$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa File: 8a510825-83bf-3885-90a1-e8e8bfb13779.roa (raw, json) Hash identifier: JqLxctNzk6VjH9DFUx2xLXUA49ub7TSAGwjiu03OiOU= Subject key identifier: B8:68:6E:20:57:B4:D6:A8:D3:72:26:0A:74:C6:8F:89:AE:C0:93:F6 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F4328584D9E500B6C153FA235FCF75D00 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 29802 IP address blocks: 23.227.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0b:6c:15:3f:a2:35:fc:f7:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=6d2d2c38-04d4-476b-86fc-476b81490233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:3e:0a:c7:37:48:3d:b9:72:b0:8b:cf:2f: d5:c9:3b:af:f7:ce:d0:5f:bb:ab:a5:be:99:a7:fd: db:e5:9b:7d:cd:ee:e3:48:a9:75:83:df:16:ff:a8: 8b:85:7c:49:4f:f8:71:52:c9:53:c6:f3:5b:49:df: fc:95:d6:e7:8a:2a:d3:d8:09:fc:36:7c:13:1d:a7: 00:28:82:65:0e:b7:6d:dd:5d:73:b5:89:b4:57:df: 57:3f:f9:6a:e3:74:45:fd:9a:a6:7a:99:3d:35:d8: c8:4d:07:95:6a:43:75:50:f0:1c:b0:6f:4a:dc:41: 4f:f9:60:93:9b:f0:8e:63:8c:f0:96:ff:2f:72:04: 87:d2:81:02:8a:16:80:b6:d5:5f:f5:25:2a:29:fb: 98:6a:b8:ab:f5:e7:bb:a5:55:27:2e:76:91:eb:08: e4:7d:0a:d5:b4:2a:66:2b:ad:7f:4b:2c:95:7d:48: 1a:8d:6e:75:50:54:40:17:9a:6e:65:8c:80:a9:55: 8e:c3:8c:f3:0a:fa:83:17:36:00:ac:9c:b6:7c:45: 10:89:42:b2:c3:92:59:51:0c:3b:43:54:3d:ff:77: d2:3b:0c:6f:f6:57:00:50:50:26:72:57:99:39:d7: dd:1c:09:4b:0b:53:ec:66:86:ba:94:dc:0c:bc:28: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:68:6E:20:57:B4:D6:A8:D3:72:26:0A:74:C6:8F:89:AE:C0:93:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/8a510825-83bf-3885-90a1-e8e8bfb13779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv4: 23.227.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:63:19:35:e2:f7:41:b9:b4:c4:5f:60:e2:4c:c1:4e:42:48: 1d:5b:76:55:89:38:d9:af:28:a5:b8:14:d1:ac:33:0e:88:f9: dd:ad:a7:1e:f8:79:2b:76:54:a4:a2:a4:61:9d:52:a3:da:98: 63:f7:13:d3:a2:e9:90:78:56:08:fe:99:12:fb:cf:1d:a7:0a: b9:ed:1c:25:a4:bd:c2:c1:16:19:a9:6f:e6:18:f1:7e:78:30: 67:2c:b1:42:2b:41:12:23:5c:39:f8:1b:38:95:a6:be:86:b7: 1e:fd:73:a1:50:66:74:5e:20:b6:45:2a:f0:ac:a0:09:b1:74: 8f:b8:c0:bf:62:4f:a4:6b:5d:9a:cb:b2:5b:af:a2:87:fd:81: ec:c4:98:1a:3d:2a:5a:7c:7c:ac:0a:03:46:95:1c:04:e3:64: 65:78:39:53:36:eb:d6:34:d7:89:44:23:f5:c5:9b:19:ec:99: 83:33:17:fd:ee:20:16:27:ad:95:4b:ac:e0:e7:aa:b2:91:9b: 33:90:2a:0f:80:c0:fe:57:12:5e:b7:37:bd:90:f8:21:82:7d: 9b:ae:59:8e:b7:8f:be:85:93:89:57:8d:00:35:ce:d1:89:c3: 14:03:9e:12:61:4c:5c:f9:e5:69:82:b7:14:15:64:a2:5b:6f: aa:33:06:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAtsFT+iNfz3XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NmQyZDJjMzgtMDRkNC00NzZiLTg2ZmMtNDc2YjgxNDkwMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijA+Csc3SD25crCLzy/VyTuv987QX7urpb6Z p/3b5Zt9ze7jSKl1g98W/6iLhXxJT/hxUslTxvNbSd/8ldbniirT2An8NnwTHacA KIJlDrdt3V1ztYm0V99XP/lq43RF/Zqmepk9NdjITQeVakN1UPAcsG9K3EFP+WCT m/COY4zwlv8vcgSH0oECihaAttVf9SUqKfuYarir9ee7pVUnLnaR6wjkfQrVtCpm K61/SyyVfUgajW51UFRAF5puZYyAqVWOw4zzCvqDFzYArJy2fEUQiUKyw5JZUQw7 Q1Q9/3fSOwxv9lcAUFAmcleZOdfdHAlLC1PsZoa6lNwMvCgtSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhobiBXtNao03ImCnTGj4muwJP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvOGE1MTA4MjUtODNiZi0z ODg1LTkwYTEtZThlOGJmYjEzNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtjGTXi90G5tMRfYOJMwU5CSB1bdlWJONmvKKW4FNGsMw6I+d2tpx74 eSt2VKSipGGdUqPamGP3E9Oi6ZB4Vgj+mRL7zx2nCrntHCWkvcLBFhmpb+YY8X54 MGcssUIrQRIjXDn4GziVpr6Gtx79c6FQZnReILZFKvCsoAmxdI+4wL9iT6RrXZrL sluvoof9gezEmBo9Klp8fKwKA0aVHATjZGV4OVM269Y014lEI/XFmxnsmYMzF/3u IBYnrZVLrODnqrKRmzOQKg+AwP5XEl63N72Q+CGCfZuuWY63j76Fk4lXjQA1ztGJ wxQDnhJhTFz55WmCtxQVZKJbb6ozBn4= -----END CERTIFICATE-----Generated at Wed May 13 07:25:19 2026 by rpki-client