$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/531d4bc7-9a21-34bd-9766-14d008c87250.roa File: 531d4bc7-9a21-34bd-9766-14d008c87250.roa (raw, json) Hash identifier: lr3JrMKDGD8ihHpluZjs/8e88icC2l9lb83SJaYqhQs= Subject key identifier: E9:D2:89:DB:AF:42:54:15:31:23:F2:A2:09:43:17:16:EA:E1:97:D6 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F2ABD1445DD9BC2F4CF6FDC00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/531d4bc7-9a21-34bd-9766-14d008c87250.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 29802 IP address blocks: 199.193.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:14:45:dd:9b:c2:f4:cf:6f:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=729acfc4-6f81-4b8e-b7f5-450d3c731051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:52:34:47:9d:ab:bb:78:2e:60:4a:83:4f:c2: a5:e1:d1:a5:ee:de:1b:9a:59:e7:52:9d:b9:07:ab: a0:5e:46:43:8a:5c:d4:ba:59:b4:75:e5:af:9a:fc: 4d:c4:93:1a:38:c5:dc:50:cf:e2:5a:ab:79:4a:47: b9:33:a0:b0:b7:77:46:ac:8d:5a:41:2c:b0:99:27: 6f:e9:14:e5:bd:b1:78:b5:be:61:c7:56:45:75:38: 62:a3:f6:7e:6a:21:54:f9:79:7a:e4:8a:8c:95:68: dc:72:52:1d:77:8b:c7:14:3d:e9:4e:b6:8c:b1:ae: c3:b3:3f:be:56:1a:37:c1:ab:fb:d0:16:6c:bd:eb: d6:fd:4c:41:6f:4c:56:68:3e:36:16:6f:7f:e5:32: 0c:d1:09:01:41:b0:e7:e8:75:8f:23:81:50:e9:68: d8:36:d0:71:67:87:92:27:e1:0e:a1:dd:08:39:3e: 85:13:01:61:19:75:d5:7d:a9:27:55:5c:dc:a0:56: ed:3f:02:83:10:f3:c8:1a:b2:37:b5:65:eb:d5:07: 24:80:d0:0b:b4:2b:7d:f3:86:17:d6:18:f8:09:17: 88:12:8e:23:86:74:02:7f:a2:1b:0d:8d:96:27:a0: 39:33:82:ef:9d:38:5d:aa:20:f5:a9:ee:15:bc:eb: 61:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D2:89:DB:AF:42:54:15:31:23:F2:A2:09:43:17:16:EA:E1:97:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/531d4bc7-9a21-34bd-9766-14d008c87250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 199.193.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6f:4d:09:43:96:55:c4:5a:bb:f3:bd:a9:a6:99:e9:80:2f: 84:ed:d2:12:80:8a:a3:50:83:5a:7a:40:88:a9:48:4d:67:b1: 4a:63:a6:f1:f1:42:a1:51:52:23:8f:2f:0f:52:02:20:e9:a8: e3:f3:2f:08:7b:94:35:11:0d:85:30:51:f2:97:14:39:15:a9: 65:b6:78:9e:7e:dd:9b:a5:84:02:d7:f5:bc:08:be:ec:ea:e3: 49:bd:33:ad:de:a1:85:19:2a:18:5e:b7:4f:4a:28:00:0e:1a: 70:79:46:b0:69:c6:c5:1c:41:35:4d:65:c1:d3:02:ee:a7:16: 85:91:fc:a4:cc:ff:89:f6:0a:95:38:8e:df:93:3d:6f:32:a3: 24:c9:d9:e4:c9:e0:a4:40:47:3e:bc:7c:e1:1b:0a:70:e9:73: bd:e3:36:0a:5a:5f:45:10:1a:a6:d6:a6:ab:c9:3e:1a:13:6c: d3:dc:a1:c7:3a:ae:a1:dc:5c:43:fc:d9:22:5e:ef:06:39:06: 7c:c6:ed:fa:96:3a:24:2f:35:a6:f1:96:e2:36:7e:2c:96:75: 4b:c1:a9:03:a1:0a:a5:5f:b9:4c:fb:19:c3:31:cd:04:88:50: 8d:2a:e7:50:24:1b:48:5f:36:f1:32:3d:e1:9e:43:ac:0a:b7: e5:11:7e:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRRF3ZvC9M9v3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NzI5YWNmYzQtNmY4MS00YjhlLWI3ZjUtNDUwZDNjNzMxMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVI0R52ru3guYEqDT8Kl4dGl7t4bmlnnUp25 B6ugXkZDilzUulm0deWvmvxNxJMaOMXcUM/iWqt5Ske5M6Cwt3dGrI1aQSywmSdv 6RTlvbF4tb5hx1ZFdThio/Z+aiFU+Xl65IqMlWjcclIdd4vHFD3pTraMsa7Dsz++ Vho3wav70BZsvevW/UxBb0xWaD42Fm9/5TIM0QkBQbDn6HWPI4FQ6WjYNtBxZ4eS J+EOod0IOT6FEwFhGXXVfaknVVzcoFbtPwKDEPPIGrI3tWXr1QckgNALtCt984YX 1hj4CReIEo4jhnQCf6IbDY2WJ6A5M4LvnThdqiD1qe4VvOthHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnSiduvQlQVMSPyoglDFxbq4ZfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNTMxZDRiYzctOWEyMS0z NGJkLTk3NjYtMTRkMDA4Yzg3MjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8FwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABvTQlDllXEWrvzvammmemAL4Tt0hKAiqNQg1p6QIipSE1nsUpjpvHx QqFRUiOPLw9SAiDpqOPzLwh7lDURDYUwUfKXFDkVqWW2eJ5+3ZulhALX9bwIvuzq 40m9M63eoYUZKhhet09KKAAOGnB5RrBpxsUcQTVNZcHTAu6nFoWR/KTM/4n2CpU4 jt+TPW8yoyTJ2eTJ4KRARz68fOEbCnDpc73jNgpaX0UQGqbWpqvJPhoTbNPcocc6 rqHcXEP82SJe7wY5BnzG7fqWOiQvNabxluI2fiyWdUvBqQOhCqVfuUz7GcMxzQSI UI0q51AkG0hfNvEyPeGeQ6wKt+URfnM= -----END CERTIFICATE-----Generated at Sat Sep 26 09:33:22 2026 by rpki-client