$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa File: 5c388c98-e698-3634-a1c7-a223e82c1398.roa (raw, json) Hash identifier: TVyWEphUVQ/8myO1IiayoTQo/uk5bwQGH9cF+k1Lf+o= Subject key identifier: 3F:A9:3E:ED:A7:67:B2:E5:BD:94:E4:F8:9B:5A:34:3A:A5:C0:82:5E Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584F20F7ABC457F49C3DA853A5C0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 29802 IP address blocks: 66.232.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ab:c4:57:f4:9c:3d:a8:53:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=b2b16f27-64f7-41cc-8798-682af8d1c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bb:33:2f:57:ec:6d:6e:bb:a2:09:65:95:ce: 52:ad:2a:9e:8b:c0:d6:47:1b:49:3b:46:7c:21:b9: 0e:ef:fe:a5:99:f6:1b:91:52:a2:e9:61:d7:8a:15: a4:23:d4:8c:56:05:dc:33:64:a4:4b:c6:b1:9d:76: 70:86:a7:f4:22:08:fc:21:d6:45:f5:60:e6:5f:bf: 40:33:3c:28:f2:21:a9:91:12:ad:eb:d3:cf:3f:bb: 71:21:29:25:26:5f:2c:62:d1:c5:05:cd:c3:ff:37: 88:18:70:68:ea:ad:5f:b3:40:6c:51:76:f9:8e:96: c2:94:41:a9:a2:84:6b:89:b2:0c:81:30:cb:21:7c: fc:79:e1:4e:71:be:75:37:e9:89:17:d6:6a:76:c9: 1d:19:05:98:33:36:b0:e4:26:2e:d0:80:58:e9:e2: 01:e6:2d:90:e3:1e:fb:fb:e2:a7:92:c5:57:97:33: 1e:21:7a:1c:97:2c:13:ea:0f:7e:2d:e5:49:f8:cb: d0:d2:38:c4:fe:42:d3:a6:26:e7:a2:27:55:e4:ac: 42:72:92:95:53:5b:af:46:c4:f1:e1:20:77:e2:69: fe:1a:fb:41:37:33:04:e8:2f:29:77:e6:79:e7:66: e8:73:20:7e:5b:60:06:64:9a:d6:26:45:e0:6b:40: a6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A9:3E:ED:A7:67:B2:E5:BD:94:E4:F8:9B:5A:34:3A:A5:C0:82:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 66.232.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:2e:6b:4f:3d:fa:62:7c:a1:85:eb:29:cb:64:91:97:41:03: f8:95:29:63:00:a3:ee:d5:a9:44:20:72:82:99:33:bf:f0:3a: b2:bf:cc:13:63:19:7e:6a:71:11:21:80:1f:ac:7d:5a:56:17: 6c:65:6b:d2:b3:6f:8a:f7:17:71:73:d0:f7:57:ae:f8:c3:d7: 0e:eb:85:31:c5:f7:5f:39:3f:81:29:73:20:76:54:4c:6f:bd: b0:8d:3b:38:40:ca:eb:54:64:82:6c:a0:ba:88:14:a5:06:c0: e5:78:a5:28:9b:cd:76:e8:24:59:b2:3b:58:7e:aa:64:d6:ad: c2:45:db:62:c1:a2:49:e2:79:b6:00:30:09:a6:c3:84:94:d5: d1:20:ab:0b:86:bf:3c:97:0d:c4:93:f4:4c:16:d8:a3:14:a5: 92:16:0f:85:9b:c9:bb:c5:c5:b0:4a:21:98:f1:c8:2e:f1:de: 62:fc:65:9f:13:02:f2:ad:97:bb:6c:66:1c:c8:68:e6:9f:ef: e4:d4:b0:22:b7:a3:42:03:a5:9d:b2:cf:a7:3a:0e:e2:90:35: 10:04:85:c8:fa:cf:58:57:1f:e2:ad:95:10:ff:2b:b2:28:2c: ff:0d:4f:b7:9b:f3:51:d6:ac:22:39:16:93:c6:68:40:1b:44: cf:b2:47:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96vEV/ScPahTpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YjJiMTZmMjctNjRmNy00MWNjLTg3OTgtNjgyYWY4ZDFjODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7szL1fsbW67oglllc5SrSqei8DWRxtJO0Z8 IbkO7/6lmfYbkVKi6WHXihWkI9SMVgXcM2SkS8axnXZwhqf0Igj8IdZF9WDmX79A Mzwo8iGpkRKt69PPP7txISklJl8sYtHFBc3D/zeIGHBo6q1fs0BsUXb5jpbClEGp ooRribIMgTDLIXz8eeFOcb51N+mJF9ZqdskdGQWYMzaw5CYu0IBY6eIB5i2Q4x77 ++KnksVXlzMeIXoclywT6g9+LeVJ+MvQ0jjE/kLTpibnoidV5KxCcpKVU1uvRsTx 4SB34mn+GvtBNzME6C8pd+Z552bocyB+W2AGZJrWJkXga0CmwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+pPu2nZ7LlvZTk+JtaNDqlwIJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNWMzODhjOTgtZTY5OC0z NjM0LWExYzctYTIyM2U4MmMxMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQuhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUua089+mJ8oYXrKctkkZdBA/iVKWMAo+7VqUQgcoKZM7/wOrK/zBNj GX5qcREhgB+sfVpWF2xla9Kzb4r3F3Fz0PdXrvjD1w7rhTHF9185P4EpcyB2VExv vbCNOzhAyutUZIJsoLqIFKUGwOV4pSibzXboJFmyO1h+qmTWrcJF22LBokniebYA MAmmw4SU1dEgqwuGvzyXDcST9EwW2KMUpZIWD4WbybvFxbBKIZjxyC7x3mL8ZZ8T AvKtl7tsZhzIaOaf7+TUsCK3o0IDpZ2yz6c6DuKQNRAEhcj6z1hXH+KtlRD/K7Io LP8NT7eb81HWrCI5FpPGaEAbRM+yR58= -----END CERTIFICATE-----Generated at Sun Sep 27 18:41:39 2026 by rpki-client