EN4FdYf8KM0u0AtOmMfw4aThfVnM1YK9KE6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUoPIHN0i0oH5Eu2KXyx7sZRyn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNTA0YTJjMGItZTk0Mi0z MzkyLWE1MWYtN2Q4YzBmZTM0OTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImDIljrVDYRWW9yfy3xk9XG28aVglOsp5dgAgZScAa4jDZF8v09IC+0 nziFmJdN+rZCAVQkl7ENU2Z5WZeNiqB1SVpke414jGi+jDbpbMBR3yXe+kR9NcLB CFKugRIdl0VX5t9mcHPFg8Ub9Cgm5vaxAW2V+5c3S5WN8OjU02iEx7aZBB1P9fjb jxXAeO3pEkmq7uynqq+A/RBsXU13/u9RQEswQuhT+KmDE+zpYnmzxuKZJD9JzZL7 ld9WpPjwNlhJ24na/IhIHkAJuLHlxrNqS74+4xxt/+Ec3XlBGP5ZPPXHfyWZJ80F KG4hbb/6aErbJ6XiiwTFvk+mBAx6nkQ= -----END CERTIFICATE-----Generated at Wed May 13 08:58:28 2026 by rpki-client